Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
File: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json)
Hash identifier: BxJF9dvFWvKqOFlzzbx1L4zPMMuPaYptlEBj7QZvCdA=
Subject key identifier: B0:96:C7:FC:7C:F0:B4:E2:53:3E:65:63:87:03:C5:CE:AB:E8:34:26
Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Certificate issuer: /CN=ac7862c299d6088718760a96168272fccbfda970
Certificate serial: 0198D705F289C89FA777C74E0E04D2823CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
Manifest number: 048A
Signing time: Sat 23 Aug 2025 13:02:27 +0000
Manifest this update: Sat 23 Aug 2025 13:02:27 +0000
Manifest next update: Sun 24 Aug 2025 13:02:27 +0000
Files and hashes: 1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: 2DfIu2wwotdABhF20XEctQ66+ASGCyGfR+/8QURnESI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f2:89:c8:9f:a7:77:c7:4e:0e:04:d2:82:3c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7862c299d6088718760a96168272fccbfda970
Validity
Not Before: Aug 23 13:02:27 2025 GMT
Not After : Aug 24 13:02:27 2025 GMT
Subject: CN=b096c7fc7cf0b4e2533e65638703c5ceabe83426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:cb:85:e0:2a:b8:46:e6:b9:3f:4d:90:72:
9a:7d:c5:1f:6c:e2:7d:c5:94:38:91:c2:c2:7c:a6:
4d:80:77:4f:04:3e:c9:8d:db:a2:75:ab:c0:0c:86:
90:ea:6b:0c:90:16:06:4e:37:0f:16:33:d0:d7:06:
7f:9f:d0:8c:d9:d1:57:ea:4c:ea:ab:3d:56:4b:eb:
4d:cc:ce:e5:df:5d:2c:40:1f:3a:03:50:8c:91:2f:
1b:4a:b6:5b:77:78:f1:8a:10:2a:58:38:0a:ef:da:
fc:b9:cd:74:ea:a8:57:3a:0b:2f:6a:73:e5:8b:04:
31:d3:eb:f8:2c:3d:a5:ee:56:fb:2b:fb:16:6d:a8:
d1:a9:16:0e:e6:c7:9a:ae:cb:b0:cf:28:41:c6:ea:
71:1a:f3:5d:66:63:27:46:ef:65:ae:15:5e:0b:9a:
c3:f3:1f:74:03:52:e1:f2:a8:00:79:75:bf:b1:b9:
7d:04:28:a3:fd:17:db:82:52:00:1f:3a:13:5f:bb:
cd:7d:8c:4c:2d:12:62:68:83:4a:38:8b:9d:12:ad:
89:e0:82:ed:28:83:a3:18:61:dd:25:59:b0:33:74:
c8:1a:10:69:8b:68:dd:ff:6e:db:58:51:8b:dc:7a:
f5:11:75:7b:f2:73:74:58:d8:b6:44:97:56:2a:23:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:96:C7:FC:7C:F0:B4:E2:53:3E:65:63:87:03:C5:CE:AB:E8:34:26
X509v3 Authority Key Identifier:
keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c8:0a:76:4c:3b:4d:c0:8e:25:9e:e9:39:76:8c:aa:81:87:
6b:62:48:e0:54:f5:72:97:f6:1b:d3:61:0b:0f:4d:cd:6d:04:
e7:6c:ee:36:ef:64:53:ab:e2:c1:f9:50:c6:eb:3b:9d:bd:21:
a7:6c:bd:c3:03:c5:c0:4d:ce:63:73:71:3b:cd:3e:b4:a7:c2:
f7:e0:c4:80:10:7c:17:16:48:38:20:dd:00:59:10:66:5b:d1:
ee:93:42:1b:cb:4d:db:b9:95:ff:b0:5d:f9:cf:fb:1b:2a:28:
c0:b7:ca:c9:83:85:f1:12:41:3f:cf:58:19:79:6e:20:d8:41:
5f:63:43:fe:db:05:4d:7c:d6:1b:82:35:3e:1d:f1:f2:90:2f:
a8:92:57:4e:d1:71:53:5c:80:cf:44:f1:ba:07:66:71:bb:2d:
b0:db:b5:92:26:b5:59:79:14:6f:d8:80:be:ef:a6:88:3b:20:
20:2d:4f:91:bf:ea:3d:3a:8b:f0:70:cc:5e:f9:27:ba:85:05:
6e:23:b3:1d:2b:8d:97:71:df:2d:90:a2:6d:20:d1:80:d2:72:
2b:e3:dd:7e:a1:9a:36:69:c5:67:8e:d7:f7:52:2d:c5:2e:1c:
1a:96:f9:54:1c:45:a9:00:e8:7d:20:ec:09:47:88:80:07:15:
d3:a5:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:20:58 2025 by rpki-client