Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
File: hgLiX_EiDtSqju94wzpyKrWIP40.mft (raw, json)
Hash identifier: StBfDTyuhmFBxgnHWoc3MSwbP61HtkZ46NY5I99mHtM=
Subject key identifier: 9E:55:1D:5D:E3:A6:8F:5F:8D:53:41:1F:03:E4:B6:76:B0:5F:41:66
Authority key identifier: 86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D
Certificate issuer: /CN=8602e25ff1220ed4aa8eef78c33a722ab5883f8d
Certificate serial: 0199180A9F2899E7868DC50AC32AD634080E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
Manifest number: 0120
Signing time: Fri 05 Sep 2025 04:02:53 +0000
Manifest this update: Fri 05 Sep 2025 04:02:53 +0000
Manifest next update: Sat 06 Sep 2025 04:02:53 +0000
Files and hashes: 1: hgLiX_EiDtSqju94wzpyKrWIP40.crl (hash: t5Eb6tAwpgf2kKn2s+1qS4d/C19wb0DMygwRTydngnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:9f:28:99:e7:86:8d:c5:0a:c3:2a:d6:34:08:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8602e25ff1220ed4aa8eef78c33a722ab5883f8d
Validity
Not Before: Sep 5 04:02:53 2025 GMT
Not After : Sep 6 04:02:53 2025 GMT
Subject: CN=9e551d5de3a68f5f8d53411f03e4b676b05f4166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:3a:e9:bc:c0:90:23:75:72:e7:ce:d7:27:
47:30:a1:c4:d2:a9:b8:2b:1e:ad:a7:5e:a2:d8:c1:
ae:53:16:a5:f7:4b:fa:0a:09:1a:ce:de:1b:05:8c:
44:58:3b:d9:93:5d:8a:67:9e:78:5f:07:43:20:dd:
a5:bd:74:a0:b9:34:28:55:9d:15:3b:57:a2:98:7b:
50:8b:9e:82:02:6a:35:27:c4:bc:34:e8:df:31:9d:
71:72:4a:7e:f2:d2:13:45:c2:ac:fc:7d:7c:dc:92:
23:95:7c:b8:b0:2f:a0:0a:ab:c1:66:b5:23:32:81:
2e:43:ef:3c:93:ec:64:ae:87:b7:a2:b1:d6:68:40:
a0:56:81:42:d1:3d:cd:12:fa:59:9f:5b:2b:0b:3f:
68:2a:26:1e:cd:a8:98:7c:8c:b4:c6:20:84:72:ee:
3d:82:15:b7:f3:29:bf:dd:1c:f1:12:d5:92:0e:7e:
cc:31:0d:bd:2b:2d:26:84:0d:31:d9:54:29:32:0d:
1f:7f:9c:db:81:8b:ef:41:2a:9f:c7:2e:77:52:92:
5d:60:61:2f:e5:30:08:53:9d:e0:18:4e:d8:29:6a:
e9:28:73:14:a4:3b:95:68:80:b4:3c:5d:fe:67:f3:
61:f5:ff:a6:a0:58:07:ed:d9:c1:c2:50:84:3d:b5:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:55:1D:5D:E3:A6:8F:5F:8D:53:41:1F:03:E4:B6:76:B0:5F:41:66
X509v3 Authority Key Identifier:
keyid:86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:80:af:28:05:a9:34:82:47:12:ea:e4:ef:f5:26:b3:ce:16:
3c:63:fa:b2:86:d4:17:e8:4d:35:ca:e1:c0:e3:b8:91:81:1e:
69:96:12:88:64:6c:1e:bb:6e:17:54:fe:6d:2b:08:e5:b3:92:
9b:c5:dd:74:ae:a2:df:d5:a7:1b:d9:45:61:4d:9a:a9:1c:1c:
d0:7c:21:1d:3e:5a:18:e7:15:c4:7e:8f:62:87:ba:87:7d:59:
2b:ea:c8:7f:b8:c1:2b:3f:5a:e9:83:f9:f9:d3:8a:c0:0f:b2:
70:c4:47:83:b9:ad:7b:3f:b1:2a:60:66:f3:90:9b:8f:3e:3e:
b1:d8:13:32:94:10:7d:94:4d:dd:63:3d:6b:51:fc:16:9d:b1:
da:20:90:2a:59:d3:3d:c9:dd:c2:10:94:3a:aa:bd:3f:c6:06:
f0:35:e9:f3:9f:5a:76:d8:5c:18:e3:7d:eb:7f:31:a9:4f:21:
8a:99:18:30:b6:28:fe:25:ce:1d:d2:31:02:49:b4:1b:7b:1d:
9b:7f:d1:0b:68:e9:e4:de:6b:02:a6:1d:2d:d4:09:29:34:cc:
d2:4e:f1:fc:80:cf:c7:4c:8b:05:a9:df:f4:cb:89:49:a3:6f:
80:f6:4d:9d:c4:08:56:3b:ca:7f:e6:7e:53:86:65:f9:ff:d4:
2d:10:0b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:30 2025 by rpki-client