
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
File: hfR7ZaUlMyab0hmBOlIDr92eXb4.mft (raw, json)
Hash identifier: PbQUMQ1kxw5Q7iJXwiPCvSO054tLKmdcCeoqMHDgRoo=
Subject key identifier: F0:7B:81:3A:83:9C:FA:69:3E:D6:E3:35:22:74:01:0F:CF:D0:89:3D
Authority key identifier: 85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
Certificate issuer: /CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Certificate serial: 0199221EC23AFB844E78C0E68B57902EE694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
Manifest number: 1263
Signing time: Sun 07 Sep 2025 03:01:04 +0000
Manifest this update: Sun 07 Sep 2025 03:01:04 +0000
Manifest next update: Mon 08 Sep 2025 03:01:04 +0000
Files and hashes: 1: hfR7ZaUlMyab0hmBOlIDr92eXb4.crl (hash: Lf6mxYAqZgkrrIFNH/zdqtvyzdsY0NA2tlIdEURSRXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:c2:3a:fb:84:4e:78:c0:e6:8b:57:90:2e:e6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Validity
Not Before: Sep 7 03:01:04 2025 GMT
Not After : Sep 8 03:01:04 2025 GMT
Subject: CN=f07b813a839cfa693ed6e3352274010fcfd0893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:11:00:08:75:fe:9d:dd:b7:6b:a2:b1:5c:
e6:0f:8e:71:e3:02:21:5a:00:65:14:33:ba:dd:77:
51:e3:19:95:bf:81:55:14:d3:cc:ba:20:48:83:42:
6b:2e:d8:56:92:1b:2c:26:f4:a7:b7:a7:5d:64:90:
03:b2:c9:12:cc:17:9b:4c:60:e1:16:cc:04:69:a1:
a2:e4:2a:35:7a:d2:02:f8:5e:67:02:0d:68:83:51:
d1:24:25:fe:f2:65:c3:81:fa:ca:84:f2:36:06:21:
ca:86:8d:9f:8a:c2:cd:04:37:e5:0a:80:a3:e4:2e:
ff:97:68:63:4a:b9:3b:ea:b3:eb:83:9d:ce:5f:2e:
80:ca:d1:16:d4:34:09:68:e2:4d:9a:1b:01:32:e0:
34:c5:61:53:31:15:3e:53:c2:e2:73:14:3e:df:e8:
3e:33:33:de:28:97:06:df:e3:d3:62:40:d3:33:1b:
1e:a8:e4:56:23:81:87:48:f2:5a:74:18:73:41:ba:
30:a6:47:ab:5d:df:32:43:6d:0f:86:17:73:c0:ab:
e3:22:50:0f:ed:41:78:97:32:7a:dc:28:6a:91:32:
67:bb:96:31:8e:46:66:e9:b4:7d:d1:98:8e:52:f6:
ab:1c:f8:ea:0b:81:0c:1c:b9:95:00:38:9e:34:33:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7B:81:3A:83:9C:FA:69:3E:D6:E3:35:22:74:01:0F:CF:D0:89:3D
X509v3 Authority Key Identifier:
keyid:85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b6:39:ea:5f:6d:88:e6:62:6a:e3:51:74:31:42:56:c4:54:
35:0c:49:05:27:49:b8:07:80:a5:56:1d:e9:8e:1d:65:2d:31:
1c:c0:1c:d9:d8:96:4f:0d:93:c2:20:91:e7:06:d5:e8:ab:d4:
99:7f:e7:37:61:87:81:0e:15:7a:92:98:53:e1:34:ff:c5:cc:
8c:02:e2:5d:3c:de:d0:f9:82:aa:62:82:cc:17:9f:e9:db:ce:
67:35:0e:ff:a8:9e:b7:26:d9:a8:0a:3e:c3:96:db:ed:b6:83:
dd:93:1f:0d:6d:0f:98:95:f6:15:92:ba:6d:a2:3d:43:45:8c:
d1:81:92:83:22:b0:90:f1:75:22:10:a7:eb:99:05:91:a5:a1:
43:3a:53:d3:6f:e3:9c:73:ee:f0:8d:7c:d0:1e:a0:a9:99:30:
37:45:e9:91:79:94:c0:af:89:2e:7f:d5:d9:46:93:b9:9c:23:
32:91:c3:24:d4:d7:e4:78:8e:4b:0c:f5:76:9f:b0:ce:ac:39:
a4:37:4d:d4:eb:c3:5e:e4:4a:74:1f:1e:09:41:ed:23:0e:da:
f9:68:a4:48:8b:f1:30:9c:04:50:07:53:ca:c7:90:63:70:9f:
6d:f5:30:08:ba:f4:9d:f2:0e:99:91:0a:00:40:55:48:ea:9d:
3e:4c:58:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:07 2025 by rpki-client