Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
File: hGy8NY5qqP7tbgMmoECJt-XyqYk.mft (raw, json)
Hash identifier: 4NIQY6hTrbxoxgPeonz7sXwwe4jaCKfMoepNb2lE0EE=
Subject key identifier: CD:08:3F:7C:47:CA:BB:DB:8B:51:BD:38:7F:D8:56:3C:09:51:7F:4E
Authority key identifier: 84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
Certificate issuer: /CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Certificate serial: 01988CFD56DAE82FD012CA5CD5C4ACE7053C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
Manifest number: 0A85
Signing time: Sat 09 Aug 2025 04:01:09 +0000
Manifest this update: Sat 09 Aug 2025 04:01:09 +0000
Manifest next update: Sun 10 Aug 2025 04:01:09 +0000
Files and hashes: 1: hGy8NY5qqP7tbgMmoECJt-XyqYk.crl (hash: uiAiQZJBYL0aiSZ6R91raKstu9pMpyp4QBrmNxqBIns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:56:da:e8:2f:d0:12:ca:5c:d5:c4:ac:e7:05:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Validity
Not Before: Aug 9 04:01:09 2025 GMT
Not After : Aug 10 04:01:09 2025 GMT
Subject: CN=cd083f7c47cabbdb8b51bd387fd8563c09517f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:0a:97:f8:99:62:8a:37:70:c6:3f:28:8e:
2e:9e:0d:0d:ff:d1:2c:dd:31:42:82:40:a6:c0:21:
cd:f3:e0:2f:58:6a:d5:ac:7e:aa:ad:51:b2:25:05:
d8:35:8f:3e:32:3f:bc:41:39:ba:01:37:f5:83:4b:
0d:c0:74:cf:85:02:33:b9:57:1c:bf:e6:11:3a:6f:
42:e8:5f:37:62:b1:e5:7d:84:38:82:81:fc:1d:46:
31:a6:a9:9c:1d:36:2d:f2:ce:70:35:07:54:82:2d:
e4:42:06:d3:71:a4:38:b1:a0:5c:4b:40:5a:42:11:
00:60:b2:37:bc:e8:90:5c:5c:a9:c2:49:1c:1f:4e:
7f:d4:ac:5d:db:a4:b7:b4:63:2f:5f:1b:1e:01:92:
fd:f0:8f:aa:e5:70:b6:18:72:5e:cd:86:89:3b:09:
fe:b4:d3:91:cc:7c:f4:6d:22:ff:50:3f:69:fb:46:
08:5c:ab:4a:fb:e5:f7:ee:f1:8f:f2:32:73:f5:9d:
6c:a9:d9:53:2a:be:64:13:c2:d1:09:f7:a6:75:ca:
09:91:51:01:4f:0b:56:98:12:90:d7:b7:eb:8b:9a:
2c:85:b7:d0:d2:62:a8:1e:ff:2c:e2:63:16:61:fd:
0b:d2:c9:b5:25:1f:73:6b:d3:b9:0f:7e:cb:3f:8b:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:08:3F:7C:47:CA:BB:DB:8B:51:BD:38:7F:D8:56:3C:09:51:7F:4E
X509v3 Authority Key Identifier:
keyid:84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e6:a7:2e:78:7b:2b:7d:26:13:82:2b:89:d0:24:53:6e:be:
08:db:3e:27:f2:e6:c1:37:9a:a9:4d:1e:55:1a:97:44:65:ec:
0b:6e:57:07:93:1c:05:a3:c0:be:ad:78:40:76:72:dd:96:29:
20:62:60:9a:64:39:0e:7f:9b:e8:55:31:13:45:aa:e7:5e:95:
aa:03:ea:77:ba:45:62:4f:28:fb:a7:7d:d9:17:a4:f1:df:da:
55:39:a0:06:2b:4e:c7:56:00:d6:d9:98:e2:be:96:96:6d:a9:
5f:87:f4:d2:91:90:3e:f6:5a:8f:12:27:d8:66:54:d3:43:f6:
83:8b:28:a2:30:e4:a1:93:20:da:be:2d:15:98:5a:db:b5:13:
b5:47:d1:33:dd:4f:2d:c7:bc:e6:ea:9b:6e:63:c2:1f:c5:b5:
51:b8:c2:a5:40:44:c2:83:5b:6b:52:26:da:4f:a8:42:e7:f7:
bc:b2:3b:6b:d1:59:03:38:c8:ab:cd:a1:d1:7a:94:63:73:91:
aa:81:9e:3f:10:b6:94:29:62:a1:e2:23:fb:06:90:d1:ee:19:
fc:82:19:02:5e:76:1b:bd:d6:eb:c1:f2:82:26:38:2c:15:df:
d7:49:95:4a:c9:94:d0:41:3f:60:19:74:5c:fe:31:3f:4d:eb:
7c:9b:ba:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:37 2025 by rpki-client