Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier: 3vPIxoU6SNdnJ8botj+sc+3rV2J/vKZv95LYeWX73b4=
Subject key identifier: 56:75:AC:56:71:C5:6F:9E:92:E8:E1:55:6C:7C:3A:FF:B9:CB:D5:F5
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 01992330CAE52F4CE37BEFFE5D36C2748F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number: 1402
Signing time: Sun 07 Sep 2025 08:00:24 +0000
Manifest this update: Sun 07 Sep 2025 08:00:24 +0000
Manifest next update: Mon 08 Sep 2025 08:00:24 +0000
Files and hashes: 1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: gaKFP1u1V0MNr8QcQlw+Mtoq9o6wfAsfBN73AMFxA6k=)
2: siSVK589afKFmNB4xui803eAFA8.roa (hash: pIfAtolx6StiwhL02gSeSu2zm+FTXp7cgi/yqREz08c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ca:e5:2f:4c:e3:7b:ef:fe:5d:36:c2:74:8f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Sep 7 08:00:24 2025 GMT
Not After : Sep 8 08:00:24 2025 GMT
Subject: CN=5675ac5671c56f9e92e8e1556c7c3affb9cbd5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ca:c5:2a:57:03:69:83:e2:cc:a8:e8:ec:f9:
54:b5:c4:66:cd:98:ee:90:fc:a7:ce:0d:7b:83:cd:
a4:84:76:ac:f9:a8:8b:9f:7e:86:b3:d4:5e:34:c0:
8d:02:91:20:60:87:fd:8b:1c:9d:53:31:03:43:7c:
6f:ba:34:73:49:a2:6f:0d:97:fc:8b:d5:49:24:0b:
f4:66:22:8b:5c:eb:ae:06:8b:d1:af:92:6d:91:5c:
77:c3:a0:a0:26:85:e5:9c:9a:01:9e:fd:f6:4a:9a:
c3:75:4d:0a:46:de:30:61:60:a3:d7:cd:c4:af:db:
de:5f:0a:25:e0:24:02:67:8b:83:59:4c:d2:29:90:
cb:99:28:56:49:85:76:f8:0a:3f:b4:ef:c6:20:9f:
83:de:4a:c4:73:54:9c:83:48:b0:e7:81:66:5d:f2:
ca:aa:bd:02:2c:b0:7f:7a:ee:81:c7:dc:de:e1:ac:
c0:20:4e:c3:ee:29:5b:2e:0e:4c:31:86:4f:7e:c1:
db:4a:df:47:a5:2a:c5:6a:ca:0f:d7:32:bd:4c:bc:
b5:7a:3b:3a:dc:40:58:2e:f3:cc:1d:4c:a8:7d:11:
a9:66:0c:81:a2:b1:09:1b:42:7a:0b:5d:94:29:10:
90:60:b5:49:82:a2:4f:41:58:7d:d9:aa:05:80:c9:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:AC:56:71:C5:6F:9E:92:E8:E1:55:6C:7C:3A:FF:B9:CB:D5:F5
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b9:37:9d:fa:a7:96:1b:f2:5c:e0:81:c7:c4:56:9c:7b:f3:
65:f3:c2:f8:e6:85:a9:12:e1:1c:b7:4e:c7:9e:91:ad:02:32:
cd:79:62:e9:eb:5b:53:a9:eb:76:95:84:66:c4:af:6d:ae:08:
e2:ce:3b:ae:eb:48:1f:a4:c9:67:fd:a1:e8:31:d1:78:4b:5a:
5a:59:3b:c4:2e:5d:e3:c1:a3:0e:38:24:a3:8b:60:7e:ae:1c:
2e:a0:97:1d:66:f0:9f:6a:eb:e4:70:1f:12:aa:52:b7:39:32:
fd:46:79:2e:7a:d1:5d:38:05:6c:10:8c:f9:a2:5f:90:d5:64:
10:1c:8a:bd:9e:f6:8f:a3:c2:85:ba:00:c4:02:94:ac:8b:6e:
80:19:d3:45:92:56:8a:4c:f5:cc:0c:3d:f4:15:06:52:81:ed:
2b:7c:b0:52:6e:cb:d1:76:df:04:ae:72:63:d1:45:06:6c:8f:
05:3d:e5:11:39:8e:eb:10:8d:67:e7:89:62:b4:2c:40:e5:f1:
12:45:19:f0:dd:77:f1:af:f9:0a:c2:9e:06:1b:06:45:4d:09:
04:f7:b5:9f:3f:91:06:31:2d:4c:c5:32:fa:40:28:9a:c7:f5:
7a:bc:b7:65:3d:fe:e9:ee:f7:56:a4:1d:d3:d1:bd:be:95:88:
de:d0:9e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:38 2025 by rpki-client