Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
File: bSsrfHiimiI-pZxnydqj3H7bHnQ.mft (raw, json)
Hash identifier: 6Y276rL/lmylxRZjv8HcDbpsUSzJSJ52ufSdInXBWXM=
Subject key identifier: C1:0C:50:57:E4:B2:A8:F2:70:BA:4F:24:98:61:1B:6C:8E:CD:7E:AD
Authority key identifier: 6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74
Certificate issuer: /CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74
Certificate serial: 0198A0F17D20E3F8427388DE50E667376482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
Manifest number: 01F8
Signing time: Wed 13 Aug 2025 01:00:37 +0000
Manifest this update: Wed 13 Aug 2025 01:00:37 +0000
Manifest next update: Thu 14 Aug 2025 01:00:37 +0000
Files and hashes: 1: bSsrfHiimiI-pZxnydqj3H7bHnQ.crl (hash: MKGGJx08c9qjnvO9TEAAXuMB8Fl4QEUVsg64g7oHSCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:7d:20:e3:f8:42:73:88:de:50:e6:67:37:64:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74
Validity
Not Before: Aug 13 01:00:37 2025 GMT
Not After : Aug 14 01:00:37 2025 GMT
Subject: CN=c10c5057e4b2a8f270ba4f2498611b6c8ecd7ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:3d:a8:86:9e:a6:22:1b:e0:cb:a9:a5:0a:
05:03:6c:fe:14:95:72:b9:62:0d:7a:c5:a5:9e:bf:
a5:e2:a1:f9:77:1b:60:eb:5b:69:18:a8:b9:c7:bc:
05:94:39:cc:91:99:23:af:d7:32:4b:78:b2:a6:ff:
8b:96:ae:9f:d3:09:1b:35:24:d0:5d:82:9d:23:99:
ae:be:9a:dc:50:59:da:7c:b7:b7:d8:43:b3:e7:42:
4b:ae:61:36:05:f1:51:cb:7c:ca:27:a2:d7:bc:19:
5b:a2:61:03:a3:cb:91:34:12:5a:18:bc:fc:00:9a:
72:bd:70:a7:de:97:6b:53:1e:24:a2:34:c4:76:19:
ab:37:bf:a8:3a:eb:ef:23:7b:fa:8f:27:09:b9:a0:
92:7f:58:19:e5:2f:d4:33:9d:b9:61:83:28:10:d0:
ee:57:2f:4f:64:25:db:5c:55:15:4c:6f:b8:5e:29:
d2:86:14:97:c1:67:63:c1:f1:6c:01:99:ef:99:89:
75:cb:f4:70:51:ad:b3:72:38:09:8a:86:37:b1:de:
df:6f:00:d3:75:eb:77:62:c8:39:a9:9c:75:dc:08:
b8:aa:75:09:43:b6:d2:60:0e:16:9a:d4:db:e9:c2:
25:a1:40:7f:73:8b:ef:5b:87:37:e7:f0:c9:31:25:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:50:57:E4:B2:A8:F2:70:BA:4F:24:98:61:1B:6C:8E:CD:7E:AD
X509v3 Authority Key Identifier:
keyid:6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:18:54:f2:ca:c8:95:af:93:32:cf:02:0a:50:eb:79:ce:d6:
24:e5:f5:bd:df:d6:76:b5:84:f4:e4:7b:b2:fe:82:48:2b:9f:
f8:f7:82:d9:60:29:fb:a3:56:20:94:f1:30:0e:b5:a6:28:0c:
d6:f7:d9:a2:dc:e7:14:12:1c:db:db:a0:22:cc:06:3e:f2:2a:
a4:62:e2:55:4e:21:d9:df:3f:36:24:4a:c3:f3:4f:b1:25:1c:
91:6c:67:b8:bf:9e:b5:c8:21:9d:5b:d4:57:bc:9c:ad:d4:b1:
73:b6:7a:67:61:90:ee:7e:98:91:4a:d8:22:b5:33:a0:3a:bf:
de:5d:ad:df:79:8c:cd:0d:35:74:49:48:26:91:7d:ef:87:e3:
5e:9e:b5:56:d6:c1:e5:84:e7:f5:5d:74:63:ea:a6:19:56:45:
e0:da:84:65:b4:d8:e1:3a:47:9f:c1:04:c5:32:ec:6e:73:04:
45:da:f9:dc:2c:a5:2e:36:48:79:ed:18:ec:89:ef:3d:6e:7b:
3b:dc:de:90:0b:9d:07:68:61:e9:07:81:f5:b9:29:e8:a4:47:
dc:f6:a3:c0:24:7c:cf:15:18:b4:3c:61:2d:57:87:90:3d:a8:
c8:d9:b3:53:55:fa:47:80:f3:eb:e3:1e:60:9c:15:3c:d3:49:
26:b7:fe:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:37 2025 by rpki-client