Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
File: hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft (raw, json)
Hash identifier: oB93L7E5JsG1VzJsMk/xDQJHFLrSNvWwIvEMaWhuA+A=
Subject key identifier: 0A:C1:CD:20:53:D8:BF:56:59:1D:F6:EC:0B:18:D8:EE:BE:03:1B:7F
Authority key identifier: 84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
Certificate issuer: /CN=84f590ca62c246440583818c31f2573a0f50ffd0
Certificate serial: 0198917EE32B4A97CB202CE310BB2E876F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
Manifest number: 0A3A
Signing time: Sun 10 Aug 2025 01:01:08 +0000
Manifest this update: Sun 10 Aug 2025 01:01:08 +0000
Manifest next update: Mon 11 Aug 2025 01:01:08 +0000
Files and hashes: 1: hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl (hash: oQyklQ6BFevYZDJYWIaKgpQ7LlAbd4BPxOU8eubANrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:e3:2b:4a:97:cb:20:2c:e3:10:bb:2e:87:6f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f590ca62c246440583818c31f2573a0f50ffd0
Validity
Not Before: Aug 10 01:01:08 2025 GMT
Not After : Aug 11 01:01:08 2025 GMT
Subject: CN=0ac1cd2053d8bf56591df6ec0b18d8eebe031b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:1a:58:98:cf:cb:54:29:43:28:08:98:4e:
d9:28:61:f8:3f:6e:58:00:07:34:6f:bf:50:30:58:
09:e7:d3:f4:0d:23:6a:83:13:24:be:5f:ce:1e:b8:
e3:98:69:70:5b:0a:1d:3f:16:28:e2:3e:d3:09:8d:
3a:c6:3b:d4:ac:92:81:a5:85:09:d8:e5:60:b4:aa:
1c:5b:83:14:ef:de:4b:09:7b:15:42:58:57:3a:c9:
54:bd:62:fa:e4:2c:b1:91:88:e2:b1:df:6f:9b:c9:
f5:b3:1e:f8:c4:2c:58:4a:e7:27:a9:99:70:f2:dc:
92:d7:2d:7a:04:58:c8:b7:16:77:b1:a8:2e:88:5d:
d8:db:a7:5b:50:00:d5:b8:8b:21:95:7d:96:28:27:
07:f8:0c:8e:32:c0:90:6e:5f:f8:36:58:4a:71:11:
40:36:5f:13:37:a7:96:bc:bc:67:74:3d:79:4b:7a:
39:13:cc:bd:16:ec:9a:1a:3a:c8:de:65:2e:bb:f7:
95:93:a4:14:0f:fa:b0:c0:f0:41:53:1c:a5:4c:75:
32:2a:0d:94:b1:27:46:0d:4d:c7:04:0c:08:8f:f2:
ea:38:7b:e4:7c:63:2c:66:e9:50:4f:a7:c3:33:2a:
f1:6b:54:9a:bb:c9:f2:e6:42:01:cd:32:a4:d9:16:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C1:CD:20:53:D8:BF:56:59:1D:F6:EC:0B:18:D8:EE:BE:03:1B:7F
X509v3 Authority Key Identifier:
keyid:84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:45:33:26:fd:3b:f7:53:0c:5b:3d:8b:77:84:60:c5:63:39:
2d:ac:b6:23:c7:4d:ef:09:0f:b0:ae:35:2d:a2:b6:f5:e7:da:
3c:3e:04:29:f4:45:da:c7:9d:d9:a5:dc:2e:aa:90:2a:d4:26:
79:b4:98:00:31:77:09:d2:50:cf:99:3e:4b:2f:0e:5a:18:f5:
e5:ce:5a:03:c9:7c:35:7a:38:a8:86:51:9b:c4:21:a3:43:35:
0b:2c:b1:0c:36:64:4f:b9:64:51:e2:ae:1f:1e:46:6d:22:0a:
ab:9f:24:38:dc:f2:1f:e7:1f:55:51:9a:95:3a:de:68:21:52:
32:a5:c0:1d:f8:08:db:bc:24:5c:02:58:c2:22:e3:6a:a2:dc:
ee:ba:06:29:cc:37:b6:2d:52:7c:98:44:3b:d2:ac:5b:19:63:
b7:71:ff:37:81:26:36:d4:63:51:c7:26:05:19:31:ca:3c:6b:
64:b8:ad:73:e8:68:22:f8:72:fb:47:a3:86:43:cb:25:b3:38:
5b:17:ae:0f:1b:4b:f3:ce:33:60:f2:c7:98:3a:75:5a:bf:93:
f8:e2:1c:06:76:1f:2b:7b:f7:1e:85:49:9a:73:17:d2:8b:91:
f9:80:70:60:e8:5c:98:8c:2e:ee:b7:e4:25:6e:5f:c1:51:a1:
04:63:8c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:46 2025 by rpki-client