Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
File: hlEiwOVi5AeXaCPZThnip5T4y2I.mft (raw, json)
Hash identifier: C1xiPMmpYT7iE/Lj5qzEnQpElWjFMQ6phFX9Z8PnlPU=
Subject key identifier: C7:CB:1F:EC:87:F2:0E:E4:6B:68:76:62:08:69:AF:41:9B:7A:73:3E
Authority key identifier: 86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62
Certificate issuer: /CN=865122c0e562e407976823d94e19e2a794f8cb62
Certificate serial: 0198D5F1BCAE595CC287B86384E344B713FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 08:00:46 +0000
Manifest this update: Sat 23 Aug 2025 08:00:46 +0000
Manifest next update: Sun 24 Aug 2025 08:00:46 +0000
Files and hashes: 1: hlEiwOVi5AeXaCPZThnip5T4y2I.crl (hash: ssaBacTv0v/doWfpT80B+ZDbgjOAirgSega8pc2XSxQ=)
2: w-uN_1VCR8_SOj5bY-QHNqktijQ.roa (hash: 0MkMfXtYvuQQQ2rI12rE9KqS+DI9qKcacxegwXpKbvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:bc:ae:59:5c:c2:87:b8:63:84:e3:44:b7:13:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865122c0e562e407976823d94e19e2a794f8cb62
Validity
Not Before: Aug 23 08:00:46 2025 GMT
Not After : Aug 24 08:00:46 2025 GMT
Subject: CN=c7cb1fec87f20ee46b6876620869af419b7a733e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:b8:a9:95:10:5c:9d:43:c2:7f:ac:67:cc:
d4:64:ef:51:5b:ea:06:c1:57:31:a2:03:a9:35:e1:
62:38:2e:82:02:e8:e4:7d:37:80:0d:87:6e:a8:a6:
df:4c:90:a5:cc:11:89:70:16:8b:de:1a:16:0d:da:
c9:41:7e:ad:33:78:6e:85:9f:a1:bc:35:bd:82:97:
ad:0c:e2:26:d1:a8:64:a8:f4:f7:a0:a0:c2:21:b7:
06:ad:11:22:ac:eb:31:f3:5d:c9:66:45:27:a0:16:
9f:20:0d:ff:98:af:09:3d:99:0d:f0:7c:66:ee:53:
7f:a6:2d:3b:d6:f5:ee:c7:af:19:b6:b5:c1:38:3b:
94:d8:c2:0c:77:63:a3:47:25:71:e5:cc:7f:a6:b6:
65:4c:81:03:0b:81:25:d5:34:02:6d:08:3f:71:b6:
32:a4:94:bf:e4:d5:db:e6:d6:0a:d9:fc:59:04:45:
08:34:11:5f:9a:85:95:f3:00:18:dc:87:0d:d0:58:
d2:a6:1d:b8:4c:43:66:b1:6b:77:f1:23:71:61:1c:
fa:50:d8:0d:ac:8d:70:01:44:52:ab:9a:ab:ac:eb:
f4:44:12:94:4a:93:31:28:56:26:e6:18:13:47:51:
a5:70:a1:14:06:8c:99:14:94:c6:7d:6a:22:1f:c7:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CB:1F:EC:87:F2:0E:E4:6B:68:76:62:08:69:AF:41:9B:7A:73:3E
X509v3 Authority Key Identifier:
keyid:86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ae:24:6c:e2:a9:c7:7d:56:12:da:94:5a:36:b9:f1:d5:91:
f4:b4:09:82:00:d8:2c:c2:03:b4:8c:e0:b4:97:36:04:72:1a:
26:71:ee:f0:28:0c:2f:c4:2c:78:9e:c5:c2:86:52:7e:03:d5:
99:5a:10:f7:1c:0d:a6:5f:17:f6:64:8b:8a:c6:cf:ae:f2:fb:
47:54:a4:b9:73:51:86:f8:9b:ef:ff:03:6c:8b:3c:9f:e2:77:
cb:c5:15:c1:e8:d4:a6:96:9a:5f:62:58:3c:d0:ca:97:67:b3:
ab:2e:11:e8:22:55:49:86:c0:e8:3a:e3:c6:b1:3d:d5:5e:78:
ea:cd:1c:39:3c:3b:73:31:e2:50:2a:6e:19:4c:25:fe:c1:d9:
44:26:71:8d:12:99:43:4b:a4:40:1e:98:af:a9:ea:a1:0b:6e:
9d:8f:0e:03:89:5f:c0:98:f5:6e:27:2e:5e:f9:d2:e7:28:2d:
b1:80:84:45:09:bb:32:36:59:97:21:43:d3:61:9b:f3:da:33:
03:68:f1:d2:fe:96:af:61:55:6d:52:53:82:78:06:99:11:bd:
75:5c:56:c0:ff:cb:55:0b:f5:ed:55:c9:dc:ec:8f:f3:af:b1:
d7:b2:c0:7e:89:04:1f:35:19:b0:f3:81:56:d3:63:ff:8a:dc:
9a:d4:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:31 2025 by rpki-client