Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
File: RHhnr-yeLyk5So9fl_kJKdkoIQI.mft (raw, json)
Hash identifier: FiZQ3m5q8AYky+2r4JF5bsXNr7OOu0YovrikOcCsd/4=
Subject key identifier: CF:4D:5A:A8:AB:B9:E4:B2:79:36:0C:5D:4F:3E:31:5A:31:2E:25:72
Authority key identifier: 44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02
Certificate issuer: /CN=447867afec9e2f29394a8f5f97f90929d9282102
Certificate serial: 01984778564E5B808E35E107AD9E89FFE5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 16:02:05 +0000
Manifest this update: Sat 26 Jul 2025 16:02:05 +0000
Manifest next update: Sun 27 Jul 2025 16:02:05 +0000
Files and hashes: 1: RHhnr-yeLyk5So9fl_kJKdkoIQI.crl (hash: //odp57hEOP5DM61DrfKimSP4e0LEwEZjR4KND/KTUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:56:4e:5b:80:8e:35:e1:07:ad:9e:89:ff:e5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447867afec9e2f29394a8f5f97f90929d9282102
Validity
Not Before: Jul 26 16:02:05 2025 GMT
Not After : Jul 27 16:02:05 2025 GMT
Subject: CN=cf4d5aa8abb9e4b279360c5d4f3e315a312e2572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:9d:79:8e:2e:20:b3:6d:bc:7d:7a:cb:6b:
3c:55:9f:d1:7c:51:3f:2e:5d:a8:a0:67:3f:d2:dc:
72:04:eb:af:67:2c:f1:76:56:71:4f:53:6d:52:63:
9d:bb:03:76:9e:77:34:d3:ce:5a:67:44:49:c9:a6:
2b:fa:18:9d:45:a0:06:23:c0:c9:5d:12:ed:de:af:
77:d7:1b:e1:00:26:99:39:d2:38:bd:df:b7:c2:1c:
ce:24:d0:31:7b:6b:27:cb:ce:3c:61:a3:68:33:03:
83:5e:23:84:ff:2b:59:41:a1:e5:90:87:58:56:da:
77:26:27:34:1b:f8:2a:f3:a1:93:13:2b:ad:a4:8b:
74:2c:a7:bd:c7:b1:11:e9:33:4e:16:d6:63:2e:8b:
32:9d:90:4d:19:9c:d5:4d:30:64:4d:8a:0f:91:7a:
2c:ff:cf:03:92:b4:e1:32:5f:8f:95:28:16:60:a8:
b5:25:75:ef:9d:f1:50:aa:ae:37:d7:de:d9:ce:ad:
d0:d8:13:66:92:51:73:d3:a0:5e:a9:31:53:bf:35:
d5:e8:3d:b1:68:5b:b0:f6:3e:6c:2f:71:5c:d3:9e:
5c:88:41:92:a3:7b:c6:b3:71:2d:dd:ec:ef:a0:76:
ec:97:d7:c1:dd:4c:21:80:5c:90:3f:12:d1:7e:c1:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4D:5A:A8:AB:B9:E4:B2:79:36:0C:5D:4F:3E:31:5A:31:2E:25:72
X509v3 Authority Key Identifier:
keyid:44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2f:52:65:bd:8c:61:9c:da:63:0e:4b:cd:a6:6b:72:51:70:
2b:ef:d0:cc:03:f7:92:ec:42:c7:38:98:e6:0f:49:13:0c:7c:
00:74:e1:45:55:4d:d2:39:6c:43:d9:a2:50:2b:1e:d0:dd:e6:
50:f2:a2:b2:61:19:3f:5b:12:f1:dd:34:29:e2:5c:5e:b0:da:
1f:2c:85:b3:1c:ee:c3:40:e1:3d:85:3a:8c:20:0f:c3:36:28:
4e:9f:c4:fd:49:1a:5b:4c:ad:5e:d0:92:76:b2:84:9a:ce:88:
02:83:de:cc:68:b2:f6:86:8e:dc:21:e2:0d:e0:69:df:4d:ca:
e4:31:58:98:d7:18:80:f6:25:0c:94:97:f9:46:49:df:d4:93:
b8:fc:53:69:42:3f:89:25:c4:b7:26:32:1a:f0:04:4e:7d:e6:
e1:73:c0:59:52:f2:d7:89:0b:34:fa:9e:2e:b0:de:b0:94:39:
3c:ea:32:92:39:5e:78:a6:9a:eb:44:8a:99:e1:92:1c:d0:f7:
31:3b:f6:c4:77:d0:57:3e:fd:ad:35:2f:28:3f:c8:8c:c5:95:
41:aa:ae:42:4b:86:9a:8f:e3:26:20:eb:8f:18:ce:90:be:ac:
2d:90:9c:a8:19:a8:2e:7a:ac:cc:07:a8:fc:e5:a7:3d:52:eb:
c0:cf:c1:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeFZOW4CONeEHrZ6J/+X9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0Nzg2N2FmZWM5ZTJmMjkzOTRhOGY1Zjk3ZjkwOTI5ZDky
ODIxMDIwHhcNMjUwNzI2MTYwMjA1WhcNMjUwNzI3MTYwMjA1WjAzMTEwLwYDVQQD
EyhjZjRkNWFhOGFiYjllNGIyNzkzNjBjNWQ0ZjNlMzE1YTMxMmUyNTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/ydeY4uILNtvH16y2s8VZ/RfFE/
Ll2ooGc/0txyBOuvZyzxdlZxT1NtUmOduwN2nnc0085aZ0RJyaYr+hidRaAGI8DJ
XRLt3q931xvhACaZOdI4vd+3whzOJNAxe2sny848YaNoMwODXiOE/ytZQaHlkIdY
Vtp3Jic0G/gq86GTEyutpIt0LKe9x7ER6TNOFtZjLosynZBNGZzVTTBkTYoPkXos
/88DkrThMl+PlSgWYKi1JXXvnfFQqq43197Zzq3Q2BNmklFz06BeqTFTvzXV6D2x
aFuw9j5sL3Fc055ciEGSo3vGs3Et3ezvoHbsl9fB3UwhgFyQPxLRfsFp4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9NWqirueSyeTYMXU8+MVoxLiVyMB8GA1UdIwQY
MBaAFER4Z6/sni8pOUqPX5f5CSnZKCECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkhobnIteWVMeWs1U285Zmxfa0pLZGtvSVFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTMyMmItNjQ4Mi00NGE1LWIzZDIt
M2UxMDkxMDdjZWI2LzEvUkhobnIteWVMeWs1U285Zmxfa0pLZGtvSVFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YTMyMmItNjQ4Mi00NGE1LWIzZDItM2UxMDkxMDdjZWI2
LzEvUkhobnIteWVMeWs1U285Zmxfa0pLZGtvSVFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAry9SZb2M
YZzaYw5LzaZrclFwK+/QzAP3kuxCxziY5g9JEwx8AHThRVVN0jlsQ9miUCse0N3m
UPKismEZP1sS8d00KeJcXrDaHyyFsxzuw0DhPYU6jCAPwzYoTp/E/UkaW0ytXtCS
drKEms6IAoPezGiy9oaO3CHiDeBp303K5DFYmNcYgPYlDJSX+UZJ39STuPxTaUI/
iSXEtyYyGvAETn3m4XPAWVLy14kLNPqeLrDesJQ5POoykjleeKaa60SKmeGSHND3
MTv2xHfQVz79rTUvKD/IjMWVQaquQkuGmo/jJiDrjxjOkL6sLZCcqBmoLnqszAeo
/OWnPVLrwM/BYA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:27:22 2025 by rpki-client