Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json)
Hash identifier: qISrYLoDgfSOdbKT0HRc3i3LnqfGdmhstF9buPDtbek=
Subject key identifier: F6:F7:38:56:B6:51:79:92:3C:06:77:82:6D:B4:63:4F:91:F4:92:2C
Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Certificate serial: 0199239F3A3E5AD15980B5941753AE8A532B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
Manifest number: 15D6
Signing time: Sun 07 Sep 2025 10:01:01 +0000
Manifest this update: Sun 07 Sep 2025 10:01:01 +0000
Manifest next update: Mon 08 Sep 2025 10:01:01 +0000
Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: ikqP8n/eU+Sz7d6pRdYzRUsed8pMdM+sZ5ee/BRBOZc=)
2: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:3a:3e:5a:d1:59:80:b5:94:17:53:ae:8a:53:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Validity
Not Before: Sep 7 10:01:01 2025 GMT
Not After : Sep 8 10:01:01 2025 GMT
Subject: CN=f6f73856b65179923c0677826db4634f91f4922c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:fa:b5:45:b8:13:6c:d5:75:38:1e:ad:1c:
b0:7a:67:de:9a:1c:43:e2:e7:23:77:ba:10:1e:6e:
ba:a2:a9:ed:07:24:89:2a:61:41:0d:3c:8b:34:2f:
2b:7f:b1:a1:5a:d2:fb:b5:85:76:6f:ae:44:7d:a0:
f5:a8:59:65:ee:b8:7f:61:96:6d:9c:2f:56:c9:46:
b8:66:a8:46:6f:7a:40:37:1e:4d:9e:e1:e3:da:8e:
c2:1e:ab:e1:50:56:0d:a3:a7:c2:59:8b:fe:4e:ed:
41:6c:93:25:52:9c:10:b2:4b:78:da:c0:8a:f0:b5:
2b:c2:44:90:98:c1:b6:e1:26:9a:ea:6f:34:59:c5:
ae:77:d1:19:e0:fc:e1:e3:c3:3b:de:62:8e:06:8a:
ab:0c:c9:18:43:84:2b:5b:f0:06:19:46:66:fb:98:
85:f7:40:30:03:64:04:67:6a:b9:48:e2:b5:07:44:
af:cb:56:25:01:53:01:2b:a0:41:bf:9c:20:86:27:
c0:41:e0:c4:21:67:b2:80:4d:aa:a5:74:fa:c3:93:
6e:ba:b2:95:fa:9d:87:15:f6:33:24:01:0c:f8:0f:
df:9e:0c:e9:19:c8:a1:24:fa:61:ad:53:0e:bb:a4:
5a:a1:a6:1e:61:d4:95:67:95:08:60:cc:5d:eb:dc:
2c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F7:38:56:B6:51:79:92:3C:06:77:82:6D:B4:63:4F:91:F4:92:2C
X509v3 Authority Key Identifier:
keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:77:ae:4f:73:74:58:e5:d3:00:b8:c7:02:e2:47:98:f5:d4:
53:0d:2a:7c:b4:53:3a:ea:14:78:a8:69:7b:87:61:6b:14:81:
8b:2c:6b:26:8a:f7:9d:31:91:43:b8:60:7f:38:6d:9c:7c:1f:
fa:03:f7:91:fe:aa:d4:ea:ff:c6:9e:c9:0d:bd:d2:15:94:0b:
d2:2b:8f:25:0c:c0:3b:9c:e0:e6:fb:ec:4c:81:39:3d:28:67:
97:b7:00:b7:0c:3e:33:38:df:3b:4c:0e:4d:95:50:de:91:2c:
b4:fa:9f:12:19:77:b8:e7:e1:36:cb:df:e0:22:25:a4:f6:cc:
76:68:c5:19:6e:fe:01:47:6b:f0:be:ef:99:40:c3:94:d4:49:
28:01:44:cc:61:02:64:2c:76:ec:08:8c:0e:65:00:85:f3:9a:
fa:14:58:36:da:b2:ca:30:7c:51:44:28:d5:aa:c7:5e:6c:21:
32:28:e5:3f:b8:25:3b:a8:da:3c:82:65:6d:0b:59:06:ce:e3:
c6:5a:b3:7a:f0:f2:03:f6:c3:1f:2d:42:49:d0:32:04:5e:55:
d6:b0:e2:13:bd:78:6a:b7:5a:84:28:48:cb:c5:0c:13:1e:00:
87:81:5b:2a:32:7f:f8:52:ef:67:b7:c4:2a:18:88:21:c6:c8:
42:60:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:09 2025 by rpki-client