Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
File: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json)
Hash identifier: dTq2zdrMVelhyg99mBQl883DVEqkWOAwYkSIQg+fid4=
Subject key identifier: 74:35:ED:C7:83:61:50:DE:EC:45:C8:F3:BC:66:E8:A2:1C:F9:DE:0E
Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Certificate issuer: /CN=ac7862c299d6088718760a96168272fccbfda970
Certificate serial: 0199FE7D91A84483932A46D1A64241638B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
Manifest number: 0523
Signing time: Sun 19 Oct 2025 22:01:06 +0000
Manifest this update: Sun 19 Oct 2025 22:01:06 +0000
Manifest next update: Mon 20 Oct 2025 22:01:06 +0000
Files and hashes: 1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: 9gP+n3YNt8dAnSvAziPsxNfhBhnzPyK45gc+IGK4bAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:91:a8:44:83:93:2a:46:d1:a6:42:41:63:8b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7862c299d6088718760a96168272fccbfda970
Validity
Not Before: Oct 19 22:01:06 2025 GMT
Not After : Oct 20 22:01:06 2025 GMT
Subject: CN=7435edc7836150deec45c8f3bc66e8a21cf9de0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:68:a3:ab:98:be:65:4f:d1:27:8a:1b:41:
b9:d4:0e:9f:63:d3:9a:6e:fd:24:5f:cc:46:d0:64:
6d:45:c6:b8:4a:df:8b:7d:7b:44:e5:ab:f6:c8:31:
bf:fa:41:9a:22:98:ac:d8:93:fd:f4:51:da:b6:ab:
5d:cd:0f:64:08:6b:1f:8b:61:a9:9c:45:46:bf:9c:
03:42:9c:07:59:6f:eb:d9:b0:94:f5:dc:07:df:65:
a7:e2:6f:96:4a:61:f1:30:1a:86:fc:63:25:83:67:
b3:9d:cf:33:b8:45:ab:fa:4b:eb:27:ec:a7:ae:0e:
e4:ab:d8:84:61:c8:8e:28:72:18:1e:aa:70:d7:16:
a1:0d:9c:44:78:71:95:fa:ed:ed:f5:69:21:f8:de:
df:9c:a0:1c:72:50:9d:db:50:15:5d:a5:ca:f0:b7:
50:97:4d:9c:77:0b:8e:40:97:cd:53:ff:cc:82:a4:
f6:9c:f9:d3:ce:ef:cb:90:09:2a:e3:29:04:ef:21:
b2:0c:d5:21:ec:6e:f8:fa:29:64:1f:18:16:c3:a7:
3d:c6:f3:c3:1e:ef:7a:f2:d9:3c:36:0d:0e:1b:ce:
83:67:cb:29:b1:5d:ea:3e:c2:55:fe:47:21:e8:89:
e1:3b:84:81:b2:81:62:26:88:bc:88:b7:87:98:d1:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:35:ED:C7:83:61:50:DE:EC:45:C8:F3:BC:66:E8:A2:1C:F9:DE:0E
X509v3 Authority Key Identifier:
keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:10:cf:ea:e5:0a:b5:03:3b:e8:76:56:44:87:9a:54:09:55:
31:d9:03:b8:7c:da:e5:23:7d:af:fa:b9:51:cb:3c:b6:5e:8f:
87:7d:16:f3:8d:ea:df:30:f9:e1:ce:c8:16:4f:bb:f5:1b:76:
88:20:f1:e6:36:e7:89:15:4f:c4:6a:a6:d7:5f:a4:4a:68:7c:
11:7f:f3:91:9e:ad:fa:8c:9b:82:3d:82:32:12:a7:a5:68:16:
84:72:ac:bf:dc:41:94:7b:71:68:e2:b8:61:7a:33:15:06:b6:
d9:9a:34:a9:52:87:a9:c8:e5:6a:56:20:34:08:c3:4e:73:54:
48:95:66:ee:a2:c4:01:0a:ce:fe:45:50:f4:f7:a8:59:57:90:
ec:f4:a1:27:11:0a:5d:57:92:52:d7:a7:d4:2b:55:42:1a:7e:
b6:08:7b:72:c6:6e:aa:10:1b:39:56:4f:43:cd:4c:0e:4f:b1:
f9:71:4e:85:d6:cb:f3:e0:10:40:df:46:79:5e:b1:d9:e0:4b:
65:8e:5c:7f:81:25:d4:a7:a2:03:86:08:50:32:74:72:bb:be:
de:6a:3c:06:24:92:af:64:33:8b:a7:d6:53:95:2d:b5:26:1c:
fb:9c:f2:b5:64:8a:ed:3b:fe:06:01:7c:53:91:dd:f7:7c:fc:
72:cf:b1:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fZGoRIOTKkbRpkJBY4t/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNzg2MmMyOTlkNjA4ODcxODc2MGE5NjE2ODI3MmZjY2Jm
ZGE5NzAwHhcNMjUxMDE5MjIwMTA2WhcNMjUxMDIwMjIwMTA2WjAzMTEwLwYDVQQD
Eyg3NDM1ZWRjNzgzNjE1MGRlZWM0NWM4ZjNiYzY2ZThhMjFjZjlkZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/5oo6uYvmVP0SeKG0G51A6fY9Oa
bv0kX8xG0GRtRca4St+LfXtE5av2yDG/+kGaIpis2JP99FHatqtdzQ9kCGsfi2Gp
nEVGv5wDQpwHWW/r2bCU9dwH32Wn4m+WSmHxMBqG/GMlg2eznc8zuEWr+kvrJ+yn
rg7kq9iEYciOKHIYHqpw1xahDZxEeHGV+u3t9Wkh+N7fnKAcclCd21AVXaXK8LdQ
l02cdwuOQJfNU//MgqT2nPnTzu/LkAkq4ykE7yGyDNUh7G74+ilkHxgWw6c9xvPD
Hu968tk8Ng0OG86DZ8spsV3qPsJV/kch6InhO4SBsoFiJoi8iLeHmNGYfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQ17ceDYVDe7EXI87xm6KIc+d4OMB8GA1UdIwQY
MBaAFKx4YsKZ1giHGHYKlhaCcvzL/alwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lOTRmYmYtNzc0OC00MTgzLTg0ZDAt
ZmEyZmFkZWIwMjgxLzEvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lOTRmYmYtNzc0OC00MTgzLTg0ZDAtZmEyZmFkZWIwMjgx
LzEvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRDP6uUK
tQM76HZWRIeaVAlVMdkDuHza5SN9r/q5Ucs8tl6Ph30W843q3zD54c7IFk+79Rt2
iCDx5jbniRVPxGqm11+kSmh8EX/zkZ6t+oybgj2CMhKnpWgWhHKsv9xBlHtxaOK4
YXozFQa22Zo0qVKHqcjlalYgNAjDTnNUSJVm7qLEAQrO/kVQ9PeoWVeQ7PShJxEK
XVeSUten1CtVQhp+tgh7csZuqhAbOVZPQ81MDk+x+XFOhdbL8+AQQN9GeV6x2eBL
ZY5cf4El1KeiA4YIUDJ0cru+3mo8BiSSr2Qzi6fWU5UttSYc+5zytWSK7Tv+BgF8
U5Hd93z8cs+xxA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:08 2025 by rpki-client