Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
File: HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft (raw, json)
Hash identifier: oAXCWob9qU6hpUbkk/R7DryyeThqR2kpa86DvPiIvaY=
Subject key identifier: 42:95:FB:AA:FE:51:22:AF:E3:1E:0F:13:2F:94:20:3E:6C:BD:C6:75
Authority key identifier: 1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
Certificate issuer: /CN=1f1523928d8e8e54be467976331a0121d42a0067
Certificate serial: 019854FBA559D8FA15CC5039E8A10E46F590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
Manifest number: 1605
Signing time: Tue 29 Jul 2025 07:00:34 +0000
Manifest this update: Tue 29 Jul 2025 07:00:34 +0000
Manifest next update: Wed 30 Jul 2025 07:00:34 +0000
Files and hashes: 1: HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl (hash: 8nHJUzDZxpXNE39pQ2ju2aiYxZGGs9asvnSkyGt/CUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:a5:59:d8:fa:15:cc:50:39:e8:a1:0e:46:f5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1523928d8e8e54be467976331a0121d42a0067
Validity
Not Before: Jul 29 07:00:34 2025 GMT
Not After : Jul 30 07:00:34 2025 GMT
Subject: CN=4295fbaafe5122afe31e0f132f94203e6cbdc675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:c9:9a:3a:18:16:40:68:a2:c6:1a:39:9e:
5c:be:27:0a:24:3c:54:ac:0e:a4:c6:34:18:a0:a0:
b6:e2:1d:14:80:15:56:3a:46:14:78:b3:fd:65:18:
8c:0b:73:1e:e5:3d:2d:8f:a5:d4:07:52:b6:b9:b3:
3b:cb:d8:d1:4d:ca:9c:6f:3b:f8:2b:0b:45:de:f9:
dd:68:fa:b5:db:f3:5f:65:93:9c:4d:1f:bf:5b:34:
f2:10:a9:56:b7:b5:ea:e4:ef:bb:a3:ce:95:21:2a:
ff:cd:16:e1:86:f7:1f:ba:1b:ea:eb:2d:36:1d:2f:
3c:93:ed:78:83:00:09:c8:bc:a5:f6:f8:13:75:79:
81:db:f6:3f:55:a3:b9:6f:ab:b1:3d:49:84:74:e3:
8c:4a:37:97:c7:db:9b:d4:76:db:7d:5f:7c:98:08:
a2:93:78:11:95:8a:80:19:6a:23:ef:7d:94:85:59:
43:9a:c9:9e:28:49:4a:83:ea:e4:3f:31:b3:f2:d1:
3b:b7:ed:97:fa:84:54:f1:c0:ed:ea:70:ca:22:6b:
54:5c:b7:1f:e3:31:0d:a8:55:fe:66:ba:a2:41:ef:
bd:4e:47:a9:b2:9a:03:5a:65:47:fa:cb:20:77:db:
88:a7:ef:db:98:c7:bc:4e:1f:df:b4:8f:29:d0:e9:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:95:FB:AA:FE:51:22:AF:E3:1E:0F:13:2F:94:20:3E:6C:BD:C6:75
X509v3 Authority Key Identifier:
keyid:1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3a:39:16:8e:1a:71:70:da:3d:f5:e7:fc:9d:b6:db:66:6c:
14:0d:de:0c:c3:1c:b9:d0:99:c2:d5:05:95:67:fb:f0:d8:a3:
9f:33:f9:14:e1:9f:f7:29:ba:d0:16:0d:72:3e:e3:9d:d0:7d:
12:dd:a3:db:d9:91:f9:96:1f:cd:46:e5:19:dc:80:ad:f7:54:
cc:cc:ff:8d:b3:ec:09:f3:23:f2:48:ba:47:d1:66:3d:12:f8:
b7:86:e6:ac:ca:62:1a:38:29:79:f0:00:8f:e6:b3:90:04:e4:
81:20:84:8e:b9:e5:60:73:aa:19:f5:cf:88:59:f7:f2:53:28:
89:7a:37:b4:b3:f8:89:97:5c:7f:71:fe:4f:4c:7b:b5:b0:a5:
9a:23:98:65:f1:22:d4:cf:12:8a:43:dd:c4:47:00:50:e1:9e:
14:a7:a0:95:11:72:33:34:9f:2a:86:72:77:87:13:92:c9:a6:
de:5f:07:3f:94:fe:98:b8:da:7a:eb:dc:d5:ec:d0:50:90:45:
7f:f0:08:eb:6a:6c:2c:d6:fa:1c:79:e0:23:e9:04:d9:51:87:
fe:5d:6b:27:5d:4a:c2:b6:fe:d9:97:d9:35:e6:07:ea:d9:3a:
8b:d7:e6:c4:c6:c1:dc:52:3e:85:60:56:e1:aa:1e:50:5a:f7:
7f:9d:a6:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhU+6VZ2PoVzFA56KEORvWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTUyMzkyOGQ4ZThlNTRiZTQ2Nzk3NjMzMWEwMTIxZDQy
YTAwNjcwHhcNMjUwNzI5MDcwMDM0WhcNMjUwNzMwMDcwMDM0WjAzMTEwLwYDVQQD
Eyg0Mjk1ZmJhYWZlNTEyMmFmZTMxZTBmMTMyZjk0MjAzZTZjYmRjNjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGrJmjoYFkBoosYaOZ5cvicKJDxU
rA6kxjQYoKC24h0UgBVWOkYUeLP9ZRiMC3Me5T0tj6XUB1K2ubM7y9jRTcqcbzv4
KwtF3vndaPq12/NfZZOcTR+/WzTyEKlWt7Xq5O+7o86VISr/zRbhhvcfuhvq6y02
HS88k+14gwAJyLyl9vgTdXmB2/Y/VaO5b6uxPUmEdOOMSjeXx9ub1HbbfV98mAii
k3gRlYqAGWoj732UhVlDmsmeKElKg+rkPzGz8tE7t+2X+oRU8cDt6nDKImtUXLcf
4zENqFX+ZrqiQe+9TkepspoDWmVH+ssgd9uIp+/bmMe8Th/ftI8p0OnekwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKV+6r+USKv4x4PEy+UID5svcZ1MB8GA1UdIwQY
MBaAFB8VI5KNjo5UvkZ5djMaASHUKgBnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xODk1MWItYTY1NC00NGI1LWJhNmIt
ODk5ZjlmYmViYjE5LzEvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8xODk1MWItYTY1NC00NGI1LWJhNmItODk5ZjlmYmViYjE5
LzEvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDo5Fo4a
cXDaPfXn/J2222ZsFA3eDMMcudCZwtUFlWf78NijnzP5FOGf9ym60BYNcj7jndB9
Et2j29mR+ZYfzUblGdyArfdUzMz/jbPsCfMj8ki6R9FmPRL4t4bmrMpiGjgpefAA
j+azkATkgSCEjrnlYHOqGfXPiFn38lMoiXo3tLP4iZdcf3H+T0x7tbClmiOYZfEi
1M8SikPdxEcAUOGeFKeglRFyMzSfKoZyd4cTksmm3l8HP5T+mLjaeuvc1ezQUJBF
f/AI62psLNb6HHngI+kE2VGH/l1rJ11Kwrb+2ZfZNeYH6tk6i9fmxMbB3FI+hWBW
4aoeUFr3f52mfQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 12:41:40 2025 by rpki-client