Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/761ab1-d572-496e-adad-b7686b9061a5/1/HhkRubtcij4eK4pRFl-KcaCSxo0.mft
File: HhkRubtcij4eK4pRFl-KcaCSxo0.mft (raw, json)
Hash identifier: 9wduf3YXfOthiRX5VlwYJJfNkEwl70Fa2TTjtQ7Jv98=
Subject key identifier: A9:76:6D:0E:D4:DD:11:95:BD:6C:7E:DF:F0:CC:AD:DF:70:1E:6A:33
Authority key identifier: 1E:19:11:B9:BB:5C:8A:3E:1E:2B:8A:51:16:5F:8A:71:A0:92:C6:8D
Certificate issuer: /CN=1e1911b9bb5c8a3e1e2b8a51165f8a71a092c68d
Certificate serial: 019846D22418FEFF67F25DD59207C486421D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhkRubtcij4eK4pRFl-KcaCSxo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/761ab1-d572-496e-adad-b7686b9061a5/1/HhkRubtcij4eK4pRFl-KcaCSxo0.mft
Manifest number: 11B8
Signing time: Sat 26 Jul 2025 13:00:33 +0000
Manifest this update: Sat 26 Jul 2025 13:00:33 +0000
Manifest next update: Sun 27 Jul 2025 13:00:33 +0000
Files and hashes: 1: HhkRubtcij4eK4pRFl-KcaCSxo0.crl (hash: Vd5XFvKu/YMVTtOkkBahCgr335HBED59nuKBjObtqVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/761ab1-d572-496e-adad-b7686b9061a5/1/HhkRubtcij4eK4pRFl-KcaCSxo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/761ab1-d572-496e-adad-b7686b9061a5/1/HhkRubtcij4eK4pRFl-KcaCSxo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhkRubtcij4eK4pRFl-KcaCSxo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:24:18:fe:ff:67:f2:5d:d5:92:07:c4:86:42:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e1911b9bb5c8a3e1e2b8a51165f8a71a092c68d
Validity
Not Before: Jul 26 13:00:33 2025 GMT
Not After : Jul 27 13:00:33 2025 GMT
Subject: CN=a9766d0ed4dd1195bd6c7edff0ccaddf701e6a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:de:8e:11:71:67:e2:92:6c:92:82:71:79:
d5:11:db:72:52:df:d1:21:ae:77:dd:0e:c7:6f:8e:
d0:92:70:c3:38:10:e3:8a:e0:66:a6:84:e7:3a:16:
a9:66:da:34:f3:a1:96:c0:d2:af:88:43:99:11:4c:
74:9e:ce:80:aa:68:35:6b:67:2d:8e:3e:b6:cb:e7:
fb:95:cb:98:d3:41:6e:d9:e6:35:5c:3f:dc:f0:40:
57:9c:2f:2b:fd:f6:f6:5e:e9:13:b3:22:e6:c7:06:
59:1b:ed:05:37:f7:4a:af:0e:bd:35:1a:d1:4a:32:
ae:cf:ab:9e:e8:a4:d0:fd:db:ae:cf:ed:f7:ff:f1:
90:37:00:1d:47:29:e7:2f:fd:9e:22:55:ec:67:32:
81:e4:a8:88:dd:80:11:43:cb:47:ad:c6:28:53:50:
97:62:d2:0b:59:ff:2b:15:4a:da:e8:5a:ff:d7:37:
8a:61:44:3b:78:48:07:dd:9a:00:aa:a1:7e:90:95:
3f:2b:71:a1:99:28:3d:b0:01:b9:b2:6e:1d:91:32:
45:09:be:66:4d:d6:56:63:9d:53:ae:e7:77:62:e4:
31:16:47:51:e8:0a:c1:f7:0a:ec:56:e7:dc:71:8b:
08:66:b5:6c:5e:15:0d:ca:d0:36:9d:9e:e2:56:72:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:76:6D:0E:D4:DD:11:95:BD:6C:7E:DF:F0:CC:AD:DF:70:1E:6A:33
X509v3 Authority Key Identifier:
keyid:1E:19:11:B9:BB:5C:8A:3E:1E:2B:8A:51:16:5F:8A:71:A0:92:C6:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhkRubtcij4eK4pRFl-KcaCSxo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/761ab1-d572-496e-adad-b7686b9061a5/1/HhkRubtcij4eK4pRFl-KcaCSxo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/761ab1-d572-496e-adad-b7686b9061a5/1/HhkRubtcij4eK4pRFl-KcaCSxo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f8:77:43:72:3e:cd:3e:39:0f:60:76:61:48:21:ea:52:11:
80:ac:f7:90:d7:65:5c:12:e8:dd:20:16:35:c9:3e:c7:68:3a:
a2:07:44:ce:9d:f9:51:2b:63:be:d8:64:cc:f7:ff:49:2e:0b:
7b:5f:0b:47:d8:e6:fc:f1:b2:d3:4e:e1:13:5b:99:a3:e9:d8:
dd:70:0a:8c:ef:58:87:2c:e7:f2:de:5f:ff:ae:e9:b0:9e:26:
2d:2a:77:35:95:1d:f4:7a:2f:56:c5:f4:da:d4:47:12:90:16:
a4:ae:e6:50:13:a7:d7:f2:cf:92:c6:ba:9a:da:fc:0e:45:f5:
81:d5:03:16:ce:dc:48:15:c4:82:b4:ab:9b:fb:f4:08:c6:2d:
57:55:7d:5f:af:70:05:5f:39:8f:65:94:21:f7:3a:a9:e5:fe:
5e:45:6b:21:ed:5c:c9:1d:31:41:94:01:ad:ed:d0:d4:37:0b:
f5:1c:c4:2b:de:cf:1a:6d:f8:62:7f:3d:0f:45:cc:b7:da:c1:
95:d7:98:ed:20:87:72:3d:ab:2b:84:69:71:19:b1:95:ac:2d:
d5:45:02:86:63:32:e6:4f:dd:9c:b6:af:6f:aa:12:52:9f:4e:
8b:65:ba:02:96:1c:58:e9:b6:62:89:b3:af:90:23:a9:f2:d7:
9e:87:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:50:12 2025 by rpki-client