Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.mft
File: hUYhlvWiZe4_S4kOKGZyQCCNO68.mft (raw, json)
Hash identifier: NAZR5PJJHvmR9hcegQ3Ui50HYfw5hKtiStVm+Z4XOYo=
Subject key identifier: 90:8E:E7:29:8E:DC:90:2F:41:CC:31:38:28:BF:77:82:D6:1B:07:4D
Authority key identifier: 85:46:21:96:F5:A2:65:EE:3F:4B:89:0E:28:66:72:40:20:8D:3B:AF
Certificate issuer: /CN=85462196f5a265ee3f4b890e28667240208d3baf
Certificate serial: 01989749F41C5A52652C75B81FB15C92CB0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUYhlvWiZe4_S4kOKGZyQCCNO68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.mft
Manifest number: 0468
Signing time: Mon 11 Aug 2025 04:01:02 +0000
Manifest this update: Mon 11 Aug 2025 04:01:02 +0000
Manifest next update: Tue 12 Aug 2025 04:01:02 +0000
Files and hashes: 1: hUYhlvWiZe4_S4kOKGZyQCCNO68.crl (hash: ILlqbrKljCY+igqRQOkLbVvMvlUvF6ie8kdBwQaDgG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUYhlvWiZe4_S4kOKGZyQCCNO68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:f4:1c:5a:52:65:2c:75:b8:1f:b1:5c:92:cb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85462196f5a265ee3f4b890e28667240208d3baf
Validity
Not Before: Aug 11 04:01:02 2025 GMT
Not After : Aug 12 04:01:02 2025 GMT
Subject: CN=908ee7298edc902f41cc313828bf7782d61b074d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:16:84:c8:7b:62:58:4b:b9:9d:a6:53:aa:
36:c3:6e:17:73:d4:81:c8:9f:1b:2f:2b:d4:e6:97:
9f:08:53:c2:d2:4d:d9:a2:1a:c9:99:9b:1f:ed:6a:
9d:1d:97:1f:61:2e:2b:a6:b7:04:87:e7:37:33:61:
54:be:a5:e1:bf:a7:c5:ac:87:64:2e:f2:38:68:f3:
0a:fd:04:83:ed:36:a6:ab:49:1c:33:2d:58:61:37:
83:99:62:11:d5:97:80:5b:79:fe:9d:7e:95:8e:67:
47:bc:f7:d9:d4:68:3e:19:4f:bb:7c:0f:09:f0:25:
15:bd:8e:c0:2e:92:55:6f:91:18:37:9d:80:b2:c6:
31:ed:76:f9:9b:0d:5a:21:8c:e2:dd:fc:1d:d8:22:
2f:26:9b:e1:94:f0:24:11:73:df:90:69:a2:ff:d6:
ce:6b:2a:17:f5:f8:50:d2:31:68:b2:02:2f:11:68:
13:78:b8:63:e8:f3:b7:38:f6:69:99:1b:78:55:74:
44:15:a2:7e:04:e1:c0:9c:11:b5:c7:6f:13:73:56:
70:ba:5d:72:3d:ba:2c:c5:e8:b2:c4:47:a6:f8:71:
1a:7c:60:2e:e2:91:4d:f1:5c:b6:28:73:10:53:20:
18:bb:64:d4:96:95:29:83:b8:80:df:92:e3:88:0d:
0a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8E:E7:29:8E:DC:90:2F:41:CC:31:38:28:BF:77:82:D6:1B:07:4D
X509v3 Authority Key Identifier:
keyid:85:46:21:96:F5:A2:65:EE:3F:4B:89:0E:28:66:72:40:20:8D:3B:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUYhlvWiZe4_S4kOKGZyQCCNO68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6b:e5:19:7d:5e:67:60:89:97:7d:19:8e:f2:ae:3a:28:ae:
06:e4:5d:f9:13:68:3a:42:33:46:4f:84:10:69:63:6f:34:b4:
5e:08:2d:09:92:91:58:60:86:48:0a:53:32:2f:8c:10:e2:a0:
c3:d3:8c:22:22:e3:65:71:75:6a:1c:4d:df:82:01:56:d5:1b:
c4:6a:c3:9b:98:57:c4:1f:f0:cc:85:52:9c:8d:71:39:2b:8a:
dc:94:c5:99:f7:90:c8:55:68:06:a9:bd:be:fd:a6:1d:85:34:
d3:87:75:b5:a1:ae:15:99:28:2b:1c:65:50:ba:7b:5a:ac:c3:
5d:85:9b:d0:93:2f:5f:93:e8:07:1a:5e:17:88:30:1a:c4:e5:
ed:18:0e:3b:e9:ce:d7:b5:c6:d6:b7:fe:3d:41:f2:01:54:c7:
95:5f:ab:60:a5:d1:77:71:f7:1f:b5:54:04:72:12:82:07:f2:
7e:d4:6f:c4:33:aa:8c:fc:77:1a:84:dc:8b:94:c7:18:af:44:
52:de:a2:3c:ef:60:30:18:c4:9e:b0:93:f6:63:26:ff:64:ba:
16:17:69:89:05:b6:bb:c0:17:4f:16:6e:f6:2c:6b:12:f2:68:
9a:08:0a:95:d7:ab:da:03:7c:50:1c:ed:db:0c:bc:8a:77:db:
e5:f9:33:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:36 2025 by rpki-client