Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
File: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft (raw, json)
Hash identifier: RRsXTJDJXo/SaJFaDeHFJua453ofMs5/mK9ScU8rpMg=
Subject key identifier: 48:C5:5E:55:87:C5:54:0B:3B:B8:61:86:99:74:24:4B:53:20:D9:4A
Authority key identifier: 84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
Certificate issuer: /CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Certificate serial: 01991763EA506707984E032AFBB0A377C98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
Manifest number: 019D
Signing time: Fri 05 Sep 2025 01:00:47 +0000
Manifest this update: Fri 05 Sep 2025 01:00:47 +0000
Manifest next update: Sat 06 Sep 2025 01:00:47 +0000
Files and hashes: 1: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl (hash: F6E9+1HIvjHPFOzxor1N3dTyoeHgmzCJKWnt9h3cs6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:63:ea:50:67:07:98:4e:03:2a:fb:b0:a3:77:c9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Validity
Not Before: Sep 5 01:00:47 2025 GMT
Not After : Sep 6 01:00:47 2025 GMT
Subject: CN=48c55e5587c5540b3bb861869974244b5320d94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:59:9d:7b:a4:eb:95:e4:2e:76:e6:ee:97:
41:91:b0:dd:7b:71:08:b2:cc:df:7b:b0:72:46:ce:
f6:d5:39:29:5d:0a:21:22:f0:51:af:e7:aa:13:68:
05:b0:07:5f:83:ed:e2:a1:12:d4:61:8e:d2:58:88:
b7:f9:09:77:40:d9:c0:75:ee:4d:1e:cf:4c:a6:9a:
e0:7e:99:20:f3:d8:0a:5a:78:de:08:30:09:7c:cc:
e0:8f:e2:ca:49:4f:d1:91:68:b8:00:7b:b4:28:d7:
54:8e:57:ba:02:c1:db:27:d2:09:9c:47:87:e2:4c:
14:a8:1a:2e:f8:d4:dc:26:82:c0:62:07:ac:c1:4b:
2e:ce:0c:e3:cd:45:b8:98:01:10:fb:20:85:f2:9a:
6a:eb:d8:fb:f2:3b:75:c4:4a:99:e8:23:bd:9a:51:
a2:33:a9:f6:ae:a1:a5:5b:b6:e0:e1:b4:45:c8:23:
25:e8:6d:c9:ec:0c:3d:a4:b1:6a:86:8e:cc:b0:72:
4c:28:42:73:21:f4:51:fa:2f:73:c6:2c:62:86:f6:
c8:a1:6b:70:fa:13:88:38:0f:70:b2:57:84:75:9e:
3f:fe:d3:6d:1b:af:bd:d5:d4:c3:4a:a4:18:a7:c4:
50:27:e8:95:71:c0:75:fb:28:38:47:ad:be:87:b4:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C5:5E:55:87:C5:54:0B:3B:B8:61:86:99:74:24:4B:53:20:D9:4A
X509v3 Authority Key Identifier:
keyid:84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:53:2c:64:e4:64:39:fb:18:9e:73:de:46:c3:d6:93:a8:11:
bb:f9:1c:e3:81:b1:d3:82:be:78:97:19:ee:1d:8c:e6:11:23:
74:38:ad:23:13:fc:c4:55:f5:0a:5f:4b:83:d0:6f:3b:9e:ca:
9e:1e:e2:ea:87:cd:30:0a:6e:6e:c6:5e:e4:71:7e:d2:ac:53:
a7:a3:b8:c6:33:ab:e8:15:b2:21:39:d1:65:57:af:47:d2:09:
7f:36:9d:5d:bc:55:76:6f:cb:2e:36:79:8d:c1:ca:d3:e4:e9:
86:95:c4:3b:f5:e1:47:47:1a:db:88:6c:01:77:b0:5e:6d:1f:
3c:c2:43:b9:37:e6:18:e7:c7:81:1a:3a:b8:ea:ef:7b:4a:78:
4d:02:b5:aa:30:88:1c:0d:dd:24:17:da:f7:3b:56:f4:67:9c:
80:12:7a:14:1c:92:28:30:ee:c4:34:68:86:6a:ba:dd:07:4d:
c6:ff:00:46:ed:0e:1a:03:e6:e9:4b:ee:9e:af:a5:9c:e1:d8:
5c:5b:cf:08:ea:92:84:2c:56:67:72:74:39:e6:fe:d2:b9:81:
c2:b9:f2:33:22:1a:0c:b5:34:f6:25:c5:e1:fb:b6:f2:41:55:
f1:a1:da:01:f5:16:dc:48:f6:20:f0:32:0a:97:a9:be:91:2d:
a0:cf:4a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:10:19 2025 by rpki-client