Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
File: hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft (raw, json)
Hash identifier: cSwrYCax1d/MPWUCcUCBtUUguv+1cwYTcNsJ7g2yvsw=
Subject key identifier: D1:0C:01:37:7E:BA:19:9D:CE:A3:34:31:04:EA:14:55:89:25:9E:75
Authority key identifier: 84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
Certificate issuer: /CN=84ac851a2bfaae15e85e162baa0788c85912a932
Certificate serial: 0198D65F24E2253B54058C1E8FD1B1B222CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
Manifest number: 127C
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl (hash: hJ23raONGOdXQEMLNBvkURrmkjCq1cDdl7l1dIJ5iPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:24:e2:25:3b:54:05:8c:1e:8f:d1:b1:b2:22:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ac851a2bfaae15e85e162baa0788c85912a932
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=d10c01377eba199dcea3343104ea145589259e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:0d:6e:e4:38:27:e9:ed:13:99:5b:70:1f:
4e:93:0f:69:5c:55:ec:de:90:4b:54:a1:4f:60:73:
f0:63:c0:69:e0:dd:f9:0a:53:87:3e:ca:c9:4a:6b:
25:82:97:8d:9e:4e:5e:a9:27:7c:14:81:0d:d9:9b:
c0:be:1f:bf:ef:59:1e:c5:15:47:57:f5:ea:97:ae:
a7:2c:fc:7a:86:77:b3:8c:46:38:1a:cc:b2:12:1a:
c4:7b:3f:cf:d1:18:18:26:87:43:bf:13:71:df:b3:
c7:eb:34:b1:20:d4:f6:20:6f:4a:44:5a:8a:f0:94:
54:cb:22:df:a8:b0:c8:08:a3:c1:ca:b3:d6:2e:c1:
d7:2a:2a:1f:3f:b0:ab:38:a7:4c:6f:ac:52:94:ce:
bd:01:dd:52:be:b4:5a:6d:4e:66:1a:cd:ee:a5:8b:
5a:4d:9a:93:80:bd:2b:59:14:47:ee:4b:75:93:37:
2b:07:32:91:19:56:62:1c:ec:74:a8:e1:07:bd:be:
a1:50:af:52:c1:15:3b:9f:29:fc:97:3d:19:86:84:
25:6b:e2:ed:a5:22:a9:4d:fd:6b:57:ea:ef:27:e6:
4a:72:72:24:e5:57:ae:b5:ef:aa:94:fc:2f:a6:73:
84:31:2a:88:ff:30:6b:63:cd:33:1a:b5:f2:74:8e:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0C:01:37:7E:BA:19:9D:CE:A3:34:31:04:EA:14:55:89:25:9E:75
X509v3 Authority Key Identifier:
keyid:84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:25:ef:8a:d4:09:45:ca:ef:da:19:43:4b:81:e6:d9:0a:53:
8c:40:ff:0b:60:fd:be:e7:77:fd:3d:bd:93:fd:0b:f8:20:bd:
24:32:e9:f4:ea:9c:df:27:23:50:bd:bc:c6:23:65:75:46:93:
d3:ea:b2:34:1b:2b:20:80:e3:00:85:db:06:0d:17:f9:b2:02:
78:e9:44:50:b1:83:45:b1:92:2c:cb:20:5f:12:3e:44:94:b3:
49:7a:0d:2e:fe:eb:0e:7c:08:ec:da:2c:2d:b2:3d:25:b6:4f:
ca:01:e2:12:77:e1:34:35:4f:fa:74:d9:69:97:a7:24:12:69:
27:13:87:e1:8c:0f:ce:eb:3f:e9:75:38:6c:ca:79:65:e5:e7:
81:e9:ef:b8:47:76:13:cd:45:ad:98:42:cf:14:f3:e3:c8:52:
97:94:63:e3:c0:e8:5e:9d:1d:7f:b8:fb:00:bd:82:a2:f2:68:
e9:8a:6a:18:09:0d:d2:5d:48:6a:a4:92:39:0c:e2:78:49:eb:
5e:90:92:f7:1b:3f:dd:e7:cf:d4:0d:c4:80:88:a7:59:56:da:
0f:9a:8c:69:6b:68:93:18:83:2f:55:2f:14:1d:ab:f6:60:41:
90:04:1a:e3:ff:5a:5b:c1:56:a7:b1:df:34:3a:87:cf:bf:23:
6e:ab:07:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:59 2025 by rpki-client