Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
File: hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft (raw, json)
Hash identifier: lNy6cNAfLS0cI7+K+/czRaHKvWetCCtkjWt1q4aZanY=
Subject key identifier: 9A:0D:E3:94:F9:3C:BA:96:1F:71:FA:3B:C2:13:22:FD:CA:99:AB:1A
Authority key identifier: 86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77
Certificate issuer: /CN=8618b054d20dfdc9c5493c52c86234774904be77
Certificate serial: 0198A04E9FA495F0620CE70016C6F3BFCC0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 22:02:43 +0000
Manifest this update: Tue 12 Aug 2025 22:02:43 +0000
Manifest next update: Wed 13 Aug 2025 22:02:43 +0000
Files and hashes: 1: hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl (hash: nz7ee4xIuge74tMkNo/SF8Ew5Kf9zJLomzkv4CE1Yg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:9f:a4:95:f0:62:0c:e7:00:16:c6:f3:bf:cc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8618b054d20dfdc9c5493c52c86234774904be77
Validity
Not Before: Aug 12 22:02:43 2025 GMT
Not After : Aug 13 22:02:43 2025 GMT
Subject: CN=9a0de394f93cba961f71fa3bc21322fdca99ab1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:82:89:7f:60:2e:15:2b:58:4d:c6:c9:5e:
6b:00:1c:66:ec:d6:03:1c:7b:37:e6:1c:58:96:ee:
26:34:bb:2c:17:d8:65:15:82:a7:28:f6:60:97:ad:
a1:b8:a2:1e:0f:95:3e:13:52:b2:19:60:cf:74:5f:
19:70:fc:ae:f7:66:e5:62:31:d9:2b:47:01:ac:9d:
41:89:8c:c1:d4:f1:7f:32:2e:3d:52:03:3d:30:63:
9d:1b:04:ed:1a:9b:25:0a:70:ff:18:39:fe:f7:63:
f4:0f:db:c9:84:95:11:75:a5:43:fc:bb:6f:11:00:
e2:9f:21:6a:eb:a1:b0:37:7c:2c:2e:78:56:af:3d:
ca:81:f0:e9:7e:df:24:6c:f1:06:71:35:c8:50:b5:
6b:53:a1:f8:ed:d5:b0:c8:79:d6:21:14:36:d7:99:
ee:d9:55:fa:28:8f:52:b8:55:84:d6:29:4f:e1:8a:
77:eb:d4:38:54:35:a3:14:32:0f:99:2b:9a:4a:9b:
8b:72:b2:6c:f5:db:65:be:df:c0:c2:43:33:85:6a:
cd:7f:37:95:b9:b7:ea:67:f7:6c:7c:7c:4c:e4:2f:
40:5c:2f:32:cf:fe:3f:53:60:77:a1:12:7c:0c:fd:
4d:c7:bf:95:a1:12:eb:16:51:91:4e:50:94:37:1c:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0D:E3:94:F9:3C:BA:96:1F:71:FA:3B:C2:13:22:FD:CA:99:AB:1A
X509v3 Authority Key Identifier:
keyid:86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:63:5e:36:9b:a6:52:be:7f:16:02:f8:ec:ee:8b:63:64:04:
60:19:fb:e9:50:15:85:d7:ac:0a:59:df:f7:66:41:8a:11:95:
6c:14:c2:1d:4b:10:cd:d8:71:3c:cb:b9:1c:78:76:fe:fd:ee:
2f:02:b0:31:50:de:dc:f7:ab:d9:1d:af:2f:80:93:62:04:bc:
d5:99:8e:bd:d2:12:55:67:9d:1c:3e:ec:b5:9a:a0:24:aa:41:
f1:9d:5e:ed:60:e9:1a:0b:2d:18:f4:27:41:08:ae:fb:ce:b6:
8d:40:1d:e5:27:17:55:90:fb:4b:ef:33:a4:79:04:cc:1b:64:
b6:ac:96:fb:cb:48:d4:f8:53:f4:4e:ea:e0:ca:e8:62:7e:62:
ad:57:e5:59:5c:e2:ab:82:a1:97:11:88:23:0b:b6:d2:b6:80:
55:e9:ed:3d:7f:7b:5e:16:81:8e:ff:41:43:ef:f0:f6:d5:6e:
df:fb:68:38:25:3b:a1:e6:13:b0:e5:37:e8:43:68:69:91:04:
d5:c4:71:19:9b:8b:71:9b:d5:a3:08:52:14:e7:ba:9a:3e:41:
16:11:6b:af:bd:db:16:f1:ea:7d:04:84:89:9d:73:dc:a6:88:
0f:cd:e0:1c:5a:b8:4d:bb:ac:ff:b6:37:9c:3e:3b:8a:3a:d0:
5e:b0:4b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:27:40 2025 by rpki-client