Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
File: rHI58-_bN5H1vlVSmbXYFpfz0BI.mft (raw, json)
Hash identifier: gT/Md+n2FFFsMVGQ4QBl8Bbcyno0KuogOin8j7IXktk=
Subject key identifier: CF:B3:97:20:7C:AA:EA:C5:49:84:62:D6:03:14:EC:38:6E:55:94:04
Authority key identifier: AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
Certificate issuer: /CN=ac7239f3efdb3791f5be555299b5d81697f3d012
Certificate serial: 01989713AF8A779C03C0D3B022FC4C499F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
Manifest number: 11E5
Signing time: Mon 11 Aug 2025 03:01:46 +0000
Manifest this update: Mon 11 Aug 2025 03:01:46 +0000
Manifest next update: Tue 12 Aug 2025 03:01:46 +0000
Files and hashes: 1: rHI58-_bN5H1vlVSmbXYFpfz0BI.crl (hash: 8/brNyQXaKwA1EucgXrKUCKFkHLW0Ud4rGLrq9t/tIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:af:8a:77:9c:03:c0:d3:b0:22:fc:4c:49:9f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7239f3efdb3791f5be555299b5d81697f3d012
Validity
Not Before: Aug 11 03:01:46 2025 GMT
Not After : Aug 12 03:01:46 2025 GMT
Subject: CN=cfb397207caaeac5498462d60314ec386e559404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:fc:37:b7:b6:89:95:49:df:f8:b0:9c:be:
23:58:9e:42:a2:9b:7f:5e:94:64:a0:15:ca:e5:99:
10:69:a6:94:c1:3e:8a:ce:4b:4a:29:70:47:5a:22:
e9:c1:7f:1a:13:8a:9e:b4:c1:9b:e8:c5:c1:8f:c5:
8a:4c:a1:3b:0a:2c:d7:7f:25:46:b7:9b:f8:da:a7:
2f:8d:c5:33:8a:fe:05:6a:8b:1e:f2:7c:1c:ee:73:
d4:c0:2e:50:e2:8f:f9:6b:e0:04:cd:71:e4:29:c9:
e0:5d:ee:ec:73:fe:94:b3:ca:a5:09:69:a5:28:c3:
4e:49:03:60:a4:aa:b5:54:0e:e7:9c:f2:66:31:f3:
af:27:57:8e:5d:ee:13:91:f8:93:ef:61:43:08:f0:
e8:0e:88:f7:ea:c2:18:c6:67:f2:7e:7e:a4:eb:58:
7c:72:22:bf:ca:25:76:f6:e6:8e:3a:0d:fe:31:35:
48:1f:87:37:ed:b1:db:ef:b9:02:b2:8d:6e:00:51:
6e:24:40:f1:20:1e:73:78:1a:63:f7:19:d1:8d:3c:
e3:3e:ae:44:1d:64:2e:7a:a3:f5:46:81:3f:e5:bf:
c3:27:0a:28:21:db:1b:50:cd:02:37:9e:99:9e:fa:
85:83:4d:1d:3c:10:48:74:12:28:a7:0f:34:c6:7d:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:97:20:7C:AA:EA:C5:49:84:62:D6:03:14:EC:38:6E:55:94:04
X509v3 Authority Key Identifier:
keyid:AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:00:ef:61:12:09:f6:65:31:64:a1:5a:67:56:be:1d:b8:2c:
59:14:c7:2c:93:2e:60:4e:bb:78:a6:62:1b:3a:86:4a:a5:d3:
a2:28:04:92:ba:db:bc:ff:09:5c:d9:54:6d:a9:97:16:32:98:
f4:33:42:1e:7f:bd:8f:0f:cb:38:70:40:5f:ea:43:55:27:0a:
78:fe:d1:c2:38:35:27:ca:42:6c:44:9c:66:f8:e2:18:fc:69:
aa:d1:42:6f:75:e1:33:33:26:af:35:67:57:fe:1b:d6:98:50:
01:7e:f2:f9:ed:3b:37:ee:1f:fa:5e:4a:a1:21:fe:97:4b:f7:
7e:4e:bd:80:c6:18:e8:a4:91:e4:3e:52:5a:e1:9d:c0:b0:5e:
68:66:c1:43:de:73:8d:6b:70:20:6f:26:be:db:95:68:b7:7f:
ca:16:a0:3f:e0:34:2e:b9:77:92:41:f8:fe:2f:35:2b:7e:fc:
f6:dd:9e:f8:e0:2b:28:b9:a5:50:0a:54:40:78:ce:db:f0:24:
cd:95:83:be:52:21:db:1c:3e:69:a9:2e:13:c2:76:64:b1:8e:
08:37:dd:52:e0:3c:5a:b0:8b:f9:50:07:fa:d3:cc:e5:20:b2:
44:27:2a:b8:81:f4:47:0f:08:c0:90:30:c7:ea:11:3e:21:bb:
cf:0c:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:07 2025 by rpki-client