Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
File: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft (raw, json)
Hash identifier: ZQL9u5Le8Z1ahf+xSEd75/YEj7nZJOa1eliez9PUi9Q=
Subject key identifier: 96:2A:7B:A8:27:8E:C0:FC:28:28:4A:73:AD:90:2B:01:71:81:49:EF
Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
Certificate issuer: /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Certificate serial: 0198A0F198D302E30875F9B93D7C294B6115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
Manifest number: 0132
Signing time: Wed 13 Aug 2025 01:00:44 +0000
Manifest this update: Wed 13 Aug 2025 01:00:44 +0000
Manifest next update: Thu 14 Aug 2025 01:00:44 +0000
Files and hashes: 1: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl (hash: OhfiJ3DZGpUxqQOCSbgb1haVAi2dYnYJQi54vLEx0y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:98:d3:02:e3:08:75:f9:b9:3d:7c:29:4b:61:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Validity
Not Before: Aug 13 01:00:44 2025 GMT
Not After : Aug 14 01:00:44 2025 GMT
Subject: CN=962a7ba8278ec0fc28284a73ad902b01718149ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:d1:4e:8f:3a:0d:e9:3b:2b:0c:99:6c:98:
d3:62:bd:e3:80:50:76:bf:60:cf:34:3d:5f:db:4a:
20:d3:fb:54:aa:23:83:57:5c:aa:f9:fc:a2:b1:d4:
45:b0:58:8a:95:d7:1e:63:8c:49:89:46:ff:69:15:
da:fd:be:30:5d:4c:fd:89:f4:28:3d:3d:ac:61:e9:
89:03:48:56:46:37:fc:af:b6:2a:2c:cc:ff:2c:fd:
50:58:34:3c:97:9e:ed:2b:0b:88:ba:8b:46:33:d1:
fd:38:2c:04:23:20:76:71:3f:ac:8c:e8:72:c1:59:
ad:2f:61:77:fe:6f:15:57:52:28:18:62:76:8e:45:
0e:90:db:73:4d:18:c0:24:f1:05:74:84:f0:c6:11:
12:f2:0f:f1:fd:d5:4f:71:e8:3d:a1:0f:3d:62:40:
87:42:ae:a9:ce:4b:a8:90:75:d4:3a:1e:48:f0:40:
e0:6b:3a:6c:d4:12:ca:1d:94:8f:49:00:35:72:e5:
de:9f:0b:74:70:82:ab:d6:cf:31:6c:ac:8e:c0:ec:
28:e0:aa:ac:37:61:98:d7:8e:f3:8b:35:ef:26:40:
b0:4e:1c:e8:2c:4b:a5:0e:c2:e1:cd:43:6a:e1:b9:
cd:0e:92:ac:23:f0:bd:9e:1c:88:7b:21:ef:f9:5d:
41:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2A:7B:A8:27:8E:C0:FC:28:28:4A:73:AD:90:2B:01:71:81:49:EF
X509v3 Authority Key Identifier:
keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1c:0f:ff:c2:f9:30:da:13:e9:8e:c5:37:07:48:56:df:c4:
b6:82:bb:47:58:12:bb:c2:dc:9c:cb:05:f5:94:73:ce:1b:6b:
e9:54:54:84:e2:ca:76:99:20:99:10:a4:34:6a:9d:d5:90:35:
df:21:55:40:0c:5f:db:0d:0d:b8:30:4e:a1:72:c1:6f:4f:38:
f0:7e:9a:ae:58:50:0a:d7:07:97:99:9a:3f:e5:90:30:cd:83:
40:5e:33:12:45:c5:18:62:1b:3a:9c:a8:41:9f:d1:3d:2e:fd:
72:54:ac:0f:da:43:54:07:ae:cc:27:c2:05:81:59:a0:ef:af:
b2:45:47:09:95:ae:4f:ab:f4:51:0e:b6:0c:f3:7b:5d:f8:43:
a8:5d:57:f2:c7:64:23:de:a9:a6:5f:84:ce:93:93:49:a2:62:
06:cf:17:cd:85:2b:9b:29:1d:5c:57:63:75:d3:99:55:e2:35:
55:3e:67:bb:71:32:dc:2e:ad:29:0a:2b:4e:48:df:09:66:8d:
af:d2:14:7e:4f:86:70:27:c2:cf:31:73:fb:31:7c:fa:48:67:
5c:c5:1c:88:e2:aa:5d:5e:8b:71:00:8d:4e:6e:ca:d2:56:2e:
b0:34:6c:b9:a2:b6:a6:41:06:c5:3f:0a:03:73:c3:e7:22:18:
07:f0:85:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZig8ZjTAuMIdfm5PXwpS2EVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1Mjk2ZWQwNjY1NWI3ZTI2ZDY1OWU5NmJjMmVjNmZlMGYy
ZWQzM2UwHhcNMjUwODEzMDEwMDQ0WhcNMjUwODE0MDEwMDQ0WjAzMTEwLwYDVQQD
Eyg5NjJhN2JhODI3OGVjMGZjMjgyODRhNzNhZDkwMmIwMTcxODE0OWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNDRTo86Dek7KwyZbJjTYr3jgFB2
v2DPND1f20og0/tUqiODV1yq+fyisdRFsFiKldceY4xJiUb/aRXa/b4wXUz9ifQo
PT2sYemJA0hWRjf8r7YqLMz/LP1QWDQ8l57tKwuIuotGM9H9OCwEIyB2cT+sjOhy
wVmtL2F3/m8VV1IoGGJ2jkUOkNtzTRjAJPEFdITwxhES8g/x/dVPceg9oQ89YkCH
Qq6pzkuokHXUOh5I8EDgazps1BLKHZSPSQA1cuXenwt0cIKr1s8xbKyOwOwo4Kqs
N2GY147zizXvJkCwThzoLEulDsLhzUNq4bnNDpKsI/C9nhyIeyHv+V1BtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYqe6gnjsD8KChKc62QKwFxgUnvMB8GA1UdIwQY
MBaAFIUpbtBmVbfibWWelrwuxv4PLtM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2Yt
MDFmZjA0YjBhMWE0LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2YtMDFmZjA0YjBhMWE0
LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxwP/8L5
MNoT6Y7FNwdIVt/EtoK7R1gSu8LcnMsF9ZRzzhtr6VRUhOLKdpkgmRCkNGqd1ZA1
3yFVQAxf2w0NuDBOoXLBb0848H6arlhQCtcHl5maP+WQMM2DQF4zEkXFGGIbOpyo
QZ/RPS79clSsD9pDVAeuzCfCBYFZoO+vskVHCZWuT6v0UQ62DPN7XfhDqF1X8sdk
I96ppl+EzpOTSaJiBs8XzYUrmykdXFdjddOZVeI1VT5nu3Ey3C6tKQorTkjfCWaN
r9IUfk+GcCfCzzFz+zF8+khnXMUciOKqXV6LcQCNTm7K0lYusDRsuaK2pkEGxT8K
A3PD5yIYB/CF8g==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:16 2025 by rpki-client