Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
File: HjaTxfrT8hak_3rIbO6yOwBDg10.mft (raw, json)
Hash identifier: 0SVSYRyYWmPk3K9PyJPN7dy9UhQUT/27ws1paefKwi0=
Subject key identifier: C7:CF:DE:78:5A:B3:BC:DB:12:AF:01:1D:4C:4A:87:63:C1:22:0B:8A
Authority key identifier: 1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D
Certificate issuer: /CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
Certificate serial: 019922FAF02D59A75C9369382AFFA638E2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
Manifest number: 0B3D
Signing time: Sun 07 Sep 2025 07:01:34 +0000
Manifest this update: Sun 07 Sep 2025 07:01:34 +0000
Manifest next update: Mon 08 Sep 2025 07:01:34 +0000
Files and hashes: 1: HjaTxfrT8hak_3rIbO6yOwBDg10.crl (hash: eAL5wXWyyGTNqvITIMMDrbZLYgT4m7VsroEBpB3EIts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:f0:2d:59:a7:5c:93:69:38:2a:ff:a6:38:e2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
Validity
Not Before: Sep 7 07:01:34 2025 GMT
Not After : Sep 8 07:01:34 2025 GMT
Subject: CN=c7cfde785ab3bcdb12af011d4c4a8763c1220b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:38:21:c5:a0:7b:c6:72:23:e2:0b:40:e3:
cb:d1:45:81:45:95:5c:45:96:b2:1e:3e:5c:d3:6f:
26:5c:be:a2:10:ef:bf:e3:33:03:92:14:43:92:af:
25:25:99:ea:71:b0:6f:bf:8f:db:ef:a3:89:bd:ee:
19:76:dc:84:0e:e8:97:fd:50:5e:12:cd:0e:89:bf:
02:fe:06:74:be:dd:f5:8c:81:9d:cf:c5:06:1c:fe:
4c:d2:95:26:30:c2:1c:8c:c4:2c:5f:b9:7d:f9:7c:
7d:65:aa:74:1b:0e:fd:cc:45:1e:54:d1:e1:85:96:
71:90:00:fa:76:cb:13:ff:4a:f7:8b:1e:a5:0b:0d:
8d:61:71:47:79:1a:ed:74:6a:e5:5d:8c:4b:53:98:
2f:63:2b:6e:24:6b:33:08:11:69:e3:88:41:c0:8f:
69:da:1c:d3:0c:c7:17:9a:b0:f3:f5:65:d0:04:80:
e8:eb:0e:99:bc:bd:31:03:ed:41:f8:16:98:54:3b:
10:7f:f5:22:f4:8d:5d:05:f0:0f:48:a8:e9:90:b5:
34:13:d8:d0:13:36:04:37:a2:9c:ce:e7:78:ae:6a:
e7:ef:c3:ff:7d:4e:d1:6b:22:82:70:d3:0d:a5:dc:
1a:6e:f9:ba:35:05:41:87:3b:c0:32:ea:6c:c9:4f:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CF:DE:78:5A:B3:BC:DB:12:AF:01:1D:4C:4A:87:63:C1:22:0B:8A
X509v3 Authority Key Identifier:
keyid:1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ef:34:fd:fc:9e:89:82:08:a7:05:bf:46:3d:d8:bb:2e:c3:
47:21:43:0b:4f:db:d8:45:d1:30:a5:f7:b7:6d:b0:d5:51:c5:
16:56:db:c7:f2:a1:85:b5:c0:c7:f5:c8:a2:a9:7f:ef:9e:bc:
80:64:ad:f9:2c:7c:76:d3:32:ed:b4:f6:c6:60:2b:76:3e:b8:
0f:4f:59:67:3a:cd:37:ea:93:31:35:51:c3:c0:70:24:99:fd:
3c:00:50:cd:13:11:17:d6:fa:32:13:00:60:b3:14:f5:d3:09:
e0:57:bb:48:fa:05:74:2b:e4:97:26:10:e1:bd:94:11:35:de:
02:27:0a:23:f9:f7:26:54:e3:86:b9:e3:6c:90:56:96:b1:12:
3c:6f:5c:59:37:00:94:a6:f1:3c:79:25:ca:1d:c4:ce:8b:28:
13:f4:4e:0b:4e:a6:9d:1a:55:7e:aa:c4:d4:71:b3:66:0c:c6:
91:26:03:dd:a2:da:0e:32:10:fd:e5:d0:83:b5:47:5b:9c:64:
f4:c3:3a:10:b5:0e:8d:77:15:39:9f:61:ba:97:2a:c6:c9:32:
43:bf:7e:c1:7b:aa:45:8b:f4:49:37:1b:3f:96:7e:be:6a:1b:
00:ea:a4:16:c5:70:1e:b0:af:02:d1:ed:16:fb:ea:32:d9:4b:
d4:ef:f3:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+vAtWadck2k4Kv+mOOK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzY5M2M1ZmFkM2YyMTZhNGZmN2FjODZjZWViMjNiMDA0
MzgzNWQwHhcNMjUwOTA3MDcwMTM0WhcNMjUwOTA4MDcwMTM0WjAzMTEwLwYDVQQD
EyhjN2NmZGU3ODVhYjNiY2RiMTJhZjAxMWQ0YzRhODc2M2MxMjIwYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjo4IcWge8ZyI+ILQOPL0UWBRZVc
RZayHj5c028mXL6iEO+/4zMDkhRDkq8lJZnqcbBvv4/b76OJve4ZdtyEDuiX/VBe
Es0Oib8C/gZ0vt31jIGdz8UGHP5M0pUmMMIcjMQsX7l9+Xx9Zap0Gw79zEUeVNHh
hZZxkAD6dssT/0r3ix6lCw2NYXFHeRrtdGrlXYxLU5gvYytuJGszCBFp44hBwI9p
2hzTDMcXmrDz9WXQBIDo6w6ZvL0xA+1B+BaYVDsQf/Ui9I1dBfAPSKjpkLU0E9jQ
EzYEN6Kczud4rmrn78P/fU7RayKCcNMNpdwabvm6NQVBhzvAMupsyU/dfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfP3nhas7zbEq8BHUxKh2PBIguKMB8GA1UdIwQY
MBaAFB42k8X60/IWpP96yGzusjsAQ4NdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGphVHhmclQ4aGFrXzNySWJPNnlPd0JEZzEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YTFkMmQtYzYyNi00ZjgwLWE5ZDQt
NDIxMTUxOGQ5OGE0LzEvSGphVHhmclQ4aGFrXzNySWJPNnlPd0JEZzEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85YTFkMmQtYzYyNi00ZjgwLWE5ZDQtNDIxMTUxOGQ5OGE0
LzEvSGphVHhmclQ4aGFrXzNySWJPNnlPd0JEZzEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPe80/fye
iYIIpwW/Rj3Yuy7DRyFDC0/b2EXRMKX3t22w1VHFFlbbx/KhhbXAx/XIoql/7568
gGSt+Sx8dtMy7bT2xmArdj64D09ZZzrNN+qTMTVRw8BwJJn9PABQzRMRF9b6MhMA
YLMU9dMJ4Fe7SPoFdCvklyYQ4b2UETXeAicKI/n3JlTjhrnjbJBWlrESPG9cWTcA
lKbxPHklyh3EzosoE/ROC06mnRpVfqrE1HGzZgzGkSYD3aLaDjIQ/eXQg7VHW5xk
9MM6ELUOjXcVOZ9hupcqxskyQ79+wXuqRYv0STcbP5Z+vmobAOqkFsVwHrCvAtHt
FvvqMtlL1O/z9A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:59 2025 by rpki-client