Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
File: hVLmDnmh3nUzQ9eBW4cMloDArn8.mft (raw, json)
Hash identifier: hEZKnENsc3CxJZEtmnMzy0vrPwnO5EtwbX00WOlee34=
Subject key identifier: 77:5F:08:C3:2A:C0:FF:9F:18:E7:C6:40:E7:1B:B2:90:CD:6A:5A:2C
Authority key identifier: 85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
Certificate issuer: /CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Certificate serial: 0199FBEB19D32373E670EE8892BA1CE3C3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
Manifest number: 0CB3
Signing time: Sun 19 Oct 2025 10:01:52 +0000
Manifest this update: Sun 19 Oct 2025 10:01:52 +0000
Manifest next update: Mon 20 Oct 2025 10:01:52 +0000
Files and hashes: 1: hVLmDnmh3nUzQ9eBW4cMloDArn8.crl (hash: MicCkZeHkXUXiNl96Hl/YOqUdVaFa+DmGachbVrVyfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:19:d3:23:73:e6:70:ee:88:92:ba:1c:e3:c3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Validity
Not Before: Oct 19 10:01:52 2025 GMT
Not After : Oct 20 10:01:52 2025 GMT
Subject: CN=775f08c32ac0ff9f18e7c640e71bb290cd6a5a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:62:21:cf:fc:e9:e7:33:12:84:46:cc:da:
15:bc:db:c9:48:e6:77:c8:09:af:20:e6:54:4b:e3:
02:3f:9c:f5:99:75:6a:95:23:e7:a8:4d:b2:e7:5f:
42:82:21:e0:ed:54:ed:45:28:ae:ef:d7:cc:fa:7f:
19:4d:57:4c:77:9e:d0:3f:55:92:2e:eb:cd:b7:06:
5c:22:5b:55:28:28:d7:f1:92:f0:06:64:e2:d5:d9:
a1:11:18:d2:78:86:8a:4d:2b:cd:1e:d1:80:1b:bd:
e1:82:87:61:ca:68:a4:ba:c5:b6:4f:9d:17:5a:ea:
cf:32:65:4c:eb:dc:1e:af:00:66:a2:34:59:81:e4:
2a:70:c9:13:c7:ed:d4:70:91:af:cd:88:83:66:0b:
5f:d2:ec:b1:24:6f:c1:e2:a1:65:1d:60:af:74:86:
be:f0:2a:3e:ce:be:a1:bc:08:18:7c:e9:9c:e1:75:
7f:3e:12:da:e2:e0:b0:c1:a6:2d:fb:6e:95:39:e3:
46:9e:49:54:51:6b:76:f4:a7:4d:bc:e4:1e:c0:ba:
db:62:8a:05:8f:5b:7b:36:cb:19:f6:51:fc:86:4b:
b0:f3:0d:7c:7b:3c:4b:9d:1d:49:da:cf:f0:c8:be:
46:02:2e:03:b6:c6:eb:b5:62:62:ef:48:be:89:78:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5F:08:C3:2A:C0:FF:9F:18:E7:C6:40:E7:1B:B2:90:CD:6A:5A:2C
X509v3 Authority Key Identifier:
keyid:85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:db:42:02:4c:a9:67:30:3e:ce:27:48:5c:bc:64:5b:c6:1f:
d0:31:d9:e3:e6:c8:86:00:58:31:77:54:30:cf:25:b9:3e:fb:
0a:df:2d:ea:af:be:76:5c:bd:b2:5a:5d:ad:79:48:1e:09:0f:
4d:d3:92:69:9e:48:52:fc:ff:01:1c:58:94:cb:92:98:ef:1c:
58:e6:5c:8f:9e:4b:64:85:a0:61:65:fd:77:fe:03:e0:96:e4:
db:f5:f5:4b:f9:11:9d:03:0c:14:db:67:bd:57:2b:66:cd:97:
c5:8c:4b:21:5c:ee:25:b3:1e:fe:18:72:ad:db:6d:c1:6b:ae:
2b:02:09:02:f7:a5:11:c4:7c:e4:0e:7d:69:af:d5:20:7f:7e:
32:93:29:a2:6c:e6:f5:bb:64:73:5d:65:8a:1a:e8:f2:7a:42:
b0:f1:0f:55:24:3b:79:cb:55:7e:dc:19:a0:8b:96:5c:a9:a7:
30:84:3a:84:84:a1:fe:ee:ad:68:d2:4d:d5:f5:86:f0:02:ad:
4d:e4:09:0d:82:2f:f0:6c:27:fc:8b:65:cf:6f:f5:9d:ee:af:
dd:dd:89:c1:2d:f0:a5:e5:e4:1e:9c:66:f2:70:2d:b7:6a:2e:
9e:c0:42:9f:56:1d:9b:c1:51:c3:ac:ff:d9:7e:eb:48:69:57:
b2:4e:dc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:51 2025 by rpki-client