Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
File: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json)
Hash identifier: 60vuY5LyAgwLK4c6glt/puRTzVjzbyyIDigVw57dn/k=
Subject key identifier: A8:55:0F:43:D0:D7:BC:DB:0B:D8:ED:C7:7A:4E:63:80:E9:4B:8B:17
Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Certificate issuer: /CN=ac7862c299d6088718760a96168272fccbfda970
Certificate serial: 01984A0A54DB494EFA176C137BF736C9BF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
Manifest number: 0441
Signing time: Sun 27 Jul 2025 04:00:47 +0000
Manifest this update: Sun 27 Jul 2025 04:00:47 +0000
Manifest next update: Mon 28 Jul 2025 04:00:47 +0000
Files and hashes: 1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: +7JnlBzqOOA6cQ+/CWeg0o3qQ1DPDyjs5d/9GhAMdps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:54:db:49:4e:fa:17:6c:13:7b:f7:36:c9:bf:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7862c299d6088718760a96168272fccbfda970
Validity
Not Before: Jul 27 04:00:47 2025 GMT
Not After : Jul 28 04:00:47 2025 GMT
Subject: CN=a8550f43d0d7bcdb0bd8edc77a4e6380e94b8b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:f5:34:50:6b:46:65:31:da:6d:a2:d5:d5:
00:ff:21:56:0e:6e:36:66:93:3e:33:0d:10:78:f0:
77:70:bf:55:58:68:a0:e3:3c:0e:c8:70:5e:68:8c:
dd:0f:b0:6f:ac:3d:8c:56:00:6f:49:57:e6:b9:cf:
b4:87:74:9c:89:aa:51:53:e4:a0:10:9c:6c:b5:50:
5b:11:e4:88:f7:2a:53:de:5d:f1:42:09:d2:66:aa:
7c:14:5d:20:c1:34:ec:c4:f3:af:98:30:76:3a:57:
4a:83:d8:36:53:e1:fe:95:9f:b5:bd:19:b6:bf:4c:
f1:c2:77:da:db:df:c1:52:82:7b:9f:3d:2e:b3:0c:
78:fd:6f:3e:7f:ec:a4:fc:ff:84:ee:9e:d4:f4:5c:
9c:b0:1e:9d:e8:8c:71:4c:e5:d5:51:ec:a9:e2:00:
22:6a:00:83:72:6c:e2:87:b6:67:08:12:f7:f0:9c:
52:d6:23:38:41:2d:20:f9:53:15:2f:37:f3:5a:8f:
9f:ec:61:c3:5d:80:ee:c1:bc:65:ff:09:be:17:69:
a1:7e:fa:0c:9b:25:c3:b3:2d:98:3a:e1:2f:9e:6c:
82:94:b8:35:be:aa:8b:2a:7c:06:77:ce:83:7c:9b:
2a:01:c5:9e:13:01:a2:7d:2c:ce:0a:b2:2a:c0:c9:
ef:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:55:0F:43:D0:D7:BC:DB:0B:D8:ED:C7:7A:4E:63:80:E9:4B:8B:17
X509v3 Authority Key Identifier:
keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c0:36:46:88:66:08:0c:1a:d3:d4:9c:6d:c5:1d:76:45:05:
0a:93:78:13:63:e6:c7:21:88:7f:ce:9a:b1:46:57:6a:12:00:
c7:5a:a7:ae:c5:ac:2e:7e:90:e1:23:18:e2:b8:e4:9a:02:c2:
45:46:62:e3:a4:3c:1e:cf:e9:df:e5:08:8e:6a:ad:89:1e:a9:
b0:1b:9b:eb:2c:c1:78:7e:c0:e1:7d:36:9c:20:2e:e0:35:68:
73:b0:00:f0:fb:77:fc:9c:a4:3d:b2:57:8b:cb:aa:0d:97:a0:
c4:dc:17:1a:c9:ae:2d:13:10:35:cf:39:31:56:96:b4:5c:00:
27:df:36:68:fc:75:f3:d9:d2:8c:c4:a4:ff:e8:02:84:95:59:
e3:46:43:72:ce:df:95:9c:bc:ec:49:94:75:26:89:06:5a:b4:
72:29:af:8d:48:e7:ab:f5:27:0d:68:1e:23:c2:95:4e:4d:ce:
79:c6:f7:7e:49:7c:e7:76:41:ee:cf:48:c9:a1:29:82:9f:ab:
1d:9d:76:47:b2:b4:ac:07:07:3c:09:c2:fd:44:40:c6:91:b4:
e1:9d:4d:66:53:eb:31:66:a1:1a:aa:f4:33:1f:5c:73:00:a5:
f6:6e:98:2b:64:ee:22:10:56:43:10:53:3e:1b:79:a5:ef:3e:
13:f7:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:29:47 2025 by rpki-client