Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: d4pYOfzI9B6tTk86O2gAdxhyiVXk169XzKyqG08ZlNk=
Subject key identifier: FB:64:76:81:BE:A2:5A:29:FA:48:FE:39:C6:76:35:A3:38:71:86:EE
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 0198477742DBBED0E1E7398CDD61AF49AEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 16:00:54 +0000
Manifest this update: Sat 26 Jul 2025 16:00:54 +0000
Manifest next update: Sun 27 Jul 2025 16:00:54 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: QXgQu5k4SvEWNPbKmH6ZWkIG5wBPtJJBLvFA/SMc79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:42:db:be:d0:e1:e7:39:8c:dd:61:af:49:ae:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Jul 26 16:00:54 2025 GMT
Not After : Jul 27 16:00:54 2025 GMT
Subject: CN=fb647681bea25a29fa48fe39c67635a3387186ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:59:21:b6:31:83:f1:a6:33:34:33:11:6b:
ba:03:b0:47:4c:91:a9:87:e9:cd:75:dc:08:a5:1d:
c2:ce:9b:14:b6:8e:e6:1e:3b:e1:64:ac:b4:ca:3e:
49:96:e6:f3:a0:18:5c:70:c2:bd:2c:3e:f6:b6:cf:
9e:25:8c:23:e0:fb:f7:8d:04:85:de:f6:3c:c9:86:
4a:a0:de:4f:de:af:1f:bb:1c:97:8b:e0:f6:12:62:
b2:04:6c:47:76:86:de:2b:65:f6:65:79:85:ae:51:
80:ea:c5:74:31:cf:38:6f:c8:23:8c:f0:ca:31:b6:
3e:1c:d2:8d:79:0b:b4:9a:75:ff:a8:89:99:38:3e:
af:f5:36:f2:90:09:af:64:e9:42:fe:50:9c:25:6f:
7b:e3:09:fc:89:97:18:1b:11:89:e5:67:7c:98:e9:
77:bd:2a:a9:e1:a6:ed:ef:68:9f:7f:1f:87:f1:a2:
aa:14:52:7b:42:f0:72:1d:22:1a:45:66:3a:e6:06:
17:26:84:1d:fd:f9:c2:c0:60:13:4c:f7:bc:8b:af:
a1:0e:1d:d4:9a:36:cd:5f:63:e3:0b:9a:c7:72:0b:
b7:e9:57:70:f8:94:75:05:0e:31:a4:f1:db:c3:43:
79:34:dc:20:f9:b5:51:74:13:5f:71:b3:38:62:ac:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:64:76:81:BE:A2:5A:29:FA:48:FE:39:C6:76:35:A3:38:71:86:EE
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ae:05:ff:2f:76:15:61:b1:e6:d5:99:0b:4d:9e:96:96:e8:
e7:d9:49:ab:15:1a:18:8e:22:62:0c:76:84:f1:ad:16:48:3e:
ed:9f:48:a2:e0:81:1e:b7:e1:be:ed:3f:20:b7:3b:6f:53:22:
86:f3:23:e1:4b:11:a5:79:22:38:40:89:b0:d2:e5:4c:a4:d8:
c3:14:b4:fc:fe:57:c3:63:e4:7d:5d:3e:da:3a:ce:7c:8d:1e:
ca:26:0b:3d:22:83:60:36:9d:a6:43:82:be:8a:2d:38:46:5f:
27:11:63:dc:ed:b6:30:86:cb:2e:e7:08:b7:12:04:11:d3:3c:
6d:b8:11:97:4f:33:54:fe:25:96:32:2c:5c:7b:86:6c:bc:99:
4c:20:18:ff:da:d8:56:ee:bf:07:be:53:fe:37:35:32:95:c7:
ec:6a:57:1d:1e:39:63:f3:b9:f1:47:81:f5:5a:d1:e8:10:2e:
db:7f:f1:81:13:5d:99:77:ff:1f:c2:48:13:79:7d:23:48:92:
03:78:27:61:c3:31:2f:74:fb:b9:3b:87:33:b9:05:e2:a2:d9:
e4:bc:7d:ce:52:35:08:6f:02:4b:75:b5:d8:99:07:87:98:9d:
c1:b9:1c:ea:7e:f1:95:23:79:4f:f6:6a:78:6a:26:b6:d7:99:
0f:49:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:47:27 2025 by rpki-client