Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
File: hRwTZejd_OV1mPvo3n6oesYD4iw.mft (raw, json)
Hash identifier: PnQ76bP0ciO/NxGXe0twvMmG3BfBn7m5s34laivMW0Q=
Subject key identifier: DC:16:31:8D:0B:FB:24:57:48:2F:69:44:E7:F1:91:18:49:50:D2:6B
Authority key identifier: 85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C
Certificate issuer: /CN=851c1365e8ddfce57598fbe8de7ea87ac603e22c
Certificate serial: 0198D660E0C553B483FC1AA1FEE32BC3D47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
Manifest number: 089A
Signing time: Sat 23 Aug 2025 10:02:09 +0000
Manifest this update: Sat 23 Aug 2025 10:02:09 +0000
Manifest next update: Sun 24 Aug 2025 10:02:09 +0000
Files and hashes: 1: hRwTZejd_OV1mPvo3n6oesYD4iw.crl (hash: me9D2n4Z4/wT0iltNi2Er/H1rsH9aosb02iyzo4otNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e0:c5:53:b4:83:fc:1a:a1:fe:e3:2b:c3:d4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c1365e8ddfce57598fbe8de7ea87ac603e22c
Validity
Not Before: Aug 23 10:02:09 2025 GMT
Not After : Aug 24 10:02:09 2025 GMT
Subject: CN=dc16318d0bfb2457482f6944e7f191184950d26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:22:b1:76:ff:4b:2b:32:cc:9d:bf:b6:67:
57:a4:a3:f8:c6:29:9e:ed:31:2f:26:f6:a1:40:13:
a9:b9:4c:6c:e0:0e:eb:48:fd:f1:b4:a6:c0:32:e0:
ae:34:cc:95:82:a9:e7:df:75:34:96:69:cc:63:6f:
56:0d:1f:35:d3:e4:b1:ed:31:65:ec:af:a4:0c:6b:
21:58:48:6f:32:9f:c6:39:db:7f:c0:ee:da:2a:7d:
3a:35:fa:d2:89:6a:30:91:79:0a:8a:09:b8:ea:49:
fc:2b:a9:b5:4c:ef:e5:89:f3:a0:f5:83:48:b9:d5:
24:6b:b4:ba:18:34:27:ac:93:dd:23:f1:7e:78:29:
97:a2:30:cc:27:b4:96:37:3e:6d:bd:0e:ec:28:fc:
23:ed:ed:e9:29:fc:7e:56:67:d2:5f:a1:78:0d:bd:
3a:32:ee:b1:69:da:b6:73:4e:68:ed:11:d0:a8:c5:
77:49:d6:dd:f6:38:8d:bb:46:5b:8a:42:cf:23:ae:
ce:93:58:59:58:17:99:be:a8:1f:f4:3c:6d:ed:ca:
72:b6:23:03:5f:94:79:6b:5d:1f:cd:b3:d2:9d:5d:
d8:cd:05:91:31:83:be:e4:e7:cc:bf:92:25:1c:eb:
8d:4d:6a:6a:a4:77:ec:80:5a:7a:6b:03:c6:6a:12:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:31:8D:0B:FB:24:57:48:2F:69:44:E7:F1:91:18:49:50:D2:6B
X509v3 Authority Key Identifier:
keyid:85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:47:ff:f9:61:11:88:95:d9:eb:0a:91:80:a6:b9:7c:bf:04:
2e:da:85:12:43:4d:76:03:04:1c:95:03:e3:d6:aa:80:c6:8d:
e8:74:b1:f6:98:a9:f1:00:32:77:fc:d4:e6:cb:a3:2d:28:a6:
11:23:80:75:c0:6a:82:94:6c:fb:a8:b1:2d:c8:93:c6:09:ff:
0f:be:1d:66:77:c5:57:0a:b6:20:49:8f:f2:b8:bc:38:12:66:
b2:a4:29:48:55:33:b9:66:ff:b7:e8:51:b6:f4:ce:e0:1f:1f:
98:9b:6e:68:4c:20:a6:df:59:04:03:4e:8a:97:0e:3b:d2:d5:
d5:53:dd:e1:19:46:da:e9:4e:63:68:9a:59:5c:67:b6:96:d7:
20:0c:88:c7:68:ff:da:4b:22:cc:51:2a:18:4f:ea:4d:4d:6c:
3c:c5:c6:70:e5:cf:b2:90:d6:13:a0:9b:11:c1:fe:e6:c1:f1:
38:f3:1e:fb:cd:39:45:2c:f8:2c:96:42:b2:06:ff:0d:c3:07:
e6:5c:b9:a3:14:a7:a0:41:64:50:fe:0b:37:1b:1a:fb:ef:ad:
b3:6a:5c:87:23:5e:d3:e2:2d:e3:70:62:0e:c5:83:b1:1f:df:
e7:5c:19:4f:1c:c3:fe:6a:fd:2a:44:31:28:13:6f:fe:f1:ba:
f6:8a:88:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:42 2025 by rpki-client