Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: QzvChwmsrPNwCo7QFuELgxxa069hUggPpfJAXldGkBo=
Subject key identifier: 1C:51:3C:7B:40:94:09:D0:64:34:24:0D:44:BA:1B:D1:D6:5B:9E:98
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 0198D65F356A08007B728CF9A83E52256AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:20 +0000
Manifest this update: Sat 23 Aug 2025 10:00:20 +0000
Manifest next update: Sun 24 Aug 2025 10:00:20 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: oPVPx9V5v/Y5TDXRBK/YtEfW/4O8W9wV9Tr3UsHfdpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:35:6a:08:00:7b:72:8c:f9:a8:3e:52:25:6a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Aug 23 10:00:20 2025 GMT
Not After : Aug 24 10:00:20 2025 GMT
Subject: CN=1c513c7b409409d06434240d44ba1bd1d65b9e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:05:38:3f:06:62:d0:4a:1b:79:f1:6f:ee:
ce:27:ed:78:98:9d:e4:3b:08:46:b8:00:6f:fa:c3:
b2:94:ba:e1:60:ca:f3:b8:20:00:ad:c2:82:a4:ba:
22:9d:83:0d:bb:74:53:25:57:52:73:44:c3:a4:4e:
19:75:03:ba:6e:d6:3a:ee:5d:0d:92:fa:5d:ef:c3:
5e:e5:55:33:8b:b2:16:56:ce:a9:e5:5c:bb:e6:f1:
aa:89:3d:72:e8:27:81:2e:f9:c2:ce:5f:33:4e:06:
61:82:58:70:e8:e8:a2:65:a3:3b:8c:84:00:f0:0a:
12:07:18:46:19:6e:fd:7b:2e:d7:a6:b7:27:28:33:
97:73:f0:b2:de:fe:0a:32:31:39:de:81:57:32:c2:
ee:9c:8b:51:ce:b5:ab:7d:e6:c9:63:55:16:d9:68:
7f:42:17:10:b3:02:6a:5d:cc:87:f0:e0:dc:13:83:
a8:7e:25:2d:c1:04:10:37:d9:d5:11:0e:58:1f:3b:
45:a1:b0:24:e3:75:d3:1c:ae:a1:68:bf:7d:14:44:
31:a7:83:b5:93:f3:f2:e5:1e:1f:2d:7c:47:18:b8:
b8:78:f1:e3:f2:af:8e:63:8c:a4:ef:76:aa:f1:62:
ea:42:b1:f9:ab:98:e4:c8:2b:0f:71:d6:98:f4:2b:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:51:3C:7B:40:94:09:D0:64:34:24:0D:44:BA:1B:D1:D6:5B:9E:98
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:66:84:be:17:ee:b5:ad:b3:00:4e:f6:71:43:5a:70:6b:fa:
17:e8:9f:a6:35:a7:90:4c:5b:d9:0d:7a:24:fa:53:1a:9e:bf:
2d:50:cd:46:9f:45:29:ce:4c:4f:4b:5a:79:05:4c:bf:89:45:
33:1e:d1:bd:b1:08:5c:09:f9:91:48:e4:5d:87:da:be:00:53:
d7:0f:87:34:53:29:7a:2a:81:7d:f1:26:24:94:6f:8c:ef:f7:
f5:a9:b1:22:5e:fa:57:d1:39:0f:4b:be:94:63:40:cb:6a:ab:
6c:0c:35:e0:51:3f:fc:47:96:08:ba:3d:72:ee:4e:24:80:b0:
d7:4f:11:57:c2:e8:be:72:7f:fc:ee:9e:4c:dd:b5:77:a9:d6:
18:87:bb:ff:1e:37:93:f3:9d:78:25:db:32:03:e4:d6:c6:3c:
ac:e4:e6:15:f8:ab:94:88:dc:ef:fc:ad:03:f1:d1:8d:1d:87:
d5:89:2a:77:58:1a:25:ae:47:af:15:46:02:22:a5:69:00:f7:
ed:4e:2c:91:da:fa:2a:e7:96:b2:0b:9f:00:4d:27:04:6f:c6:
a9:11:f7:95:f8:a5:4f:eb:10:2b:65:dc:e3:74:b7:2c:48:30:
50:1e:93:33:ed:c3:41:c8:7d:ad:08:05:03:6e:e2:02:27:c3:
20:96:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:32 2025 by rpki-client