Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
File: hgLiX_EiDtSqju94wzpyKrWIP40.mft (raw, json)
Hash identifier: p8wPodnso7htS4LSoNpWsQiSvfIdJ/L+ufk+M6Shr2s=
Subject key identifier: 20:70:AB:B6:1B:CF:6D:B9:07:2D:E6:B8:2D:12:E9:47:47:93:E9:C9
Authority key identifier: 86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D
Certificate issuer: /CN=8602e25ff1220ed4aa8eef78c33a722ab5883f8d
Certificate serial: 019875D01ABFADFFF5756006DBC4A00C7E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
Manifest number: CC
Signing time: Mon 04 Aug 2025 16:00:29 +0000
Manifest this update: Mon 04 Aug 2025 16:00:29 +0000
Manifest next update: Tue 05 Aug 2025 16:00:29 +0000
Files and hashes: 1: hgLiX_EiDtSqju94wzpyKrWIP40.crl (hash: 5i+VI5u6kz9eEh0dnBrNMbqVW0vXfJtOGD9+/eIXHs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:1a:bf:ad:ff:f5:75:60:06:db:c4:a0:0c:7e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8602e25ff1220ed4aa8eef78c33a722ab5883f8d
Validity
Not Before: Aug 4 16:00:29 2025 GMT
Not After : Aug 5 16:00:29 2025 GMT
Subject: CN=2070abb61bcf6db9072de6b82d12e9474793e9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:23:4e:45:c9:08:2c:b7:61:50:b5:90:45:
b5:90:8d:7e:e4:e6:12:bc:19:1c:51:66:ab:92:b1:
fc:a1:29:84:76:7f:80:cc:37:4c:c6:3e:0f:c4:28:
ea:47:34:41:72:16:42:5f:09:0a:c7:bc:2e:3e:f3:
9b:27:9c:f3:81:4d:68:4a:a3:c8:fe:9a:cc:03:84:
f2:d1:44:d3:f3:e7:3d:aa:bb:dd:7f:5b:c8:30:01:
1a:57:5d:b7:a6:38:0b:d0:db:b9:0b:34:e5:93:09:
b8:34:df:5b:c1:21:87:02:de:4a:04:3b:db:a1:f0:
ae:12:62:43:12:f3:b2:15:65:2a:d6:29:59:a8:a3:
64:09:93:23:16:fa:96:f9:89:19:3e:6a:5a:aa:eb:
1d:da:40:06:28:32:ae:75:42:6a:64:ba:de:9f:98:
31:e7:8d:31:37:a2:ba:e3:a3:ac:b8:4f:7f:9a:a9:
c3:ba:59:39:74:6d:d3:de:76:ef:29:fc:e0:7b:62:
9e:71:24:63:46:1a:5e:87:98:89:ac:1e:cb:3a:ba:
d4:20:ac:4f:63:1b:ef:3e:e1:8d:b3:a4:a3:8b:ee:
85:50:f4:0f:f8:96:23:91:7f:8f:5a:e1:c0:60:3b:
79:49:51:11:c3:81:37:64:8e:56:ff:b5:cb:53:e6:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:70:AB:B6:1B:CF:6D:B9:07:2D:E6:B8:2D:12:E9:47:47:93:E9:C9
X509v3 Authority Key Identifier:
keyid:86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:eb:e0:51:c1:4c:19:1f:fb:de:6c:6b:14:6b:31:c0:9c:4d:
20:fa:bc:48:1e:d9:10:a1:c0:36:0b:af:0f:cb:f0:5e:9d:6e:
a6:97:6a:c5:54:f9:fd:7c:fe:78:d8:7c:aa:16:92:83:d0:5e:
6a:94:64:0d:80:19:f2:ea:76:7a:6a:d3:c7:96:c4:bb:b0:a3:
4d:d7:56:89:b2:07:4b:65:9e:87:12:41:09:8b:a0:db:5e:2f:
fb:28:4a:19:26:ec:cb:2f:75:23:7e:ef:e6:47:fb:fc:84:68:
9e:20:c2:53:d5:e4:e8:3c:a9:5e:e4:70:c0:7d:29:45:4d:76:
3b:0a:46:56:18:77:28:28:0d:18:56:90:39:ad:ad:ca:4b:5f:
90:30:e6:5b:bd:d2:8f:7a:11:67:c9:fd:8e:03:cf:0a:6f:90:
d7:4f:9a:9d:a0:89:ee:2d:44:ad:c9:4f:69:0f:fc:44:fb:60:
e4:38:8f:ab:e5:69:81:a3:19:b9:45:81:b0:43:78:5e:00:73:
6d:f3:3a:3c:f3:03:7e:ef:ea:15:ae:49:7d:56:b2:34:d2:fa:
52:1e:d2:1b:ce:e1:36:ea:09:eb:03:1b:f6:27:4f:78:97:c1:
30:b3:26:dd:2b:cc:a2:2a:3a:98:91:c2:05:c7:98:20:48:04:
bf:37:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:40 2025 by rpki-client