Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File: DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier: 2lLxfEWgc9SapE65avdJQPnRN/vOxy9Hs/GHsggbfxk=
Subject key identifier: 89:2E:2E:9F:C0:32:85:5A:B6:69:79:38:AF:5E:C5:CB:B4:C7:DF:4E
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial: 0198D4A805E680B8CE10E4E914707E6BF2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number: 022D
Signing time: Sat 23 Aug 2025 02:00:37 +0000
Manifest this update: Sat 23 Aug 2025 02:00:37 +0000
Manifest next update: Sun 24 Aug 2025 02:00:37 +0000
Files and hashes: 1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: LfDqP9xKiMps5w/Lrqw7309QzXtXmWxiI66SxGZH05Q=)
2: F8pRiEheQa10SQdkNWvS99cZXUQ.roa (hash: ECJYqiZw6ZmZtQ04HHTXu/7XAKbIZCgVHRvo7AY0E6A=)
3: _rfOVyo7DuPsLTQU__hvST7kgv0.roa (hash: uPbFY4d1NRbHScZUPpEXzuR0hfWtaapZ5VL4DMx2+zU=)
4: iX_xELZoVhjZx2tmfK6PH-R4qfg.roa (hash: 8Md57/s7g7icy63N7gSiYrFS0c7WsDeTkry4vuIPhFc=)
5: ihZ66_FRP1ZEi9NozSdwfCGel-M.roa (hash: wFOQHVX1zMY4YtBKixW4VOsy+9ZxuzYcQZi+JYB6nWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:05:e6:80:b8:ce:10:e4:e9:14:70:7e:6b:f2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
Validity
Not Before: Aug 23 02:00:37 2025 GMT
Not After : Aug 24 02:00:37 2025 GMT
Subject: CN=892e2e9fc032855ab6697938af5ec5cbb4c7df4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d8:30:aa:db:62:76:0a:3f:45:6c:7f:29:91:
f0:ee:35:cb:56:94:8f:cf:56:51:da:4c:a3:a9:4a:
79:80:88:53:1f:b6:30:4d:bc:8b:db:14:84:b0:b7:
0a:bd:cf:ef:86:63:18:11:1d:c2:aa:33:6e:d6:12:
72:8c:c5:67:cd:6d:ee:00:e3:04:fb:2a:90:db:34:
51:7b:8c:9b:0f:85:4f:a9:bb:b2:a6:c2:1c:b0:15:
25:6f:2b:a4:e5:f4:61:fa:35:24:5b:5d:4a:a7:b7:
f1:63:af:1c:0d:38:82:fe:d7:dd:b8:bb:4e:e9:34:
ea:d4:db:5f:cc:89:87:95:ce:6a:60:0b:13:e8:8b:
e3:46:ce:22:ec:36:f1:7a:d8:b9:23:d1:b6:78:1b:
62:ac:4a:f7:96:ca:63:87:66:11:24:6f:60:04:59:
08:15:c8:f3:ba:c4:11:c7:6c:61:f5:18:b6:24:b8:
69:89:17:e5:7d:87:c3:e9:1a:79:85:d8:02:f2:60:
65:9d:05:97:ad:86:ad:4f:f5:ab:0a:b6:88:52:6f:
50:17:76:05:9d:fa:7a:23:fb:d3:a4:41:f5:f7:c2:
b7:89:bf:08:6d:d7:bd:f8:b4:16:93:30:b1:21:97:
07:6b:ae:85:96:98:b0:47:0e:33:b5:95:5f:a7:06:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2E:2E:9F:C0:32:85:5A:B6:69:79:38:AF:5E:C5:CB:B4:C7:DF:4E
X509v3 Authority Key Identifier:
keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a9:29:1a:09:b5:10:00:79:be:e9:8e:de:f2:c1:39:c0:39:
09:9f:52:40:98:51:59:47:0f:6f:51:bc:b8:4b:1f:25:c2:6e:
7f:ce:7d:ed:99:85:5b:c1:43:5e:0f:b0:5c:21:b6:22:a1:be:
88:10:18:b4:48:3d:e4:9d:51:51:b9:72:7c:97:f9:51:28:a8:
da:44:ad:c4:df:b4:1d:1d:1b:43:09:96:b2:e3:71:9f:5c:dd:
91:ef:29:37:fe:7d:f1:3b:39:43:81:78:a8:11:b6:b4:5a:a1:
b0:b4:74:84:46:cc:0d:e0:78:6b:6c:03:d1:89:66:8d:43:54:
3b:4b:7a:04:c5:cf:a7:b0:bc:31:89:51:e2:8c:d9:19:89:ce:
79:07:de:d9:70:c8:88:ac:84:48:3a:a3:03:32:4a:62:10:52:
f0:34:58:ff:2b:b1:53:91:20:f0:06:d3:74:b9:5d:37:1c:10:
3f:1c:ec:52:4b:87:c6:de:82:52:91:63:8d:7f:e7:e9:0d:88:
d6:77:63:5c:39:c2:35:13:af:77:3e:46:01:ee:0c:b0:d4:51:
42:17:fc:b3:b3:ba:d7:b2:a8:89:07:66:f8:a1:f4:7d:9f:a7:
1a:dd:e4:5f:71:f5:04:6e:46:cd:df:f5:d6:10:20:79:77:23:
33:78:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:33 2025 by rpki-client