Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: 0nUOY/unjaoHNLi9mKiBC2IaT04s2M9Mg82zQZrzZWE=
Subject key identifier: B0:B7:B3:8A:8A:13:4C:44:F9:22:D1:E3:8B:D3:9A:AE:6F:69:86:49
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 01984776A4B2D81336540905B0600F0C0DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 073C
Signing time: Sat 26 Jul 2025 16:00:14 +0000
Manifest this update: Sat 26 Jul 2025 16:00:14 +0000
Manifest next update: Sun 27 Jul 2025 16:00:14 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: ptl1U117ym3BEQcrM/nuXu94Piq8k8v9vWCWvqpDYNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:a4:b2:d8:13:36:54:09:05:b0:60:0f:0c:0d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Jul 26 16:00:14 2025 GMT
Not After : Jul 27 16:00:14 2025 GMT
Subject: CN=b0b7b38a8a134c44f922d1e38bd39aae6f698649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:9e:65:58:05:e2:97:33:fc:e0:6a:c8:63:
7e:05:e1:69:71:59:81:68:8c:84:e9:4b:98:47:50:
49:24:0c:b0:b1:ce:5f:07:ef:2b:b1:3b:c3:bf:c5:
c9:5f:5e:2a:ba:1a:99:7c:06:fa:a2:26:41:ae:4d:
5a:16:ba:71:2c:d0:8b:e3:79:9f:cb:ea:2f:1a:ae:
62:b3:8a:0f:cd:c7:c0:90:39:1b:4b:d7:a2:90:7b:
81:67:e7:49:eb:f9:d5:cf:f6:20:5f:39:60:4e:4d:
b4:ec:ac:ec:60:b2:c6:3b:79:1a:9e:dc:8e:e1:be:
6a:88:c5:14:38:e7:92:56:5f:c5:4b:76:c5:09:b9:
8d:93:66:43:99:7b:fd:11:38:28:21:46:b2:ef:29:
98:14:18:3e:64:a9:4e:16:08:9d:54:37:d4:7a:1f:
2e:7c:bb:98:03:34:d5:94:f9:ac:e2:d8:c4:7e:60:
97:32:88:b9:54:06:b0:21:9c:4e:92:a2:56:d4:a3:
cd:0b:1d:87:af:41:16:3f:a2:44:d0:b2:44:99:0b:
76:62:6f:ed:2f:d1:74:67:d4:20:f7:cc:09:3c:8f:
a6:cf:fe:d8:73:78:08:89:5e:2f:29:21:0b:14:54:
46:bf:62:ae:73:0b:7a:32:3d:e1:69:3b:d1:f0:51:
24:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B7:B3:8A:8A:13:4C:44:F9:22:D1:E3:8B:D3:9A:AE:6F:69:86:49
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3d:72:8a:a7:b8:2a:87:d6:87:ec:ed:d7:ae:22:13:f0:5f:
ef:d9:93:a6:e0:7b:7e:a2:dc:d2:20:4f:cf:27:38:10:98:2a:
fa:09:df:1a:e1:43:86:ba:fb:75:0b:8e:e3:21:98:ac:18:b8:
22:fb:c5:82:85:ee:56:e0:1d:65:ef:a8:86:80:d9:45:0f:07:
cd:70:c6:37:f6:c9:49:2d:9d:d0:c5:f4:85:90:9d:33:c3:17:
85:70:1b:02:41:28:8f:9c:4b:46:57:68:0e:c3:e7:a6:58:2f:
12:5e:2a:61:16:86:a4:61:c2:c5:4a:ae:76:7a:a5:b7:9d:49:
24:f0:8e:5e:0b:60:0b:a5:ff:31:ed:07:5a:c9:44:ab:61:b8:
0f:2d:b2:ff:f3:17:84:c9:71:1d:df:ff:85:fb:ff:00:e2:00:
ba:3a:3c:66:36:38:76:53:27:7c:2e:9e:47:0a:c1:e4:62:2a:
f2:19:2e:3c:c9:cd:b7:b5:99:cc:7f:1e:62:55:bc:65:e3:5b:
52:bb:5d:5e:d1:50:0c:77:70:bc:9f:e7:5f:a7:16:d5:9b:99:
c4:2c:5a:e4:f9:3c:d1:66:be:45:fe:3a:e3:16:a4:45:48:8e:
d9:14:7c:ae:bc:a8:02:57:8b:83:c6:db:cd:fc:4a:4c:1d:d9:
f2:3b:72:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:23:10 2025 by rpki-client