Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
File: bSsrfHiimiI-pZxnydqj3H7bHnQ.mft (raw, json)
Hash identifier: Yz/iPQCKKD6qfZ2IVDuIdZCMWrHfUekAmwTlVLE9Nx8=
Subject key identifier: 00:66:9D:F7:A4:4A:2D:47:70:25:31:02:84:AF:27:EB:90:98:AE:04
Authority key identifier: 6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74
Certificate issuer: /CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74
Certificate serial: 0199FE7D92EF23F792F02F1A52B739AE0635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
Manifest number: 02AD
Signing time: Sun 19 Oct 2025 22:01:06 +0000
Manifest this update: Sun 19 Oct 2025 22:01:06 +0000
Manifest next update: Mon 20 Oct 2025 22:01:06 +0000
Files and hashes: 1: bSsrfHiimiI-pZxnydqj3H7bHnQ.crl (hash: cKE18huBU21LKb5mm9ztH93qwshKzYgaHWzmfPHsTI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:92:ef:23:f7:92:f0:2f:1a:52:b7:39:ae:06:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74
Validity
Not Before: Oct 19 22:01:06 2025 GMT
Not After : Oct 20 22:01:06 2025 GMT
Subject: CN=00669df7a44a2d477025310284af27eb9098ae04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:23:35:72:59:f1:d3:1e:e5:d6:73:9a:05:
e4:1d:53:50:48:6c:1b:cf:84:dc:97:ad:1d:9b:06:
09:4c:dd:bb:0b:c4:f0:d6:55:bd:0e:45:95:e9:16:
9d:75:33:0c:44:45:ea:b2:41:eb:ca:d9:ae:e2:c8:
5a:58:0b:37:3a:97:bb:d8:dd:b0:f1:8e:11:d6:31:
97:ab:09:04:2d:2c:92:01:58:12:99:f1:0e:19:a5:
fb:67:f1:4f:4f:4c:b9:94:2d:7f:76:6b:4e:ef:11:
df:bf:f1:2a:07:b1:89:87:a4:21:d1:2a:b3:47:c7:
8d:94:4a:12:42:af:38:b8:31:5f:a4:76:cb:6f:ba:
e4:bb:d8:fb:ee:77:14:23:82:58:25:5f:fc:2d:df:
d4:25:2b:53:84:f3:bc:f9:1d:3e:83:e9:da:67:92:
8c:fb:48:51:dc:c4:f0:c1:91:ff:d1:48:1e:aa:e0:
7f:a1:60:5f:67:1a:17:50:bd:e2:30:63:47:16:c1:
fa:a7:ee:19:2d:80:2e:81:6a:0d:fb:95:9c:ae:df:
1f:24:55:76:23:08:e7:18:9c:ca:54:5a:25:3a:ec:
f9:5e:c2:3f:8a:e5:92:07:de:7e:09:69:d8:a6:93:
6c:24:c9:64:d4:99:5f:c9:ed:a2:8a:1f:68:98:ca:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:66:9D:F7:A4:4A:2D:47:70:25:31:02:84:AF:27:EB:90:98:AE:04
X509v3 Authority Key Identifier:
keyid:6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:91:51:e2:d9:92:0d:65:4b:73:34:ee:79:af:33:5f:94:f3:
8a:3a:9a:1e:12:a9:e5:c1:83:56:cd:33:ee:2f:e9:e9:27:89:
f9:c5:fa:11:78:b0:3b:08:83:ff:86:f3:e5:f1:5f:8c:28:62:
98:86:0b:11:57:f7:7e:c4:8a:2e:b3:0f:57:c5:80:b2:fa:17:
0d:6b:77:6b:ca:3a:22:09:6a:e1:39:79:c1:03:12:c0:35:b3:
a6:56:bf:d9:7f:69:37:15:dd:67:63:95:5e:51:9c:e9:5e:31:
71:6c:0e:7d:56:e0:76:37:3d:4b:98:3a:4d:c6:45:80:b0:fc:
47:24:82:0c:78:55:77:d3:07:ff:c8:71:96:6f:1a:eb:e0:58:
b4:b5:ac:df:9b:66:83:16:b8:b6:cb:97:d0:0b:f2:5f:5a:96:
2e:14:b8:b6:96:ed:f3:5e:ab:0a:ee:9f:99:ba:0b:81:54:b5:
93:b8:d2:91:c5:29:01:71:52:19:7c:74:00:c2:af:e5:02:ac:
bc:74:68:e9:93:c2:94:8f:08:90:c8:fb:64:99:3d:c6:2d:f3:
83:e3:a2:4a:5a:b8:bb:fa:5a:98:dc:ca:92:c2:4a:6c:8c:d5:
06:2d:c0:4c:23:5b:ed:5e:98:7f:77:b4:9b:92:5f:9b:18:3f:
c4:1b:75:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:57 2025 by rpki-client