Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
File: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft (raw, json)
Hash identifier: AfPwswcvLbBqD/wUhXr52EtZyG3RFHkwi5kV2DQcDus=
Subject key identifier: 78:03:27:7C:25:7D:D9:D2:23:A5:6C:A7:03:24:54:B9:53:CC:16:80
Authority key identifier: 32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
Certificate issuer: /CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Certificate serial: 01989E5F20F2E68B3A9E4F4BB82346569D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
Manifest number: 12D5
Signing time: Tue 12 Aug 2025 13:01:31 +0000
Manifest this update: Tue 12 Aug 2025 13:01:31 +0000
Manifest next update: Wed 13 Aug 2025 13:01:31 +0000
Files and hashes: 1: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl (hash: +cDyyzqHmPsLRJeVqwEGqy+0C/Dm/zC44G2LZLpCP4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:20:f2:e6:8b:3a:9e:4f:4b:b8:23:46:56:9d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Validity
Not Before: Aug 12 13:01:31 2025 GMT
Not After : Aug 13 13:01:31 2025 GMT
Subject: CN=7803277c257dd9d223a56ca7032454b953cc1680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:6b:9b:d6:c2:24:f3:42:bf:a7:9b:00:24:
00:99:18:4d:c1:ad:67:c3:d3:b0:1e:64:4f:49:d2:
5a:f1:11:40:cc:65:85:51:95:aa:0d:81:97:85:3d:
14:86:42:59:a5:bc:f3:e2:49:85:74:93:09:16:53:
66:ac:e3:37:d5:b1:dd:dd:bd:87:69:66:13:56:8a:
27:90:c2:65:b3:c9:73:44:4d:19:f1:4e:4c:82:d4:
eb:e9:9f:de:97:bc:a8:f2:23:79:a9:25:f5:a2:39:
b0:81:50:57:37:05:04:8c:72:cc:e6:ff:4e:4d:8b:
70:f2:3b:32:60:ea:cd:a5:bc:5d:a8:b4:25:f9:c0:
28:9d:d0:fc:20:27:97:21:58:2f:0f:5a:1b:fe:6b:
66:8c:f4:13:88:2e:fa:45:09:ea:82:09:ab:d6:16:
2c:e2:65:0a:39:08:b1:c2:ae:6f:11:79:22:7d:16:
09:aa:7b:19:27:dc:75:fc:e4:08:06:a5:ce:48:b9:
09:e9:c2:c8:a6:16:05:b6:dd:03:ad:43:ef:b7:7d:
95:a6:0b:1e:04:fb:ae:8f:7b:b4:c9:94:02:0b:f2:
dd:61:d4:85:4b:58:6d:22:8a:c2:0d:5f:19:e4:57:
20:99:86:f4:83:88:ed:88:9b:d3:61:6b:e8:04:a7:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:03:27:7C:25:7D:D9:D2:23:A5:6C:A7:03:24:54:B9:53:CC:16:80
X509v3 Authority Key Identifier:
keyid:32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3a:fb:2e:3b:69:ef:bb:54:2e:92:4d:47:ec:ac:b9:30:83:
53:db:30:92:94:6f:21:dd:c7:d6:53:4a:1e:c5:ae:2c:c1:db:
84:20:a3:40:79:04:15:0f:80:74:e1:dd:db:e6:db:e5:09:47:
23:51:cc:bd:d9:0d:b7:5d:ce:b0:76:8c:a5:48:58:87:9b:f0:
8f:a3:f1:2e:05:90:30:d8:ac:3a:41:59:79:b1:d5:73:b4:47:
5a:7d:93:27:35:5d:d6:9a:cf:91:f8:fc:e2:be:3c:5d:fd:c4:
28:27:07:86:20:3f:9d:41:57:d8:4d:4f:e9:c1:04:20:ca:37:
5d:e5:03:32:b7:b5:62:c4:b2:ec:b4:30:3f:46:a1:4c:3d:0a:
af:01:56:c6:60:ef:ad:6f:0f:ef:65:a2:49:36:58:56:7f:1e:
a4:48:d0:75:fb:a3:1b:9e:e5:71:77:d0:9f:a8:6d:47:48:77:
24:27:e5:55:7a:97:9f:88:5c:b9:90:7b:11:a9:bc:39:ba:10:
70:80:97:6d:99:8f:c8:1a:d3:b4:84:cf:80:06:88:9c:8c:bf:
bd:09:56:92:45:f1:aa:47:79:e4:94:aa:99:43:51:25:fe:be:
51:01:d1:55:12:c6:30:00:9f:0b:0a:f8:c6:97:59:30:8d:53:
11:53:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:14:34 2025 by rpki-client