Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
File: hGy8NY5qqP7tbgMmoECJt-XyqYk.mft (raw, json)
Hash identifier: dmnA1H3Qp4SwbwsXWBuPqPN2GPbqxc1nMStobUlLZ6I=
Subject key identifier: CA:CE:0D:0E:71:9C:9F:A8:59:B0:A8:0A:DA:D6:72:B3:39:08:4F:6D
Authority key identifier: 84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
Certificate issuer: /CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Certificate serial: 019845886812EFD3FF62437AE307AADD6AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
Manifest number: 0A60
Signing time: Sat 26 Jul 2025 07:00:24 +0000
Manifest this update: Sat 26 Jul 2025 07:00:24 +0000
Manifest next update: Sun 27 Jul 2025 07:00:24 +0000
Files and hashes: 1: hGy8NY5qqP7tbgMmoECJt-XyqYk.crl (hash: WAbEq7pd28Tj3TRgz0p1hhnKQdK3ADGgnaHCrH64S88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:68:12:ef:d3:ff:62:43:7a:e3:07:aa:dd:6a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Validity
Not Before: Jul 26 07:00:24 2025 GMT
Not After : Jul 27 07:00:24 2025 GMT
Subject: CN=cace0d0e719c9fa859b0a80adad672b339084f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:58:5c:b4:5a:00:d3:98:0d:18:21:28:da:
01:0c:9b:9a:01:b2:fd:7c:e6:d3:df:1f:50:f0:e3:
7c:02:b8:69:8b:c4:d3:af:ba:fd:26:2e:34:b0:90:
1d:87:d9:62:16:f5:94:76:e9:43:77:d1:49:ae:4a:
c3:b4:01:2b:d5:f4:53:f3:be:5f:12:b6:8b:84:34:
30:e0:9f:a2:22:14:30:4b:00:09:fc:b3:11:6b:cd:
18:5c:94:7a:41:03:7b:47:e6:54:4f:27:39:f0:b6:
69:1f:6e:9c:1f:9a:23:2a:a4:d2:52:32:15:05:32:
bd:6d:54:b6:1c:09:6b:7f:e6:26:7a:73:6a:bf:86:
1b:3b:22:f3:57:d2:7f:dd:36:49:9a:8e:61:6e:49:
0e:66:eb:41:3e:cd:33:7c:c3:53:a2:de:c1:08:63:
62:24:1b:a9:14:70:12:2e:b9:57:dc:76:71:b4:32:
6e:e8:73:ad:77:17:4d:9f:72:83:4a:09:7a:cc:d8:
cf:2e:34:a4:f0:48:68:40:ec:b2:10:c9:5f:ac:17:
11:c1:13:85:e3:aa:43:3c:97:db:e4:e6:5a:a2:cf:
13:bd:db:be:92:ff:92:85:5a:b6:46:90:e4:c1:d7:
22:6d:bb:ad:68:4d:0d:64:55:26:32:a1:77:2d:3f:
fb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CE:0D:0E:71:9C:9F:A8:59:B0:A8:0A:DA:D6:72:B3:39:08:4F:6D
X509v3 Authority Key Identifier:
keyid:84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b2:9e:81:38:92:66:cf:cb:ef:d4:ba:4b:c3:d9:ee:4d:a8:
d9:c9:68:2f:bd:63:9a:79:ac:e6:bb:9b:92:21:24:49:16:e9:
e3:dd:9a:76:73:85:6b:6c:6b:c4:ca:b7:0c:8f:b1:d5:e5:8b:
2f:d1:c3:49:d9:4b:49:de:e4:55:d0:b7:aa:b3:d3:10:12:d8:
ac:1d:3f:67:fe:06:a3:dc:ef:0f:68:7f:69:d5:e3:2a:8a:a6:
b9:f4:af:2c:5e:e9:3f:bc:47:9c:ee:20:10:85:49:d9:e8:0d:
75:55:95:31:f3:d5:30:80:fe:ea:33:29:14:d4:c7:ec:d7:97:
fb:19:01:6d:54:49:eb:ec:6c:60:f1:d8:5b:fe:4b:bd:37:e9:
78:06:c0:0f:6e:fa:f7:87:52:65:e5:24:fe:f5:35:fa:8c:38:
3f:c1:7d:ce:0d:ac:b5:ea:9a:7d:d8:67:ca:46:aa:34:f2:28:
1e:e2:93:ef:d9:9d:26:6a:f9:ee:92:09:fd:f7:9b:08:d2:35:
76:94:34:a5:6b:a0:6c:29:60:dc:7f:d2:cb:63:56:73:79:6b:
96:da:c6:01:7f:24:13:ce:db:79:fb:17:0e:a0:94:f9:5b:36:
a1:2c:f1:cf:bb:8b:c3:d5:8d:63:88:cc:de:7f:77:16:41:93:
bc:b9:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:34:21 2025 by rpki-client