Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json)
Hash identifier: l4zcNcoSo28eAqk47fz2VHyHeZ8fxdm6uk9BXSnuLF0=
Subject key identifier: 1D:08:EF:8A:B3:AA:98:C5:C8:DE:7F:BF:12:46:20:18:1A:7C:B3:A9
Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225
Certificate serial: 0198733DE9F5DD46548008B191EAD919EDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
Manifest number: 15AF
Signing time: Mon 04 Aug 2025 04:01:34 +0000
Manifest this update: Mon 04 Aug 2025 04:01:34 +0000
Manifest next update: Tue 05 Aug 2025 04:01:34 +0000
Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: 59CydIjhq0Pm7JFxLdmxx2DN9Bdwt4c5RduEolJ0PNo=)
2: kclE4AGa3IQ3ANoqx8hNmFyyOPc.roa (hash: era/rLdikRzOubIlTwlZQUllh2OgF4bxbh9GfJNQo5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:e9:f5:dd:46:54:80:08:b1:91:ea:d9:19:ed:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225
Validity
Not Before: Aug 4 04:01:34 2025 GMT
Not After : Aug 5 04:01:34 2025 GMT
Subject: CN=1d08ef8ab3aa98c5c8de7fbf124620181a7cb3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:e4:91:ed:57:88:57:16:12:2f:d7:59:d7:
9a:8d:2b:17:91:69:de:bc:88:61:49:92:ea:9c:cc:
96:7c:2a:3a:ec:29:83:d4:2e:42:f6:b5:ac:3e:0d:
e5:c7:48:c2:c2:7a:ce:be:e8:ee:29:c0:6e:76:16:
32:62:3a:6d:bc:b1:22:c0:2e:05:c7:bd:9c:c6:2e:
a5:95:bb:53:c4:8a:c7:04:b1:a9:93:90:ad:19:98:
cd:d6:83:30:27:8c:3e:67:3b:dc:50:ab:7c:79:95:
ca:1a:23:5a:6e:b7:00:64:e9:7c:a5:a9:c8:2b:d7:
4e:b9:23:a9:ca:21:1c:07:38:bd:06:15:95:7f:96:
4b:7e:2c:14:04:e5:03:5f:93:3a:ee:4a:44:12:37:
34:0f:e8:77:f5:d3:1d:93:34:0e:b3:cc:9a:e2:1a:
ca:82:98:7b:3a:8e:56:a1:16:ea:15:5b:c1:85:24:
bc:ab:75:a0:fc:c6:80:be:ae:3c:bd:20:60:7e:99:
03:a5:b7:fe:6e:61:d0:49:4d:0e:73:84:d1:26:92:
f2:72:dd:6c:6f:e4:25:e6:82:41:e6:2e:c2:ea:27:
e6:d6:3a:88:c2:c3:c3:dc:e1:66:fe:ec:1f:d4:85:
24:22:94:cc:00:01:50:2a:f5:82:95:32:90:7d:70:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:08:EF:8A:B3:AA:98:C5:C8:DE:7F:BF:12:46:20:18:1A:7C:B3:A9
X509v3 Authority Key Identifier:
keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:73:e0:e2:78:e8:3d:8c:c4:20:2d:9f:83:83:70:be:2b:42:
62:bf:57:ec:a0:4d:fa:d7:bf:41:af:1a:ca:c4:66:7b:d7:ff:
62:6d:2b:9e:a2:e5:98:9e:b7:74:b8:1e:db:af:12:0d:31:96:
ed:5e:ac:46:1b:23:2e:f3:5e:bc:0d:6b:1d:38:9d:a9:57:58:
5b:7d:1b:7f:b1:b4:49:d6:5e:31:b6:52:6c:14:b6:80:69:e2:
e1:90:d3:d0:9a:70:3f:8f:60:4e:e0:2d:8c:91:5f:09:50:d8:
63:2e:3f:12:22:0e:2b:65:e7:a3:e3:d0:d7:bc:e3:d6:5c:d1:
44:2a:09:9b:f3:0f:1c:67:f5:f9:09:d6:2a:84:6c:54:15:60:
07:c7:cd:7d:1b:40:66:f3:8b:f9:22:a2:39:fd:d6:cd:8b:ea:
5c:0c:b7:7d:69:d9:36:73:49:1e:e8:ad:4c:f8:a6:40:b9:8f:
3b:78:9b:59:08:84:6d:c6:51:ba:17:67:cc:e4:36:b9:07:5c:
08:41:89:33:9f:00:bf:76:3f:26:e3:94:02:b9:41:6f:5b:46:
39:ec:bf:dd:85:e1:f0:00:96:ba:32:31:02:d5:86:c8:03:d3:
d5:58:cd:b5:84:57:ad:54:4c:09:c1:93:69:c2:3e:a8:df:57:
ae:69:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:59 2025 by rpki-client