Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
File: HzjUsMuomcJPTjQHOE1tP6jVGl8.mft (raw, json)
Hash identifier: 7wkZfOKZsnqEKvPscRKtP7yoCQtxwVb9YztFZ1qHHrI=
Subject key identifier: BC:05:83:86:69:3B:BF:96:CD:8E:A9:07:83:DD:E3:E5:27:E5:4A:6D
Authority key identifier: 1F:38:D4:B0:CB:A8:99:C2:4F:4E:34:07:38:4D:6D:3F:A8:D5:1A:5F
Certificate issuer: /CN=1f38d4b0cba899c24f4e3407384d6d3fa8d51a5f
Certificate serial: 019845F6B99CDBD484B7F11144601B5F62BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzjUsMuomcJPTjQHOE1tP6jVGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
Manifest number: 03C9
Signing time: Sat 26 Jul 2025 09:00:53 +0000
Manifest this update: Sat 26 Jul 2025 09:00:53 +0000
Manifest next update: Sun 27 Jul 2025 09:00:53 +0000
Files and hashes: 1: HzjUsMuomcJPTjQHOE1tP6jVGl8.crl (hash: AT8uYrWhN3Z/w3lKfs7ZIyRc9tluOCsoKlTB+2AzPVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzjUsMuomcJPTjQHOE1tP6jVGl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:b9:9c:db:d4:84:b7:f1:11:44:60:1b:5f:62:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f38d4b0cba899c24f4e3407384d6d3fa8d51a5f
Validity
Not Before: Jul 26 09:00:53 2025 GMT
Not After : Jul 27 09:00:53 2025 GMT
Subject: CN=bc058386693bbf96cd8ea90783dde3e527e54a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:78:e1:dd:bb:d8:4e:90:18:11:a3:8e:77:f9:
ba:0d:66:fc:c6:68:1e:77:11:58:5c:a9:da:d5:30:
4f:48:3d:ed:2e:43:3c:c3:16:78:5d:52:eb:d0:98:
d7:08:af:bb:a4:91:56:98:23:19:79:2b:b9:1b:fd:
20:0a:ed:c4:a8:a4:7e:83:f7:b1:c5:a3:87:60:80:
2e:7c:51:1a:c0:ba:d7:2a:b8:ce:20:98:7c:74:68:
71:31:fd:36:fa:48:f9:aa:6e:35:a4:a2:a3:cd:4f:
41:0e:be:f3:eb:34:3d:9a:0b:1c:e5:5e:1e:62:84:
fc:4b:5b:c9:57:04:75:ba:51:48:11:7f:04:3a:b8:
a5:40:a5:72:52:7a:fb:60:42:19:3d:0f:87:4c:19:
b5:f1:71:38:f1:ec:2c:62:8a:86:e1:95:b3:81:b8:
ad:62:66:9a:b8:89:84:f8:dd:1f:ea:ae:da:2d:d3:
1f:b2:13:f0:ed:e6:df:13:dd:9d:b9:73:4c:4e:43:
16:61:ea:44:62:43:fc:db:2e:a8:5a:dc:e6:ee:08:
e8:6d:bd:6d:82:45:d9:ac:d1:84:a7:de:8c:7b:03:
6b:cd:e2:bf:1c:32:27:39:8b:10:13:bb:c3:ca:54:
69:ee:f9:e3:1e:07:3a:c9:61:af:1c:64:78:6c:e4:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:05:83:86:69:3B:BF:96:CD:8E:A9:07:83:DD:E3:E5:27:E5:4A:6D
X509v3 Authority Key Identifier:
keyid:1F:38:D4:B0:CB:A8:99:C2:4F:4E:34:07:38:4D:6D:3F:A8:D5:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzjUsMuomcJPTjQHOE1tP6jVGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ae:c4:6e:53:49:0e:ff:88:62:79:c8:ba:93:ec:16:6d:db:
98:95:2f:62:57:b1:d7:de:dd:6f:a5:ea:1b:76:68:86:ab:57:
fc:5e:3e:d7:a7:1b:da:ce:7c:dc:89:84:9c:c2:03:29:55:7f:
79:c0:d0:f1:36:a7:ea:b7:6c:02:fe:80:31:f6:7c:fd:c0:eb:
d4:e4:0b:46:83:1b:bb:9a:9c:ea:b8:ce:62:43:19:1d:42:ef:
be:5c:96:58:ac:e7:56:16:b7:12:64:19:ec:ce:e5:39:03:8c:
63:f3:4a:05:34:32:05:af:6d:50:ab:04:84:e7:4b:9d:52:ce:
9b:bd:c3:6f:05:f0:91:e3:a2:33:41:5f:11:4c:67:44:b2:f3:
94:f1:a5:69:ed:9a:6b:74:a1:2f:64:70:94:fa:e7:be:18:b7:
1c:d8:74:c0:f7:33:7f:70:3d:43:67:2c:6e:10:c1:6f:69:c5:
fa:a5:f6:59:e2:02:b4:d7:a6:a6:bd:02:33:10:be:b7:0d:a2:
23:cf:f3:68:e5:35:d0:b0:13:ea:dd:22:df:f8:f4:7b:e2:53:
1f:12:0c:8e:6b:92:d9:95:e3:40:ac:17:64:7d:f3:71:b4:74:
89:f1:8d:d8:ae:fa:3d:a5:df:c7:dc:0a:1c:4c:86:5c:47:08:
c0:50:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:39:34 2025 by rpki-client