Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
File: rHI58-_bN5H1vlVSmbXYFpfz0BI.mft (raw, json)
Hash identifier: 86CLHkpVcpyk8IPY0ALekGQsX8K1p5Lb8NI7Sv+U0Rs=
Subject key identifier: A8:F0:0B:DC:DE:78:37:6C:23:B0:3D:B4:E4:3B:EE:F3:B7:D1:EC:C4
Authority key identifier: AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
Certificate issuer: /CN=ac7239f3efdb3791f5be555299b5d81697f3d012
Certificate serial: 019847E4D0875B472E354762A9F6E8FB4E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
Manifest number: 11BC
Signing time: Sat 26 Jul 2025 18:00:34 +0000
Manifest this update: Sat 26 Jul 2025 18:00:34 +0000
Manifest next update: Sun 27 Jul 2025 18:00:34 +0000
Files and hashes: 1: rHI58-_bN5H1vlVSmbXYFpfz0BI.crl (hash: M/uYJ+i2ZEJ0V23jPalx1NLSy1AejlVzVD1BFhCafP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:d0:87:5b:47:2e:35:47:62:a9:f6:e8:fb:4e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7239f3efdb3791f5be555299b5d81697f3d012
Validity
Not Before: Jul 26 18:00:34 2025 GMT
Not After : Jul 27 18:00:34 2025 GMT
Subject: CN=a8f00bdcde78376c23b03db4e43beef3b7d1ecc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:46:20:bf:44:c9:1f:10:24:a6:f4:db:25:
3c:b4:d7:e3:99:08:5b:7a:0e:67:29:9f:9d:cb:3a:
b9:18:bf:b5:80:e8:d6:a6:28:90:16:d3:61:73:77:
bb:ed:98:04:a0:8f:84:09:6d:16:66:37:6b:5d:e5:
80:be:f3:dc:18:9c:05:17:6e:ad:e0:b7:34:12:0c:
00:b0:8a:b0:81:fc:7d:21:27:4e:09:2a:12:f4:b6:
33:71:91:d6:79:86:2e:e6:cb:44:be:58:5d:62:3f:
13:8e:a2:bf:f9:93:c8:e8:14:11:b5:74:96:b6:af:
b7:52:97:c9:6c:4d:42:56:92:8f:c3:02:4d:7f:d8:
8c:1d:25:b7:64:dc:71:9e:b8:bf:23:6b:64:4a:b4:
ea:1b:07:eb:c6:18:8d:3a:60:e6:93:68:a2:06:99:
7b:9b:13:44:07:4c:10:bb:08:68:19:27:3a:06:38:
e8:31:e4:a2:53:26:1c:91:5d:84:27:c6:44:bd:7f:
1e:50:79:b8:e4:87:c3:80:0b:c5:9c:67:7f:76:e6:
be:a7:bc:39:28:5a:2c:e7:61:d4:ec:5d:56:a1:8d:
83:e1:8f:d6:2e:f8:70:0d:6b:a8:12:13:80:8a:a1:
90:a0:53:c0:54:d1:b1:ad:83:67:48:d7:a6:30:20:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F0:0B:DC:DE:78:37:6C:23:B0:3D:B4:E4:3B:EE:F3:B7:D1:EC:C4
X509v3 Authority Key Identifier:
keyid:AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:77:74:bf:e5:2a:04:16:9c:ad:86:be:41:49:3c:9b:90:b8:
b8:74:26:7a:2e:a5:8a:1e:e2:ac:5b:fe:f0:ec:98:a4:d3:28:
1a:90:01:5a:c9:6b:66:f4:50:dc:4a:87:8d:d6:8b:d1:d1:9d:
c8:93:98:38:4d:1a:7e:c1:61:63:94:3a:d4:30:f6:8e:24:51:
d0:a9:13:c4:0f:7c:30:b4:ef:90:91:1f:eb:f6:ba:da:40:1a:
12:68:33:3d:71:fe:81:ce:bd:b3:41:d5:0b:02:e7:b3:a8:aa:
7f:4d:06:7a:40:88:a3:85:62:47:33:41:42:a2:aa:cf:1e:b3:
8b:51:8f:aa:6e:95:ed:36:f9:4a:d1:02:57:18:30:aa:a1:83:
d6:5b:5f:42:38:43:27:17:71:e7:e2:9c:fb:24:d1:31:45:7c:
40:41:37:79:c9:e5:d0:ea:02:9f:f8:65:2f:45:f8:91:ce:cd:
33:66:35:23:1f:be:50:e4:0a:83:39:58:fb:22:6b:f6:cf:6a:
22:6a:a0:f0:97:25:52:a2:83:7e:de:62:44:aa:26:da:6b:51:
43:a8:fb:49:2b:18:6b:05:2b:75:4c:19:28:fa:e3:18:3b:f7:
63:2f:c3:94:fa:62:41:0f:b0:4e:a7:0d:ea:a1:60:ca:22:47:
7b:cb:f2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:27:50 2025 by rpki-client