Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
File: H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft (raw, json)
Hash identifier: 7u/U4buBpShTLIQTgPLpKWeqViwhQSWQPDNfPf6AVj8=
Subject key identifier: 2F:B2:6B:A5:A1:D6:52:73:00:71:8A:A5:52:88:B2:1A:28:AD:6B:71
Authority key identifier: 1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
Certificate issuer: /CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Certificate serial: 0199221E3B24295BA811E79EF0BA06FAB57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
Manifest number: 6C
Signing time: Sun 07 Sep 2025 03:00:30 +0000
Manifest this update: Sun 07 Sep 2025 03:00:30 +0000
Manifest next update: Mon 08 Sep 2025 03:00:30 +0000
Files and hashes: 1: H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl (hash: QqPxzpFwEw1YoEBqK2B4g7GXEmPpeezWoATQgkhQ8jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:3b:24:29:5b:a8:11:e7:9e:f0:ba:06:fa:b5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Validity
Not Before: Sep 7 03:00:30 2025 GMT
Not After : Sep 8 03:00:30 2025 GMT
Subject: CN=2fb26ba5a1d6527300718aa55288b21a28ad6b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:94:31:27:83:23:b2:f3:ff:64:19:06:2f:
9c:7a:d7:88:1a:f0:7d:65:a8:49:16:7e:cd:dc:06:
ca:87:cd:13:f7:2c:77:ac:48:02:8b:50:12:83:83:
27:ef:47:af:4a:de:98:e0:0e:2e:c0:d2:37:af:0e:
a5:dd:36:02:38:f2:fe:96:fc:b4:bb:da:db:bb:f4:
64:de:4e:7e:b0:4e:2e:1a:00:6b:24:47:67:76:6c:
68:be:75:0f:81:39:a6:e5:78:f2:a2:2f:a8:01:88:
6b:f6:1e:1a:72:a5:1d:fb:13:88:d4:7d:1d:3a:65:
3d:7c:fb:22:f5:e9:b1:b2:37:7b:a5:23:29:9e:06:
6d:51:eb:28:4b:a7:71:88:58:43:30:58:d5:31:a7:
97:54:ec:c0:2e:c8:c7:e4:1a:b6:96:30:bb:fd:d0:
87:a3:ab:ef:50:47:6f:76:b8:b1:6c:d8:c3:bd:4f:
07:26:30:35:48:7e:e1:05:01:38:a2:d2:7e:ff:47:
eb:20:01:5a:70:e1:24:93:fa:fc:cc:a7:a1:27:7d:
31:b1:e8:40:bd:e8:65:aa:7d:66:17:bb:43:9e:f8:
95:99:c4:69:20:e5:c8:fd:27:5e:27:68:ea:f4:6c:
76:fe:1f:da:37:3d:f5:85:75:d6:1f:3a:aa:e7:7c:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B2:6B:A5:A1:D6:52:73:00:71:8A:A5:52:88:B2:1A:28:AD:6B:71
X509v3 Authority Key Identifier:
keyid:1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:96:15:42:4e:41:e4:c7:97:e2:9b:80:af:4f:e1:19:0f:0c:
ad:56:01:8f:95:dd:44:1c:f8:50:82:c4:da:6f:ca:03:4a:7e:
d3:0f:de:4e:a7:6d:59:d7:e7:6f:ed:99:ec:52:05:d8:4c:40:
c1:83:cc:6b:c1:81:cf:c3:8e:b0:b8:58:c9:5b:90:8b:4c:58:
d2:d9:43:19:72:ca:0a:f2:9a:24:36:53:b4:3b:5d:9a:94:99:
e5:bc:c2:b1:ad:2a:31:23:bf:94:3c:e6:7b:fb:54:fc:6a:2b:
04:1f:62:d9:0e:fe:5d:02:b4:f1:0d:cc:4b:ba:20:9e:72:d8:
f1:1d:e1:0f:c7:33:a9:1c:2d:f6:21:90:e0:60:4b:8d:1f:25:
af:84:c7:05:cb:56:f3:07:b9:75:da:f0:a8:5a:4b:41:1f:ef:
f4:38:8b:35:a7:3c:b5:f2:da:c6:e6:75:e7:71:08:a6:dd:f0:
e4:a3:2e:4a:04:69:39:3c:f1:18:8a:58:85:95:ca:0e:fb:63:
87:f2:9f:e2:c4:a3:65:22:d4:7c:c8:da:f2:39:73:d9:c6:c9:
23:96:58:ff:8a:5c:a8:20:41:68:49:bb:14:50:31:83:1f:dd:
d8:ca:73:71:55:a9:10:f2:45:20:a2:14:84:b6:7b:f7:c4:01:
b5:22:5e:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHjskKVuoEeee8LoG+rV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZGQ4N2FiMTE1NGZlZDVmOWJkMmI4YjU1MWExNTJiMTI3
NWMwMDEwHhcNMjUwOTA3MDMwMDMwWhcNMjUwOTA4MDMwMDMwWjAzMTEwLwYDVQQD
EygyZmIyNmJhNWExZDY1MjczMDA3MThhYTU1Mjg4YjIxYTI4YWQ2YjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpSUMSeDI7Lz/2QZBi+ceteIGvB9
ZahJFn7N3AbKh80T9yx3rEgCi1ASg4Mn70evSt6Y4A4uwNI3rw6l3TYCOPL+lvy0
u9rbu/Rk3k5+sE4uGgBrJEdndmxovnUPgTmm5Xjyoi+oAYhr9h4acqUd+xOI1H0d
OmU9fPsi9emxsjd7pSMpngZtUesoS6dxiFhDMFjVMaeXVOzALsjH5Bq2ljC7/dCH
o6vvUEdvdrixbNjDvU8HJjA1SH7hBQE4otJ+/0frIAFacOEkk/r8zKehJ30xsehA
vehlqn1mF7tDnviVmcRpIOXI/SdeJ2jq9Gx2/h/aNz31hXXWHzqq53wZcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+ya6Wh1lJzAHGKpVKIshoorWtxMB8GA1UdIwQY
MBaAFB/dh6sRVP7V+b0ri1UaFSsSdcABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDkySHF4RlVfdFg1dlN1TFZSb1ZLeEoxd0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NjZiYTQtZTY4My00YjA0LTlmNDUt
YjQxN2FjOWJiZmEzLzEvSDkySHF4RlVfdFg1dlN1TFZSb1ZLeEoxd0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85NjZiYTQtZTY4My00YjA0LTlmNDUtYjQxN2FjOWJiZmEz
LzEvSDkySHF4RlVfdFg1dlN1TFZSb1ZLeEoxd0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpYVQk5B
5MeX4puAr0/hGQ8MrVYBj5XdRBz4UILE2m/KA0p+0w/eTqdtWdfnb+2Z7FIF2ExA
wYPMa8GBz8OOsLhYyVuQi0xY0tlDGXLKCvKaJDZTtDtdmpSZ5bzCsa0qMSO/lDzm
e/tU/GorBB9i2Q7+XQK08Q3MS7ognnLY8R3hD8czqRwt9iGQ4GBLjR8lr4THBctW
8we5ddrwqFpLQR/v9DiLNac8tfLaxuZ153EIpt3w5KMuSgRpOTzxGIpYhZXKDvtj
h/Kf4sSjZSLUfMja8jlz2cbJI5ZY/4pcqCBBaEm7FFAxgx/d2MpzcVWpEPJFIKIU
hLZ798QBtSJeUQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:01 2025 by rpki-client