Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
File: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft (raw, json)
Hash identifier: OfumKWD72CH/w/HeCJMi72xorgr/U/JjUb1ACrx1wag=
Subject key identifier: F0:45:B0:20:53:15:54:9A:15:AE:2C:56:0D:00:A2:D9:BA:02:2C:AE
Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
Certificate issuer: /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Certificate serial: 0198D515AB757BB0F129FAB875ACCE00FE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
Manifest number: 014D
Signing time: Sat 23 Aug 2025 04:00:23 +0000
Manifest this update: Sat 23 Aug 2025 04:00:23 +0000
Manifest next update: Sun 24 Aug 2025 04:00:23 +0000
Files and hashes: 1: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl (hash: 9gX+Kzrb/ROGqK6rWLEEdLc9vA7xyA8rurPzqaiTS4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ab:75:7b:b0:f1:29:fa:b8:75:ac:ce:00:fe:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Validity
Not Before: Aug 23 04:00:23 2025 GMT
Not After : Aug 24 04:00:23 2025 GMT
Subject: CN=f045b0205315549a15ae2c560d00a2d9ba022cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8c:26:8f:7c:c3:f6:b0:9b:fd:72:19:04:50:
8d:a0:13:e5:e9:00:8b:25:cd:54:00:04:3f:c4:81:
3a:ff:f6:7d:2c:79:11:2f:7c:b9:9b:11:46:9b:be:
89:0f:e7:7e:a5:c6:78:e4:2e:e9:49:ce:fc:be:dc:
7e:29:c1:73:a0:e6:81:9b:d8:06:6a:e6:30:41:da:
79:3f:d2:ee:fb:41:dd:c8:a8:02:08:c4:71:4a:cd:
da:8c:67:a2:d3:f7:40:70:9b:33:ed:57:58:34:9a:
fc:3e:bd:ce:45:61:11:43:42:a9:ba:de:f4:bb:cf:
c6:99:d6:39:53:63:23:72:87:1c:4d:2c:cb:01:08:
d1:35:98:61:96:25:d5:b1:f1:e3:65:b1:11:28:42:
96:ca:0d:75:2c:eb:e5:c9:9b:79:39:6f:04:f8:7e:
28:44:76:a7:7d:94:df:37:30:01:97:38:c2:b3:fd:
39:09:6c:51:b5:31:fb:64:83:25:dc:c9:07:83:3d:
c4:0e:78:4e:f6:1f:64:77:a8:06:d5:ff:98:9e:9f:
43:28:90:25:b5:19:22:40:30:25:d6:cb:05:e0:c6:
8a:47:1e:6d:3d:e9:a5:59:e1:58:dd:d2:f5:c0:6b:
63:36:2a:5d:d5:9d:0a:03:82:1b:fc:5f:dc:91:cd:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:45:B0:20:53:15:54:9A:15:AE:2C:56:0D:00:A2:D9:BA:02:2C:AE
X509v3 Authority Key Identifier:
keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:46:9b:4f:6f:a7:bd:7b:50:87:0e:4a:c0:31:8c:b5:13:ab:
a3:68:8f:c5:49:ec:b7:1b:02:c1:d3:5d:c1:6f:2f:d8:6f:68:
9d:df:55:cf:ea:ce:57:d7:ce:3c:bb:ef:c4:17:fe:a9:05:e5:
79:e6:4d:e2:f0:4d:c2:9e:aa:1c:51:dc:32:39:5a:d7:9b:10:
32:fe:e2:9d:25:01:02:6a:8e:ef:47:aa:b8:2e:16:41:71:c3:
db:94:99:81:e4:1a:15:ca:4c:35:d3:a3:ac:e8:c1:ee:8e:2b:
5d:8e:17:33:5f:c7:e7:a4:b1:da:e0:9d:d8:a7:4e:9b:bc:95:
6a:52:71:fb:27:91:2b:ee:0b:14:3a:cb:39:4d:1c:70:ca:c4:
c6:db:7c:4c:49:50:96:69:2d:42:17:df:27:46:c1:19:70:08:
a6:4c:e4:3c:16:58:92:c6:61:ac:51:c8:bf:d1:f8:6c:98:50:
5d:9e:a6:a3:2e:9a:7b:c6:33:41:ac:70:61:32:b9:b2:f2:85:
7b:bc:11:aa:77:6d:24:34:4c:07:9f:bc:6a:59:77:a7:9c:be:
93:9c:1a:fa:5e:6e:a7:c8:41:a2:5a:e1:22:4c:83:cc:ad:d9:
fb:40:dc:60:44:0b:ef:0a:e5:23:ae:f8:4d:0e:5c:2b:a2:7a:
69:d7:a7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:06 2025 by rpki-client