Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: Vx4+vGNqbjL6MJFOeR1at6IFYJMK9C2G7FuvkdntxqQ=
Subject key identifier: 8D:09:52:AA:82:18:CD:F9:09:EB:95:D3:C1:53:7D:A9:46:0C:81:14
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 0198D65FA2CEA6B92A6608EF1A6C848D71A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 0D7F
Signing time: Sat 23 Aug 2025 10:00:48 +0000
Manifest this update: Sat 23 Aug 2025 10:00:48 +0000
Manifest next update: Sun 24 Aug 2025 10:00:48 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: u3Pf31gyvD/PTjnVIwLn3/9L/2/cVU/pRsaib2skOrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a2:ce:a6:b9:2a:66:08:ef:1a:6c:84:8d:71:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Aug 23 10:00:48 2025 GMT
Not After : Aug 24 10:00:48 2025 GMT
Subject: CN=8d0952aa8218cdf909eb95d3c1537da9460c8114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:b3:ed:72:10:81:0a:b6:2f:00:29:38:1c:
fe:8d:75:29:af:f5:f3:dd:9e:1c:93:1d:c7:cc:c2:
cd:13:3c:d6:7d:b5:f8:72:a4:e3:c5:a1:7b:ff:e6:
66:3e:36:b6:ff:f4:15:2e:14:47:97:b9:f1:98:59:
ec:b0:0a:bd:30:b6:d6:46:8c:2a:83:65:4f:2b:6f:
38:52:a7:df:19:9b:99:c6:7a:9e:f2:cf:03:75:12:
35:43:9d:64:c4:b3:ff:23:ce:65:60:06:aa:74:c4:
8f:2d:5b:e0:57:a3:b6:2a:44:9f:60:5b:cf:f4:93:
d0:4e:c0:e7:8d:6c:79:71:c0:38:07:81:9b:a6:a4:
ed:09:cd:a3:2b:b6:10:98:fa:f3:04:db:63:45:84:
6f:62:4c:58:91:d5:53:9a:88:fe:67:c2:36:e5:52:
d3:5c:5f:e3:a0:58:27:9d:9d:8a:42:fd:6b:36:55:
f4:21:a6:7f:c7:33:92:70:2a:d6:5a:7e:6f:e8:19:
d9:9c:ca:b6:1d:79:ad:c3:a9:44:ed:03:a3:c3:6f:
be:5c:42:97:98:22:45:37:82:49:49:6a:6e:da:c4:
2a:2b:e5:ab:6e:d9:61:fd:13:6f:f5:00:b5:c9:bf:
a7:7b:0e:36:22:17:61:93:ea:5f:64:49:2e:05:59:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:09:52:AA:82:18:CD:F9:09:EB:95:D3:C1:53:7D:A9:46:0C:81:14
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:32:01:9f:6f:b0:fe:33:34:6e:98:dc:24:a0:4b:32:1c:55:
45:6e:cf:02:b7:03:48:c2:40:f7:49:67:31:0a:c9:57:3e:72:
3a:37:0e:e1:ca:bb:96:a6:00:af:a4:62:7f:42:e4:4c:8e:a2:
ff:e6:9e:9f:70:d3:dd:f7:64:52:ab:0d:d7:92:d8:fb:71:ce:
8d:44:c4:67:c1:8b:9a:b1:a3:4c:27:db:0f:90:90:8c:2d:1e:
2f:3a:ea:5c:35:56:fc:60:50:11:68:e1:73:c5:f1:15:61:91:
30:61:56:a7:4c:56:b1:49:30:5e:9f:9d:ba:a1:e9:2a:b0:12:
ed:7c:61:b7:09:71:aa:1d:10:ff:51:09:e7:fb:0a:36:b7:9d:
10:49:ee:64:d0:63:d8:fc:fa:9f:b2:01:5c:4a:fa:0f:49:ce:
9a:f0:2e:e3:ad:5d:dc:d4:f4:4b:50:8e:23:3d:f1:4d:e6:b0:
75:d6:2c:e8:6c:8c:6b:5f:73:0f:14:cd:0d:c5:1e:8b:b1:55:
f5:5e:a0:98:5e:24:a7:88:f5:29:d1:30:81:82:48:c6:9e:89:
f0:72:20:f9:96:c5:3b:51:01:fe:9d:0f:30:f9:10:3b:f7:1e:
5d:34:9b:c2:b1:3c:a8:5d:20:6e:df:5f:b0:37:c5:b9:94:a0:
d8:aa:6e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:39 2025 by rpki-client