Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
File: hRwTZejd_OV1mPvo3n6oesYD4iw.mft (raw, json)
Hash identifier: 2o4j4t+pK1EFT3+aoGJ2u4WLHKnwDu84LlsMHISOSf4=
Subject key identifier: 98:EE:8A:1B:67:A2:F7:6B:37:52:7C:87:45:9C:95:14:4D:D3:9D:5A
Authority key identifier: 85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C
Certificate issuer: /CN=851c1365e8ddfce57598fbe8de7ea87ac603e22c
Certificate serial: 0199FBEB05A09CFA0323FAD26EBBD66BD787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
Manifest number: 0932
Signing time: Sun 19 Oct 2025 10:01:47 +0000
Manifest this update: Sun 19 Oct 2025 10:01:47 +0000
Manifest next update: Mon 20 Oct 2025 10:01:47 +0000
Files and hashes: 1: hRwTZejd_OV1mPvo3n6oesYD4iw.crl (hash: nt/3o82RlfYStrbT1YU79us2NaHEN1KBLRxvK4mXkh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:05:a0:9c:fa:03:23:fa:d2:6e:bb:d6:6b:d7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c1365e8ddfce57598fbe8de7ea87ac603e22c
Validity
Not Before: Oct 19 10:01:47 2025 GMT
Not After : Oct 20 10:01:47 2025 GMT
Subject: CN=98ee8a1b67a2f76b37527c87459c95144dd39d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:8f:90:43:4f:07:3f:c9:35:c5:8d:0a:7f:
3d:c9:f4:30:25:b3:6d:91:f1:36:10:73:e5:61:0f:
9d:9d:7b:ae:4e:b2:93:e9:19:84:0b:f8:f4:a0:e5:
69:71:d5:04:fa:0c:0b:b5:45:51:7e:2a:4b:52:e6:
27:64:ae:62:a2:05:42:23:a9:13:22:e1:4f:65:e4:
09:b8:85:0a:de:78:23:6b:d8:ee:f4:71:c8:84:0b:
38:6e:b5:26:5f:db:26:53:ec:4b:f5:47:fd:74:66:
85:34:60:63:70:24:58:11:6c:89:f7:fa:c0:47:6c:
4f:d7:e6:ee:f4:73:65:3f:f0:1b:44:18:1f:59:76:
eb:e8:dc:35:e7:d9:5e:ca:25:59:cb:44:cc:24:93:
c6:3a:50:5b:65:33:7c:5b:6b:6f:99:38:57:60:93:
f1:92:8a:40:c0:40:7a:fe:89:85:98:02:9b:4c:a0:
94:f8:3e:d6:2f:c9:68:4a:84:1d:18:70:45:b5:9f:
9b:d2:bf:c9:17:fd:05:ec:32:c1:b8:34:56:24:df:
9c:3e:4e:35:67:be:bf:94:7a:77:91:59:f7:c0:3e:
84:1b:38:fe:2a:94:22:15:9c:74:11:af:10:10:36:
ee:b4:ee:29:9f:9a:02:09:27:07:d2:f3:4b:98:cd:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EE:8A:1B:67:A2:F7:6B:37:52:7C:87:45:9C:95:14:4D:D3:9D:5A
X509v3 Authority Key Identifier:
keyid:85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:df:51:32:4d:1e:c3:b5:45:45:a7:02:62:d0:32:7a:90:3f:
24:b3:51:eb:12:e4:ff:08:05:b2:b6:a5:71:05:92:27:d2:45:
57:6c:75:f9:7d:d7:c6:aa:f7:d5:4d:d5:a5:09:56:b6:46:6d:
6c:3d:d7:c3:1e:b1:99:1e:98:d0:c0:75:93:1a:21:07:70:10:
ea:5c:e1:67:ad:e6:d6:50:47:b2:c9:12:d3:b6:1a:19:68:ec:
38:93:aa:62:ba:59:e5:1f:e9:5a:23:c1:5d:9d:09:18:4b:26:
ee:75:4f:d3:1b:8c:8e:c7:85:ff:b7:8e:d2:c9:c1:f5:60:6c:
29:84:77:b9:f0:c7:bb:4e:76:db:16:d0:e2:7c:bd:a2:30:65:
30:ad:a6:01:d2:16:06:5a:45:23:bf:7a:05:9f:c7:3c:5a:2e:
98:9f:dc:92:fb:a3:7b:ce:3d:6a:17:cb:2a:38:c8:fe:54:99:
f7:29:7f:82:37:3f:04:7c:d8:61:87:51:fd:82:6a:0e:c9:53:
ee:f7:8c:5e:56:55:00:98:c8:15:08:ea:10:aa:85:d4:6b:f5:
55:ea:7b:3a:a0:f4:8c:61:5c:d9:b0:d0:06:d7:df:2a:92:ad:
a5:8c:ee:34:e5:b3:31:7f:8c:ef:7a:01:fc:3e:93:6d:e3:c5:
e0:88:94:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:55 2025 by rpki-client