Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
File: HpICrmewRlNH1t35D2Ri-ubk5kM.mft (raw, json)
Hash identifier: WYl/6dL8QurJY+lO0np8dRtl2DSS/NWFdf8b3TSfncE=
Subject key identifier: E7:19:10:A9:7F:E9:12:22:3C:26:93:48:EC:F8:F5:B2:BF:58:01:86
Authority key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
Certificate issuer: /CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Certificate serial: 01984A40DA6B59E2F21BA3D88F99F5384CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
Manifest number: 0AAB
Signing time: Sun 27 Jul 2025 05:00:20 +0000
Manifest this update: Sun 27 Jul 2025 05:00:20 +0000
Manifest next update: Mon 28 Jul 2025 05:00:20 +0000
Files and hashes: 1: HpICrmewRlNH1t35D2Ri-ubk5kM.crl (hash: elM3EI72vHcDYJNo7ZoUbVyb56YRhW6gDVoZY7gzZEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:da:6b:59:e2:f2:1b:a3:d8:8f:99:f5:38:4c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Validity
Not Before: Jul 27 05:00:20 2025 GMT
Not After : Jul 28 05:00:20 2025 GMT
Subject: CN=e71910a97fe912223c269348ecf8f5b2bf580186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c4:ee:be:54:8f:29:d3:04:4c:d4:35:b1:98:
c6:c5:ec:b0:f2:c6:b2:dd:ef:44:43:9b:61:55:12:
79:d5:b0:c4:1a:90:51:8f:67:f3:70:d2:3c:39:8e:
06:13:f7:86:da:8b:45:63:1a:0b:8d:29:98:bc:60:
3e:a4:9d:a7:eb:73:d4:be:47:9e:c9:fb:40:cf:01:
48:19:0a:7d:b0:0b:57:87:b7:10:3c:e4:0d:52:a5:
5c:e9:98:81:fd:b7:48:9a:91:10:e9:cd:5c:a9:2c:
fd:3c:4d:0d:65:6c:1b:98:91:00:af:33:ca:57:03:
5d:b6:8c:52:0d:c8:57:58:0c:fa:42:87:17:86:f8:
ac:27:1b:f7:b6:fe:c5:0a:a9:9d:b9:7d:e7:79:f9:
eb:54:16:91:33:1c:e2:83:4e:d7:af:4c:e1:27:25:
a4:87:90:f3:0c:bb:87:eb:13:4e:d4:d8:02:26:e5:
f3:55:73:d4:93:df:69:9a:af:66:81:ea:05:2c:08:
7a:33:ee:b7:2e:b7:7d:58:0c:b7:9f:56:61:f2:5e:
5d:d5:cd:04:58:c8:ba:fd:9c:bc:a3:ae:cc:e4:89:
e3:15:06:c6:d1:6b:3c:21:a8:09:da:70:b5:a0:40:
5b:71:57:4c:7d:33:3b:80:5d:f2:c4:2b:d9:4d:26:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:19:10:A9:7F:E9:12:22:3C:26:93:48:EC:F8:F5:B2:BF:58:01:86
X509v3 Authority Key Identifier:
keyid:1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fc:da:db:ff:50:04:0e:74:97:ab:0e:9b:d6:db:38:03:9f:
f9:20:e9:9c:27:d7:91:5e:02:f0:cf:5e:09:88:f8:ca:04:07:
f5:8c:8d:e2:aa:9f:48:5a:40:f3:d1:8e:0d:ab:c7:3f:ee:e6:
90:a1:07:e7:54:5f:e8:b1:a8:3b:db:ee:37:92:e8:d8:81:f9:
1d:bc:a1:78:a4:4b:8e:a4:87:d6:ce:53:ee:83:f1:fd:a5:f4:
6a:42:b0:ef:d0:77:92:8d:f9:b5:4f:05:25:fd:dc:b6:87:0b:
11:58:1c:44:b6:4a:ff:66:81:da:58:42:6b:1f:b5:c7:17:7b:
3f:0d:9e:bc:9e:be:88:50:04:ad:62:59:49:a5:6c:8e:dd:b9:
10:81:c2:38:a4:9a:b9:bc:e8:99:e1:cc:7c:95:6d:01:cf:eb:
e4:6d:84:99:8e:35:2c:3c:97:88:57:90:e0:8c:bf:50:37:8a:
24:57:c0:4d:1f:8a:aa:90:22:aa:19:04:9e:f8:13:73:0a:58:
3c:2c:d2:55:82:16:dc:05:ea:08:14:2d:ce:3a:02:9e:65:89:
a8:69:95:b6:c7:5d:a4:e9:7e:48:49:4f:f1:6b:4f:0e:06:10:
38:49:10:e0:b4:f9:78:29:36:e0:bb:a5:94:be:d2:82:5b:98:
a2:73:ed:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:12:37 2025 by rpki-client