Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
File: Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft (raw, json)
Hash identifier: YcNg85e3iRx43cmxNuTt5QAFaqiwjdTTuA7Hv20J77I=
Subject key identifier: 25:1F:11:D7:68:44:D8:64:71:56:6B:37:A8:62:10:51:B1:51:1B:DE
Authority key identifier: 1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
Certificate issuer: /CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Certificate serial: 0198530DCAB76A0A33021B50EC60A0E53F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
Manifest number: 0C0B
Signing time: Mon 28 Jul 2025 22:01:09 +0000
Manifest this update: Mon 28 Jul 2025 22:01:09 +0000
Manifest next update: Tue 29 Jul 2025 22:01:09 +0000
Files and hashes: 1: Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl (hash: e04cl5SDuqFgaTq+JJNPQQPohXyuhWHgPhjS8f6pb2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:ca:b7:6a:0a:33:02:1b:50:ec:60:a0:e5:3f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Validity
Not Before: Jul 28 22:01:09 2025 GMT
Not After : Jul 29 22:01:09 2025 GMT
Subject: CN=251f11d76844d86471566b37a8621051b1511bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:0b:46:cc:eb:f8:15:40:9a:a1:37:b6:39:
3f:35:60:09:e6:35:58:fd:16:2c:60:a7:0a:2c:d6:
ff:88:66:57:51:32:b2:02:19:ce:97:93:9b:8d:97:
ca:d2:95:33:08:1f:8c:7c:ad:4b:eb:b1:ba:6f:35:
41:cc:c7:2a:42:80:29:37:79:d4:9c:f9:ed:71:f0:
fe:a9:95:e7:92:95:0a:7b:02:77:50:3f:2f:93:2d:
0a:15:b1:aa:03:b8:38:07:01:aa:3e:48:b0:16:e2:
7c:60:b3:b3:86:a3:e1:b7:93:39:6f:55:a6:21:6b:
1e:f3:bf:77:b8:78:3e:6b:6a:cf:c4:6c:ae:02:3b:
3e:d1:61:2c:1a:d1:e3:5e:07:17:61:89:19:33:86:
ee:a9:a4:63:0c:3a:6f:eb:32:33:00:85:dd:62:e6:
c3:a3:a1:a9:7f:64:89:ad:5b:d1:ae:a8:2a:90:ec:
17:29:48:8d:3b:35:6b:06:42:b3:01:ad:70:8c:55:
f2:bb:d0:8f:3d:84:a4:36:9c:27:bf:e7:a9:fa:78:
a8:bf:eb:2f:d5:15:28:1b:c7:58:4c:94:e2:2a:a8:
d2:d2:01:be:68:d7:81:99:01:62:25:60:08:ad:de:
19:8b:68:e9:cd:ff:25:54:77:d4:c9:68:5b:a3:a1:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1F:11:D7:68:44:D8:64:71:56:6B:37:A8:62:10:51:B1:51:1B:DE
X509v3 Authority Key Identifier:
keyid:1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d6:67:c8:1f:f0:e2:2d:f4:7f:6b:18:8e:f4:06:40:6e:f9:
59:37:fc:10:d4:1a:e9:01:6b:9a:ef:33:a8:0a:7a:a0:99:ad:
ba:a3:b3:f3:67:be:9e:77:9b:af:44:53:25:7d:a9:5c:2b:88:
0c:de:74:bf:15:be:b9:50:f2:83:b3:36:5d:5b:bc:06:54:50:
0f:a0:23:46:ff:f7:8a:8c:80:78:c7:fa:ac:91:e6:36:de:46:
97:36:f8:16:07:61:d5:d8:9a:29:81:4c:70:9c:9c:da:e1:6f:
87:38:37:ea:60:02:db:19:ff:e9:14:6f:f6:e8:f3:ad:89:8b:
d1:3a:5b:0d:93:eb:f1:7e:9e:a8:79:58:1d:dc:d7:e7:7d:63:
89:10:13:9b:b1:d8:8b:b3:9a:8d:a1:78:aa:ad:9f:48:9a:ad:
35:fc:66:65:49:50:8d:c4:6b:d5:cf:7f:24:ad:ad:d7:b3:80:
6f:97:be:f5:81:5f:c2:2c:50:39:f7:50:b5:3c:e1:e4:7c:c0:
24:74:88:7f:f5:ef:df:c7:d2:1d:7c:8f:70:26:ce:13:99:2a:
a0:a7:ce:f3:02:6c:7a:6c:3c:13:62:b4:e4:1d:b6:43:13:f7:
ee:89:fd:3d:ec:27:95:33:71:58:1f:01:bc:bb:e7:a6:69:ea:
df:1b:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:05:11 2025 by rpki-client