Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
File: HFGW3tW6XWhucJXG1cY4xrj4uto.mft (raw, json)
Hash identifier: 2zG90GBc4jK3XRhC4xyvnkTMRtSYTVmuEtLt5I6/Qdc=
Subject key identifier: B1:FD:2E:C3:91:57:60:77:CF:BB:0F:1B:84:38:A6:62:15:63:64:82
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 0198D65F70D8D3395C5A2A8652AD72FB5754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
Manifest number: 0F8F
Signing time: Sat 23 Aug 2025 10:00:35 +0000
Manifest this update: Sat 23 Aug 2025 10:00:35 +0000
Manifest next update: Sun 24 Aug 2025 10:00:35 +0000
Files and hashes: 1: HFGW3tW6XWhucJXG1cY4xrj4uto.crl (hash: S2ciw//oyqFciI8I9XRsRWArF+MuUtNc28tTr4bTzyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:70:d8:d3:39:5c:5a:2a:86:52:ad:72:fb:57:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Aug 23 10:00:35 2025 GMT
Not After : Aug 24 10:00:35 2025 GMT
Subject: CN=b1fd2ec391576077cfbb0f1b8438a66215636482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:09:52:b5:c4:ab:db:69:b5:fc:e6:5b:50:
f9:ef:48:e0:e2:a1:4e:51:4a:46:ca:52:e6:1e:87:
02:fb:0d:57:a0:4d:25:9d:49:b2:54:d1:3d:ac:5f:
fd:60:87:75:d7:fe:49:b9:66:03:37:63:f9:d6:8c:
1b:47:d3:41:01:72:24:cc:f1:e7:e3:56:96:7a:d6:
51:8a:42:57:5d:b1:2a:36:a9:3e:02:41:4e:0a:24:
c0:bf:35:d9:8b:d9:5f:7c:8b:44:54:f2:e3:46:f8:
41:08:5e:fc:43:95:11:d6:9f:11:96:81:b6:04:c6:
b1:db:5e:12:9a:2b:65:b0:94:31:05:45:32:5a:24:
5b:44:bc:00:b5:89:d0:9a:30:e7:f5:30:0b:9b:a9:
e3:47:92:fd:4f:19:97:a2:14:00:de:50:e8:65:f6:
06:23:d0:f1:c4:bc:1b:6f:2b:6f:98:35:51:06:eb:
50:2f:31:f7:0f:55:a6:38:70:7d:88:d4:7c:a9:c7:
a7:bd:85:0e:04:12:f1:87:99:89:61:60:d4:b3:0c:
db:74:4a:13:95:f0:bd:a7:c0:81:a1:32:0d:ce:68:
39:5f:f9:83:9f:1b:d5:73:41:ae:02:51:1e:91:67:
46:5a:45:3f:47:ce:23:c6:a0:b2:ee:8b:4d:84:04:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FD:2E:C3:91:57:60:77:CF:BB:0F:1B:84:38:A6:62:15:63:64:82
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3f:c4:84:1d:d8:db:2c:fc:53:38:63:76:6f:df:98:94:6d:
10:c9:dc:8a:34:e5:e9:11:9c:77:cf:00:5b:e1:d3:96:80:d5:
89:b0:4c:0b:ff:f4:64:e6:54:1b:d9:fd:8e:07:2f:ff:bf:6e:
99:43:51:7b:39:c2:8f:b0:2a:3a:22:2a:56:69:c5:50:d2:ef:
8c:78:17:c8:96:ef:46:27:8e:1f:33:9a:95:66:b6:b8:ba:3e:
28:6f:26:76:ba:95:b1:07:18:4f:8d:04:9f:63:0f:6d:74:6c:
78:8b:89:d3:77:56:ff:fe:76:3d:5b:63:bc:b2:f8:b8:03:3f:
71:08:9d:04:f3:29:f5:ba:7f:f1:34:e7:fa:d1:c1:2b:f2:76:
c5:fa:6b:ad:f4:34:23:1a:5e:45:a7:54:be:30:b9:24:3c:77:
a1:c7:ec:8c:ff:cf:dc:b2:63:d4:67:6f:fd:4d:ed:0b:cf:94:
dc:9d:9e:b1:91:67:18:1d:c0:77:47:8b:a4:13:a0:99:ff:ee:
fd:30:ab:3d:36:45:bf:6f:42:81:5b:69:d8:c4:87:bd:e4:ea:
e5:fb:90:c3:2e:0d:b6:90:5c:26:98:63:56:1b:2d:ed:a0:4a:
c7:a9:ca:50:1c:bd:3e:d7:a9:7b:05:15:29:52:3b:21:c0:f4:
f4:36:c9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:27 2025 by rpki-client