Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: 4sBal2VJ+mixQ2dQNXgoCy7SddYX5CJcXQCOcodSZwc=
Subject key identifier: F5:65:45:85:3A:6B:F4:7B:56:5F:3D:04:15:24:DA:9C:BD:1C:84:46
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 0199221EECA49C872F3A9F99FC0CE5FB93C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 09B3
Signing time: Sun 07 Sep 2025 03:01:15 +0000
Manifest this update: Sun 07 Sep 2025 03:01:15 +0000
Manifest next update: Mon 08 Sep 2025 03:01:15 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: G0bUPWsQHM51sS6f9BGs7GUl/zBNuQJfC+IgDsXX+bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:ec:a4:9c:87:2f:3a:9f:99:fc:0c:e5:fb:93:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Sep 7 03:01:15 2025 GMT
Not After : Sep 8 03:01:15 2025 GMT
Subject: CN=f56545853a6bf47b565f3d041524da9cbd1c8446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:f9:eb:d5:4f:1e:a5:fc:fd:67:dc:36:52:
6d:bb:74:5e:84:12:15:68:26:d9:ce:69:d8:70:fe:
87:c9:85:bc:a5:f3:11:db:92:04:9f:1a:a1:aa:0e:
71:45:83:6b:8d:af:1f:d8:ea:5a:f1:72:58:0c:af:
dd:8b:8a:23:77:ab:c1:57:d2:66:32:81:3e:61:02:
58:11:f2:21:8c:e7:de:ea:d2:2f:27:cc:3f:b3:5b:
a2:72:07:6c:40:12:a2:c2:25:79:6c:25:38:01:cf:
d6:41:6c:15:c7:d7:dd:5c:05:4d:3e:74:20:ca:70:
a5:cf:32:27:d2:54:16:46:d7:7c:35:c3:a5:3b:34:
ec:2b:0d:82:60:98:6d:98:59:28:9a:18:76:16:7b:
3e:b4:c0:99:f4:57:65:2f:d6:70:0a:c6:28:31:aa:
53:da:f6:1e:dd:50:e9:fc:e7:33:9a:e4:19:c0:a3:
40:01:41:ac:f6:fc:44:1d:b0:06:71:83:12:a4:6f:
47:49:d0:55:99:38:8a:0e:2e:9e:4e:e0:91:1f:29:
c2:f1:4d:68:22:24:49:5b:c1:af:7a:40:f9:73:fe:
f6:9c:95:6f:5c:c8:69:78:55:b6:a6:2c:a0:de:93:
49:83:05:5d:a5:42:0a:3b:a4:34:78:48:d1:18:99:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:65:45:85:3A:6B:F4:7B:56:5F:3D:04:15:24:DA:9C:BD:1C:84:46
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:aa:32:55:2c:dc:08:5c:1c:46:af:49:89:77:ab:bc:74:1f:
2e:bd:0c:1d:5e:d7:a3:ca:e8:14:75:e3:39:76:e2:ad:e0:6f:
c2:46:02:c0:b8:81:33:89:35:e1:58:76:8b:39:51:af:cb:1c:
ff:60:6e:9d:72:1e:80:13:c0:68:7a:2d:e6:e4:c9:0f:dc:58:
7c:08:f7:a7:50:d5:d1:71:1c:62:bb:68:62:63:4b:40:ee:80:
e5:27:bc:b8:0b:82:53:1a:e7:ec:4e:73:1e:6b:4d:35:23:04:
32:d7:a1:a0:a1:11:0f:1c:37:1f:c2:a0:6b:f4:d5:0a:da:f3:
d8:54:43:13:6e:13:12:e1:44:2a:f3:c6:01:4f:17:86:7d:f8:
32:2f:01:7a:17:a3:83:d7:82:f6:22:1d:d9:26:d9:8a:ca:11:
7a:b8:c6:c4:5d:19:7d:d0:e1:b0:b1:68:66:bc:42:24:9d:3c:
8c:17:54:d8:7b:b1:84:d2:26:53:bb:0a:6a:f1:cb:4e:c3:b9:
4a:1f:a5:dc:5e:4f:61:dd:68:5a:cf:c7:f5:41:87:40:dc:24:
9b:4f:c5:b3:19:50:c8:52:a5:bb:cd:53:33:9e:a3:4f:7c:4c:
d7:ec:75:eb:39:4e:59:79:95:3d:79:36:54:b7:5d:8c:b0:e8:
e5:9f:52:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:55 2025 by rpki-client