Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
File: hhiHKrn6K6AssBpEzo64dkEoHBw.mft (raw, json)
Hash identifier: NtH8cGjP2eyo4s6sXmw3M1XPCZE2gVbbIF0kABXlEkg=
Subject key identifier: 05:4C:42:3D:C1:F0:D9:46:34:EE:77:5A:0B:CE:D2:84:90:79:8C:83
Authority key identifier: 86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C
Certificate issuer: /CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
Certificate serial: 0199FC58C5A004E6D263472182B3B8365791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
Manifest number: 0681
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: hhiHKrn6K6AssBpEzo64dkEoHBw.crl (hash: pCd46yTCLwFBoXg2XoZW7l63lX8LqDo6TLBZuu/+X8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c5:a0:04:e6:d2:63:47:21:82:b3:b8:36:57:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=054c423dc1f0d94634ee775a0bced28490798c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:90:13:4c:84:83:f1:d6:2a:ed:14:32:66:
89:af:92:71:84:8d:8c:65:f1:2b:5f:2e:17:87:2f:
9d:65:8d:82:54:f0:48:b5:66:36:2d:cd:f3:96:e4:
63:0a:63:13:da:a3:16:cd:e9:1b:4c:10:5f:ff:3a:
15:38:01:f7:9c:6b:2f:14:2a:d4:0a:ce:2c:2c:0b:
49:7f:17:6d:27:d6:b0:0b:bb:6a:2b:99:f9:22:ac:
7e:f2:b4:ba:28:66:e2:69:74:5b:94:fc:bb:9f:69:
9b:de:c9:d0:9c:ed:82:8f:9d:06:9f:4b:69:ce:bc:
dc:db:3b:35:94:30:f4:b9:dd:34:1b:55:77:d1:2c:
3e:58:55:26:99:f1:1c:b5:1a:f7:92:a6:95:8a:fc:
2d:90:6f:4d:5f:39:95:a9:e5:dc:2b:db:fe:13:17:
ca:3e:0a:ba:bb:c3:7f:0a:10:61:39:72:0a:e0:a2:
39:bb:90:07:15:93:38:d6:4b:c9:12:8e:fc:45:47:
7a:c2:db:79:06:00:77:67:c7:47:19:9f:1e:4a:e2:
8b:7a:4f:fe:51:b4:91:f4:d3:85:ba:6d:9e:f1:4b:
4a:f5:13:96:83:81:c2:d3:db:82:e5:4a:d0:37:2e:
09:85:c8:6a:a8:30:62:37:26:52:28:9b:a7:0a:02:
a3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4C:42:3D:C1:F0:D9:46:34:EE:77:5A:0B:CE:D2:84:90:79:8C:83
X509v3 Authority Key Identifier:
keyid:86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:21:91:31:b5:94:bb:7b:3b:19:44:59:8e:17:96:c4:9d:b5:
c7:9b:5e:2d:74:5a:06:f0:a4:4a:f2:59:43:dd:40:46:e8:82:
77:af:8c:19:62:bd:bb:6f:27:f8:1f:aa:e3:43:d8:c7:6d:b5:
98:9e:ec:28:af:df:a9:3e:5d:33:57:cf:16:a4:d7:23:73:05:
b7:26:2d:4b:5a:3c:87:fc:b9:9c:7f:4c:60:62:17:8b:51:c5:
0a:7e:dc:7b:09:ce:36:c3:4a:c2:da:e6:e0:2d:e0:2c:25:57:
fe:ce:ff:25:4c:a3:1b:6b:cb:b3:5c:13:71:7b:8e:2e:ae:b1:
7f:20:90:0e:b2:7b:b4:57:70:6e:4b:b0:bc:86:76:93:e6:30:
23:29:b8:47:14:72:e7:58:ed:54:d1:ce:75:71:be:7a:27:da:
8b:68:d4:e7:6b:11:af:17:ae:2a:90:72:16:28:58:2d:4d:53:
b5:e9:cb:0a:b9:21:ad:5e:9d:7f:c6:76:25:6e:f1:2b:11:ec:
ac:7d:97:0f:7d:c3:2a:59:05:49:26:ac:fd:65:cf:01:88:8d:
87:4e:37:3a:e1:84:88:33:77:b6:78:96:40:f6:40:4d:f1:0b:
e8:3b:3e:4b:ef:60:b0:d7:9c:08:4c:ad:70:80:e2:5f:07:7f:
04:19:48:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:06 2025 by rpki-client