Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
File: _hEX6Xaz4zlTuTYbtLseui9Ane0.mft (raw, json)
Hash identifier: yoh5ZyNvgpdrSZb92tQnjOyezFS6Yh1FHCT+pkeEnWw=
Subject key identifier: A8:BD:FB:B1:DF:DE:94:E1:7C:40:64:58:30:67:D2:58:6C:03:0E:AD
Authority key identifier: FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
Certificate issuer: /CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Certificate serial: 0199228CB8FEB2E9C28B38167DC4F2CFBF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
Manifest number: 078E
Signing time: Sun 07 Sep 2025 05:01:11 +0000
Manifest this update: Sun 07 Sep 2025 05:01:11 +0000
Manifest next update: Mon 08 Sep 2025 05:01:11 +0000
Files and hashes: 1: _hEX6Xaz4zlTuTYbtLseui9Ane0.crl (hash: M/XaLmfWch3K+7PJg9MpAGttu4dPddmR51FBcNaS3AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b8:fe:b2:e9:c2:8b:38:16:7d:c4:f2:cf:bf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Validity
Not Before: Sep 7 05:01:11 2025 GMT
Not After : Sep 8 05:01:11 2025 GMT
Subject: CN=a8bdfbb1dfde94e17c4064583067d2586c030ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fb:f4:44:18:d5:a7:06:72:9e:fe:ec:2c:99:
1f:be:f3:c9:f1:f3:71:76:e6:8c:05:99:6c:f4:3a:
ca:41:46:07:52:34:77:05:36:51:d7:c1:18:49:d3:
25:3e:99:c7:7f:13:e3:b4:30:0c:29:83:66:ff:c7:
28:65:48:0c:d7:f6:08:aa:0a:93:6f:06:eb:40:3e:
cc:55:08:7e:30:94:c7:75:61:a0:83:2f:d8:bc:31:
27:54:99:37:02:76:40:5c:d6:5c:6e:64:56:7c:c8:
01:9a:51:04:44:b5:48:01:80:84:2d:3a:93:c1:bb:
79:f1:6b:36:fa:b9:30:26:95:59:70:46:d3:76:86:
d1:e9:70:81:78:ac:0d:f3:46:33:2f:14:f5:19:3e:
ec:8f:08:8a:83:95:7f:68:e0:5c:26:b6:7e:2c:ae:
87:9f:ca:4d:42:47:19:f7:24:6a:f1:36:59:dc:00:
fa:01:57:02:4d:42:7e:bf:3b:74:08:ef:20:9b:89:
26:6f:9f:d8:54:eb:66:67:00:bc:50:af:21:9a:b6:
0e:33:ee:15:f7:c5:ad:86:78:24:6f:f4:b4:d9:67:
3a:58:21:81:0c:2f:8d:97:bd:e2:4f:b3:31:c5:87:
01:c1:c1:a9:da:54:b4:bb:6b:0d:7f:86:dd:52:fe:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BD:FB:B1:DF:DE:94:E1:7C:40:64:58:30:67:D2:58:6C:03:0E:AD
X509v3 Authority Key Identifier:
keyid:FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a2:81:1f:51:e3:eb:29:31:d8:49:27:28:1d:0c:23:a8:57:
af:65:98:94:59:e3:1c:c0:d0:39:ce:c8:ed:6d:6c:e6:3d:db:
8b:b3:b3:9b:af:ee:35:d4:dd:a4:e1:10:bb:5f:a4:45:2c:bd:
c6:bd:4f:94:ca:58:02:c7:9f:61:76:ae:6d:53:30:d1:74:64:
1d:e1:8a:53:04:73:9e:d6:56:03:8b:84:9d:e9:f9:7b:eb:71:
2d:2c:e5:4b:2e:15:f5:a3:23:5b:a8:51:10:28:8d:6a:b8:70:
d9:83:cc:4b:79:b6:be:45:43:e7:8d:9d:07:87:a9:05:f1:dd:
ba:b4:cb:a7:79:d3:20:9c:62:ca:43:c5:43:3b:d6:44:c3:3d:
c2:21:ae:9a:e7:05:2e:a0:8d:b6:3a:91:81:43:90:e7:94:d6:
1f:39:9e:55:65:c2:39:13:ee:0d:b6:56:22:de:90:ca:8e:76:
d2:6e:ea:a4:fb:b2:3d:27:d4:0d:57:c2:a9:61:37:5e:13:93:
96:9e:00:06:cf:51:99:6b:b9:96:e0:fa:6f:7a:31:58:1f:a1:
61:19:ae:a5:24:c0:82:ba:53:44:cc:f0:9f:29:3c:08:b5:2e:
e5:5c:22:52:85:7c:4c:f1:aa:88:ea:24:ee:d1:3a:85:e7:84:
6c:af:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:16 2025 by rpki-client