Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File: HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier: ckWgvE6fsZ3sBeWwtH2JCQLsBozU0rwRHjRyfWMrzVc=
Subject key identifier: D3:3B:85:CC:1D:30:B2:F8:51:0A:46:6A:41:14:27:93:84:8E:E4:6E
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 01984889A4C6C3D9FEF06041CD9DF0C4A92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number: 1594
Signing time: Sat 26 Jul 2025 21:00:36 +0000
Manifest this update: Sat 26 Jul 2025 21:00:36 +0000
Manifest next update: Sun 27 Jul 2025 21:00:36 +0000
Files and hashes: 1: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: 7+l7lq9dMDJVzZrPiIFOi8UveEBfWSzqSMvXqUeACtI=)
2: OqLUCxtgxChqlU1u5DSrV7o7hUE.roa (hash: 137N4QJ5LT3R5FaNUW+c79pvczICoEGACd1IGeCfKGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:a4:c6:c3:d9:fe:f0:60:41:cd:9d:f0:c4:a9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Jul 26 21:00:36 2025 GMT
Not After : Jul 27 21:00:36 2025 GMT
Subject: CN=d33b85cc1d30b2f8510a466a41142793848ee46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:b2:bc:e7:4e:08:a8:4c:55:3d:b7:e7:bc:
c3:5a:07:6a:29:08:53:cb:36:52:81:e9:59:84:79:
55:9c:f3:ac:4a:f6:b3:1c:8a:7e:aa:8a:f9:7f:2a:
32:15:20:d2:58:45:93:b0:db:d1:f8:5a:ca:19:80:
0b:42:fa:53:6c:c2:37:24:5b:e5:aa:95:da:55:29:
75:e9:89:63:d8:a0:68:e9:8d:e7:56:02:1a:9d:09:
7a:30:e0:f0:f4:fd:a3:dc:fe:b9:be:18:23:4b:03:
0a:db:da:ca:1c:b9:fd:5c:a7:32:a3:57:29:be:90:
24:7b:46:52:1d:bc:b1:65:57:91:93:b0:3d:5f:f0:
77:b6:64:a1:91:25:c7:66:e7:39:de:b0:27:86:1e:
60:01:20:8d:7e:ed:36:fd:2a:3d:f3:4d:8c:88:9a:
4f:d9:7d:c1:b9:b7:61:13:a9:b1:54:33:d3:eb:f3:
f7:83:12:36:1c:6d:57:62:5c:97:7a:55:a9:5c:f5:
26:91:c0:09:98:dc:f6:02:56:9c:51:e0:52:1c:d7:
89:34:a0:6d:94:af:1a:f0:46:1a:93:52:26:e9:44:
47:68:98:f3:ab:00:37:09:0f:4c:f5:4a:12:89:be:
10:21:fd:35:54:fc:86:16:f9:60:7c:9a:33:7d:77:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:85:CC:1D:30:B2:F8:51:0A:46:6A:41:14:27:93:84:8E:E4:6E
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cf:09:01:8a:b7:e4:26:b0:72:5e:b8:98:ea:0f:3e:b8:62:
45:8a:0f:8c:7a:bb:1e:c7:24:9f:47:a0:72:cf:be:ad:26:2b:
70:44:88:8c:5f:70:49:98:aa:6d:d8:80:37:94:40:1d:fd:42:
2c:c2:04:a7:02:31:69:22:28:c7:19:20:d4:f5:3f:d9:55:f1:
ba:78:10:38:3e:17:b4:51:29:a3:96:9c:07:cf:3b:9c:fb:49:
5c:c7:cb:d9:a1:8a:3a:6c:c0:7f:0a:f7:26:61:2c:97:94:6f:
6f:3b:8e:e5:af:9a:46:e2:37:61:75:34:39:2d:c6:d2:13:15:
99:40:ad:99:40:6c:b8:b2:1b:b1:d7:2b:34:af:3f:da:f4:1d:
c0:f7:89:b3:04:89:8f:b4:ab:e2:1a:cc:f4:9e:1e:77:e4:5a:
06:d7:c0:1b:98:af:6e:e5:a5:ce:f1:18:20:4b:fc:dd:b6:0e:
e8:78:b1:53:a9:72:40:db:7d:51:02:90:8e:ee:fd:c0:69:a3:
c5:b5:52:c0:0a:da:a6:94:1e:63:c0:64:ad:3a:d2:23:c2:0d:
ec:2b:88:41:8f:df:d2:07:26:ce:ad:69:d9:9c:f8:44:53:95:
7c:70:ee:ae:ce:49:c8:c6:73:a9:27:81:f5:d0:59:99:e4:cc:
9f:60:25:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:13:51 2025 by rpki-client