Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
File: HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft (raw, json)
Hash identifier: vqjIyzXKqd1hyjQZapNMs9Nc5I/pLkV4h8YYTy8Zdjg=
Subject key identifier: 34:3E:12:66:21:59:94:33:F6:4D:FE:D4:77:27:64:0E:5C:D2:73:63
Authority key identifier: 1C:1C:75:4B:7A:5B:54:18:92:54:0D:24:AB:98:D3:15:37:97:45:74
Certificate issuer: /CN=1c1c754b7a5b541892540d24ab98d31537974574
Certificate serial: 0198D51625E997D711BA09D70DD9C5CCA496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 04:00:55 +0000
Manifest this update: Sat 23 Aug 2025 04:00:55 +0000
Manifest next update: Sun 24 Aug 2025 04:00:55 +0000
Files and hashes: 1: HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl (hash: hOx2cflyW+n5DycWkyjpxRVak8xDLHTiqsmUR2b8qlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:25:e9:97:d7:11:ba:09:d7:0d:d9:c5:cc:a4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c1c754b7a5b541892540d24ab98d31537974574
Validity
Not Before: Aug 23 04:00:55 2025 GMT
Not After : Aug 24 04:00:55 2025 GMT
Subject: CN=343e126621599433f64dfed47727640e5cd27363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:4e:28:48:d5:14:69:ec:71:fb:09:62:f9:
55:76:a9:3b:f9:00:82:24:6e:80:74:c2:91:f1:b6:
ae:f0:84:d0:72:e0:a7:7b:d4:23:17:3c:b6:14:ce:
61:ec:96:29:49:fc:0a:f3:54:7c:f1:1c:70:c6:27:
1e:88:76:eb:9c:16:34:40:9c:25:3a:d3:2c:3a:e7:
89:2c:ff:f1:1a:b6:d4:4d:09:e4:34:30:88:16:6b:
64:c3:1c:b2:69:b5:d3:a8:b1:dd:af:35:26:f1:10:
3f:67:26:87:99:ae:39:8f:ee:31:54:c4:96:8a:1a:
ae:51:44:c7:fc:2f:8b:ee:27:83:29:87:4e:b6:f6:
d1:0c:4f:c5:0a:69:53:7f:b2:9c:21:cf:42:5d:96:
9c:99:94:9e:50:b9:a5:1f:37:10:2d:b5:d7:64:3b:
a7:db:bf:c9:c5:7c:67:7c:0f:cd:6b:70:df:d3:da:
07:a0:ac:e9:ea:b2:7b:ca:74:1a:b5:a2:92:1d:1d:
d7:31:d1:88:84:47:f5:71:03:ab:62:75:d3:8b:5c:
cb:cd:b0:ac:59:14:5a:2c:5b:4b:b2:1b:12:68:e2:
72:ca:a4:64:35:12:89:d5:2a:44:06:49:1a:62:6b:
fe:05:0d:a8:8f:2c:4c:80:7f:c3:4c:9c:03:0c:19:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:12:66:21:59:94:33:F6:4D:FE:D4:77:27:64:0E:5C:D2:73:63
X509v3 Authority Key Identifier:
keyid:1C:1C:75:4B:7A:5B:54:18:92:54:0D:24:AB:98:D3:15:37:97:45:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a6:79:89:f6:e7:6c:62:bf:ba:2f:21:6c:6a:2f:9b:55:c7:
a0:03:9a:77:9e:f4:b5:c9:15:f7:16:92:12:32:d3:9b:e0:22:
94:30:e0:e6:03:0b:4b:b9:12:d5:a8:23:84:74:1a:a0:75:97:
c5:68:13:a5:ff:7e:e6:a8:ce:b2:39:31:0d:4a:26:52:35:14:
62:44:78:61:7c:4c:a9:45:5b:ab:2e:7e:ad:e4:88:2f:10:3b:
a7:a8:e9:92:65:34:9e:1c:b7:f1:4f:9e:9d:5a:3d:3e:2e:63:
90:31:23:51:90:29:c2:be:32:20:34:89:da:05:ac:03:b3:81:
0c:18:1c:44:e2:7a:64:02:10:61:e9:e3:00:fa:45:ca:8c:e6:
db:9f:4b:3e:90:ca:21:a6:12:75:db:75:b8:ed:16:35:94:3f:
97:4b:6c:96:31:26:86:62:4b:d6:15:fe:83:85:0e:0d:b5:d9:
13:0f:3c:c2:a9:ad:eb:ee:df:98:42:61:2a:67:ed:8e:ee:05:
04:2a:3e:fe:6b:ba:4b:d7:9e:d5:56:0c:d6:52:2e:18:85:f7:
d8:1a:46:50:72:34:1f:36:76:3a:81:d6:b5:d4:ee:10:f1:e0:
00:0b:5c:79:64:22:dc:b7:75:b8:ba:ff:d1:58:7a:31:b7:08:
fa:c0:6e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:26 2025 by rpki-client