Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
File: r_HNv5fWyiB-XciFq8_2ccwVyRA.mft (raw, json)
Hash identifier: pbcuIDUPVmYYYdhvBxhXxhqqgJJZXaMm+oLfTxMz8vM=
Subject key identifier: 97:D3:D6:0C:C2:18:B3:4A:C6:20:E2:F4:69:EC:74:6E:42:D7:AA:7F
Authority key identifier: AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
Certificate issuer: /CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Certificate serial: 0198D6613DF26D93DE62D10E188A0CA645FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
Manifest number: 0B3F
Signing time: Sat 23 Aug 2025 10:02:33 +0000
Manifest this update: Sat 23 Aug 2025 10:02:33 +0000
Manifest next update: Sun 24 Aug 2025 10:02:33 +0000
Files and hashes: 1: r_HNv5fWyiB-XciFq8_2ccwVyRA.crl (hash: Si5OSNONPVzGpIK8Ax+0LAXpg8n4D4hgjxM4lKSPExY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:3d:f2:6d:93:de:62:d1:0e:18:8a:0c:a6:45:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Validity
Not Before: Aug 23 10:02:33 2025 GMT
Not After : Aug 24 10:02:33 2025 GMT
Subject: CN=97d3d60cc218b34ac620e2f469ec746e42d7aa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:39:13:ee:99:e2:1b:e7:44:c9:2a:3e:6b:
22:e1:16:a8:d5:20:58:de:e1:e8:f9:c8:f4:b7:d6:
73:0f:57:c4:1d:d8:12:a4:a6:b6:d7:51:27:6e:fa:
5e:eb:e3:c5:5d:8c:e7:54:e1:11:74:6e:52:c7:fd:
88:9e:7a:6f:03:1f:d7:da:e9:49:68:d1:17:3e:f7:
9b:4c:7d:93:01:3a:ff:b0:c9:ba:1e:85:5f:59:c5:
16:3c:e0:1f:8f:3e:cd:76:e3:7b:54:bb:cd:6e:0a:
7f:70:4a:18:6d:3f:b9:be:32:24:0d:73:a1:12:85:
d7:fc:0e:54:66:19:f5:6d:9f:24:78:0b:a8:b1:62:
68:4b:e3:9b:a0:c1:89:61:ac:6e:ad:33:1d:57:ff:
ae:c9:8d:5a:1b:ff:47:4e:4f:11:60:5e:02:73:ce:
8f:a9:ab:a9:a5:8c:0a:ee:38:74:c0:67:22:25:c5:
f4:f3:30:54:1b:ca:5f:b3:f9:5f:c7:9c:39:2d:c6:
bd:03:72:91:51:83:2b:e9:41:30:d7:a0:6c:9f:af:
7b:a6:de:d5:d6:8d:ec:c3:b2:50:68:e9:5e:9d:b7:
5a:84:af:85:80:f4:3a:44:c7:7d:1d:03:cc:be:09:
f7:51:0f:4a:4f:0d:ee:c1:6b:99:6e:cb:ae:e7:16:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:D6:0C:C2:18:B3:4A:C6:20:E2:F4:69:EC:74:6E:42:D7:AA:7F
X509v3 Authority Key Identifier:
keyid:AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7e:21:f1:1b:cc:e6:58:45:db:2d:f3:47:ff:04:ef:12:d0:
1f:07:78:d1:96:12:74:c1:c1:62:ef:ac:60:0b:f2:29:cf:6d:
57:04:38:ff:08:e5:91:56:69:1c:fb:e6:0e:b4:2e:16:3b:cb:
50:c9:92:07:c3:bf:09:ab:94:48:5b:b5:ee:f2:06:84:ad:7b:
00:79:11:36:a7:6c:e3:9d:e1:85:65:14:bf:15:7f:54:8a:f2:
bf:78:b9:f4:06:7d:44:14:62:4e:2e:82:86:5a:bf:16:1e:80:
a4:58:15:32:28:ff:eb:72:1e:55:09:d4:dc:f7:f5:c8:56:05:
31:2e:4b:b4:10:d3:dd:bd:c8:3e:52:04:a2:a9:6e:2f:89:64:
48:c9:77:b9:75:f3:70:47:c7:d9:cb:0a:a2:de:dd:b3:48:90:
6f:de:aa:9d:ad:9b:3f:51:85:6c:31:93:77:02:90:74:58:7d:
4e:b4:3b:ba:a6:9e:d5:72:43:18:1f:40:c1:02:06:9e:33:1b:
50:a9:72:5f:24:a6:c8:03:6c:87:2d:fd:74:8a:5d:2e:a0:b3:
3c:6a:fb:37:a8:b0:cc:e3:ba:19:49:21:6a:94:7f:89:c1:5f:
c1:ab:9f:61:e3:9b:e6:f4:f8:41:0e:4b:9d:d1:b1:0e:13:ba:
ea:d9:60:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:46:06 2025 by rpki-client