Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
File: mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft (raw, json)
Hash identifier: cejJc9c5aiTN/3zqy4o1cs5n2aEblv9Hnnp40+NWLPI=
Subject key identifier: 1E:5A:C9:87:70:A5:D5:0E:F9:1D:E6:51:EA:39:A3:0A:0C:49:A4:7E
Authority key identifier: 98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
Certificate issuer: /CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
Certificate serial: 01992255309682298A21634F8B12C393EDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
Manifest number: 0222
Signing time: Sun 07 Sep 2025 04:00:32 +0000
Manifest this update: Sun 07 Sep 2025 04:00:32 +0000
Manifest next update: Mon 08 Sep 2025 04:00:32 +0000
Files and hashes: 1: mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl (hash: E1WPtIua7nbM/Cl/t+kd4JAmWOt4QiY0x3pOTqpvty4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:30:96:82:29:8a:21:63:4f:8b:12:c3:93:ed:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
Validity
Not Before: Sep 7 04:00:32 2025 GMT
Not After : Sep 8 04:00:32 2025 GMT
Subject: CN=1e5ac98770a5d50ef91de651ea39a30a0c49a47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:d3:4e:56:e6:f6:bb:91:0a:83:e6:bb:71:
64:0c:f7:78:72:bf:64:c1:65:a7:b0:87:72:a6:e8:
3e:d7:1d:76:55:f1:9a:ce:15:c2:c8:ea:8c:fa:9c:
3f:0e:95:86:eb:6a:03:9e:03:13:34:55:a5:3d:9d:
d4:4b:18:61:bb:d7:6e:fe:40:e2:f1:92:5e:3e:a6:
07:97:9b:c1:e3:cd:ae:0a:4c:ca:66:1e:d5:2d:7c:
ad:3b:fc:c2:c5:b4:ed:dd:64:0b:65:f1:37:70:fc:
f5:48:77:4f:58:b1:df:55:7f:33:c6:8b:05:3e:0d:
7b:62:3d:fd:d6:30:de:3e:11:28:76:4b:7c:7c:c7:
63:7c:50:88:7f:0f:53:b8:52:28:8e:34:a2:19:90:
a4:2d:d4:80:5d:6b:41:c3:e8:d1:73:84:a5:72:09:
fa:b5:fe:4a:08:34:ea:1f:48:2f:72:c2:98:cd:1b:
0e:9a:de:49:f0:62:18:73:1d:9c:4b:39:46:77:9b:
0f:31:13:f7:7e:a0:fe:d0:81:c8:d7:89:d5:17:be:
67:a3:14:75:b1:2a:47:12:87:90:83:8e:6b:f0:0d:
47:1d:ea:67:cf:0c:7f:3b:11:40:8c:64:f4:24:b8:
5a:ce:d8:8c:68:f0:24:b0:8d:8a:6a:5d:9d:3a:4f:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5A:C9:87:70:A5:D5:0E:F9:1D:E6:51:EA:39:A3:0A:0C:49:A4:7E
X509v3 Authority Key Identifier:
keyid:98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:50:52:f6:0c:c8:29:ad:ad:18:ff:68:f9:80:d5:e9:0d:4a:
42:d9:eb:ea:a2:63:ab:3e:7c:8c:36:a1:d5:28:4f:8b:82:ad:
c6:2d:43:61:0b:c3:a3:4a:8a:9b:93:73:e2:1f:20:0b:99:92:
a2:9a:1d:48:76:d5:85:56:6b:a8:32:d8:d4:19:04:16:b6:52:
89:de:a7:7b:ab:5c:36:38:3e:05:58:14:6f:99:c5:6c:65:42:
e1:e1:e2:19:97:aa:20:b2:ec:76:be:4b:75:db:f7:01:d9:19:
b8:76:33:88:ab:cf:6b:a2:80:3f:be:c5:aa:d4:22:4c:e6:7a:
4d:1a:ac:8e:62:d8:24:97:a4:71:e4:e2:c1:53:f5:23:49:31:
6e:d6:fd:fa:67:50:20:03:69:e4:6e:e7:9e:b8:2d:17:d2:85:
8b:f3:8f:18:c8:90:7d:16:a3:67:79:cf:d4:d9:8c:29:6d:f6:
19:a6:e6:b8:d6:50:35:53:ed:8a:21:d0:90:21:3e:ca:b3:2c:
17:90:70:ac:d2:69:31:a2:ee:c8:49:1a:dd:e7:dd:b5:71:d2:
e6:b5:02:83:5e:38:7d:60:53:3e:29:d8:2d:d4:15:1d:f2:18:
df:43:1b:3f:4e:21:16:6e:0c:ed:96:c2:71:60:d7:21:13:d4:
7f:42:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:33 2025 by rpki-client