Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft
File: hWlFRtV2UOyEZtOS0X-jQylgFUA.mft (raw, json)
Hash identifier: FYCNjNunEkxPvpGQEzgUoEbi6hKj0Oy+/HBi5fTmVMc=
Subject key identifier: 69:8E:6B:C4:35:0B:F7:52:E2:62:FB:4D:14:DB:78:10:CD:05:D9:47
Authority key identifier: 85:69:45:46:D5:76:50:EC:84:66:D3:92:D1:7F:A3:43:29:60:15:40
Certificate issuer: /CN=85694546d57650ec8466d392d17fa34329601540
Certificate serial: 0199FBB3617ADA8E9EB10387D3612715C411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft
Manifest number: C3
Signing time: Sun 19 Oct 2025 09:01:01 +0000
Manifest this update: Sun 19 Oct 2025 09:01:01 +0000
Manifest next update: Mon 20 Oct 2025 09:01:01 +0000
Files and hashes: 1: hWlFRtV2UOyEZtOS0X-jQylgFUA.crl (hash: o2u5uYSjkoLu0UwXIIywVckb6+Sj1Y4agRWDEI2HD+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:61:7a:da:8e:9e:b1:03:87:d3:61:27:15:c4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85694546d57650ec8466d392d17fa34329601540
Validity
Not Before: Oct 19 09:01:01 2025 GMT
Not After : Oct 20 09:01:01 2025 GMT
Subject: CN=698e6bc4350bf752e262fb4d14db7810cd05d947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:ff:ba:fd:8b:d4:ef:48:be:e7:b2:12:b0:
5c:92:01:59:65:7a:3f:90:33:10:bd:09:96:aa:57:
0a:5e:69:bd:00:8f:31:f0:d1:cd:92:56:f8:4b:fd:
c1:35:98:08:d8:22:c5:d4:66:25:76:13:c6:c6:45:
18:e3:6a:bd:89:2e:28:31:93:b5:6a:ac:9f:b6:2d:
a7:0b:f7:4e:db:b2:cc:80:d6:e6:85:09:27:db:2f:
18:de:3f:1a:80:94:e2:90:ac:f4:81:af:80:56:2f:
fe:90:8b:3f:e4:d6:52:f6:08:cb:5b:8e:49:29:b0:
5b:8d:cc:2b:f9:33:9e:12:af:68:69:e6:f7:46:fb:
bf:5b:c4:0e:47:be:ad:99:87:3f:dc:e3:5f:8e:2f:
ba:48:2e:6d:16:fb:45:5d:25:da:01:9d:a5:95:de:
80:ff:6a:94:ca:60:83:8b:17:23:01:f2:b5:d7:88:
93:bf:52:0d:02:09:e4:2c:9b:31:93:53:bf:19:32:
2e:0c:34:e2:15:c0:09:b6:35:c2:86:54:98:73:a0:
6e:bc:e6:2e:66:01:93:3d:13:80:0b:20:c2:06:a5:
09:7a:d1:e3:f5:7f:70:07:67:5e:21:bb:de:94:95:
49:6b:52:ea:8b:f2:e3:13:91:41:c7:24:10:72:cc:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:6B:C4:35:0B:F7:52:E2:62:FB:4D:14:DB:78:10:CD:05:D9:47
X509v3 Authority Key Identifier:
keyid:85:69:45:46:D5:76:50:EC:84:66:D3:92:D1:7F:A3:43:29:60:15:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e2:ba:12:37:f7:10:c9:40:f4:31:00:96:56:b2:62:4d:30:
36:b0:6e:a5:00:33:bc:0a:ad:dd:97:b0:70:e6:2e:cd:a9:a7:
17:91:84:6b:f5:6c:8d:af:81:a4:04:28:a7:26:57:33:fc:2c:
55:d1:36:28:85:12:b7:de:25:90:3a:e3:44:34:3a:75:a5:78:
3f:23:c5:db:b5:f2:2b:82:20:3a:f3:b2:8c:b2:33:0f:53:74:
f7:92:05:e2:ee:92:5b:b4:2c:81:9c:d9:f9:58:c4:88:44:2d:
36:14:65:41:bd:30:01:fc:5d:2c:fc:07:80:63:48:b4:3b:aa:
cb:0b:24:33:72:21:35:39:fa:ff:0b:93:83:15:7e:2d:12:5f:
66:35:23:87:bf:c2:93:f2:06:43:bb:03:29:0a:02:86:32:24:
fc:7c:b4:63:a2:82:cf:4a:93:04:ee:02:e7:12:60:36:4b:c6:
39:39:fd:1b:b4:59:cb:19:c1:d6:96:1b:11:ab:34:c5:63:a1:
9b:16:28:d3:fb:72:12:32:96:f5:c4:51:b2:8d:9b:1e:53:f1:
c4:97:6d:9d:f4:92:3a:52:06:d1:08:bd:33:78:e6:0a:8c:f7:
22:4b:da:b3:60:a6:00:06:2c:3f:19:80:d7:52:e4:0d:7d:3a:
41:e1:fb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:44 2025 by rpki-client