Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
File: HTJVXGHT0inixKIzfXX6U_bysrw.mft (raw, json)
Hash identifier: ZBhCwi+ziq0w9fzSu/GrtXtWw/FHCmnt2W5uuRJj268=
Subject key identifier: 22:7D:1B:23:D6:1B:AC:84:A3:F9:A1:77:D5:01:12:E0:EA:26:8C:31
Authority key identifier: 1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
Certificate issuer: /CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Certificate serial: 019921B208D917B3A228AC57B7672C629B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
Manifest number: 0550
Signing time: Sun 07 Sep 2025 01:02:19 +0000
Manifest this update: Sun 07 Sep 2025 01:02:19 +0000
Manifest next update: Mon 08 Sep 2025 01:02:19 +0000
Files and hashes: 1: HTJVXGHT0inixKIzfXX6U_bysrw.crl (hash: aHC9/Mj22BXG/gQoIEaTPQtfz5slvEfiRM7hYwZ/qUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:08:d9:17:b3:a2:28:ac:57:b7:67:2c:62:9b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Validity
Not Before: Sep 7 01:02:19 2025 GMT
Not After : Sep 8 01:02:19 2025 GMT
Subject: CN=227d1b23d61bac84a3f9a177d50112e0ea268c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:ae:17:fe:3f:bd:90:41:8c:46:9b:a6:12:
0c:84:bc:6e:11:07:bb:bc:d9:0b:ed:b2:04:80:be:
0f:20:1e:6f:56:fe:06:f9:b9:fc:26:cd:84:fe:06:
1d:0e:6d:67:1a:1b:41:40:fd:68:ef:88:91:72:a9:
1d:59:30:15:77:ec:46:b6:6d:7d:b7:2e:92:59:02:
b0:55:8c:df:15:e0:19:ff:a5:af:5f:de:78:94:ea:
06:f4:0c:05:e1:73:35:57:85:2c:fe:57:c3:07:f8:
0e:ae:11:6b:43:5e:7e:50:ce:bb:7d:86:27:3c:a8:
c6:f4:a6:da:09:14:43:d7:95:f8:00:ef:11:28:13:
9a:59:7d:31:26:48:10:5d:31:e5:e8:34:a8:99:7e:
63:2e:c5:3f:d0:e7:7d:0d:92:a5:6e:81:98:98:23:
0d:d3:58:db:06:ec:a5:11:91:a8:b0:55:5d:46:bd:
57:2f:68:3f:f6:8a:55:38:89:88:6b:26:61:25:67:
8b:ad:f7:b2:bf:72:eb:7d:44:f2:39:4f:22:fa:18:
a9:a4:78:c2:2a:b2:ec:aa:68:3d:a1:43:a1:a8:6e:
94:6b:7d:1e:ee:d3:1d:2a:ad:c3:8c:5b:f3:a6:a5:
c6:dc:cf:a4:69:4d:2a:05:50:88:0b:ae:5b:46:24:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7D:1B:23:D6:1B:AC:84:A3:F9:A1:77:D5:01:12:E0:EA:26:8C:31
X509v3 Authority Key Identifier:
keyid:1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:56:64:c3:c1:ef:17:37:7c:14:ad:e1:67:36:64:37:5a:6e:
06:6e:d8:54:30:00:c6:fa:d3:01:59:13:7a:e6:93:05:b6:a0:
84:b5:44:6c:1f:d5:74:0e:dd:01:03:1c:8b:78:52:5d:dc:cc:
9d:d6:31:92:ca:79:13:9a:b9:8b:a3:3e:1e:82:5f:c5:b8:a9:
f0:91:7e:11:3d:39:68:1e:41:6e:dd:98:06:a1:c9:ae:fe:c1:
6f:e0:8c:26:ef:48:31:54:60:f6:f5:92:4a:d9:db:44:15:0c:
12:ba:22:9e:77:b5:20:88:be:19:36:a3:76:bb:ca:21:dd:40:
45:9c:b1:fc:9c:99:38:5f:c0:10:ac:19:32:df:42:bc:de:87:
f1:6d:fa:0a:e5:dd:4b:38:de:ed:10:33:83:d8:56:ec:d0:55:
cd:30:8b:04:3e:c0:8f:0b:27:86:27:20:f3:8c:bd:46:af:e3:
9d:0e:32:97:07:a5:4b:bb:75:3f:7e:c9:fd:b9:51:32:65:4b:
7b:a4:2c:5c:ee:49:11:33:9c:2d:dd:05:d3:06:38:d5:63:6d:
c2:82:1c:ee:75:57:ae:67:c6:a6:fd:8a:22:80:a0:9f:02:40:
d7:0f:84:af:57:f0:6a:24:a4:99:39:3c:3c:a4:bc:15:ce:11:
c3:df:d1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:49:55 2025 by rpki-client