Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
File: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json)
Hash identifier: CrY8SuG5Kcly+cD6DRdNnKSAqUoCj1FwEyrgHi6+kes=
Subject key identifier: 91:A6:7E:34:3D:1E:DC:84:E4:A7:17:43:16:97:93:67:5A:9F:E0:6B
Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Certificate issuer: /CN=ac7862c299d6088718760a96168272fccbfda970
Certificate serial: 019754C78BFDA6ED3199ABDC3E682A57A867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
Manifest number: 03C2
Signing time: Mon 09 Jun 2025 13:00:52 +0000
Manifest this update: Mon 09 Jun 2025 13:00:52 +0000
Manifest next update: Tue 10 Jun 2025 13:00:52 +0000
Files and hashes: 1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: kHeO0qDHgxbk3bT8FORxIPsqdqNpZVMOIXmpdzf/KSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:8b:fd:a6:ed:31:99:ab:dc:3e:68:2a:57:a8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7862c299d6088718760a96168272fccbfda970
Validity
Not Before: Jun 9 13:00:52 2025 GMT
Not After : Jun 10 13:00:52 2025 GMT
Subject: CN=91a67e343d1edc84e4a71743169793675a9fe06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:24:b0:30:d1:4b:61:c2:d2:e7:b2:84:51:
61:ae:be:c3:58:ad:cd:0d:88:c8:13:3e:95:3c:1c:
88:9a:85:04:76:e5:0e:1e:8a:a0:c9:db:f0:2f:d6:
0b:2c:fd:e1:c9:d3:c5:0c:dc:59:83:e8:e4:1e:81:
d1:91:d4:41:af:71:ce:ee:1b:11:41:ab:a2:86:f2:
ed:b2:68:b0:32:74:70:d3:60:fe:cb:e2:14:27:af:
88:a4:09:67:90:3e:ae:8d:2e:7c:a0:be:f6:f6:76:
20:d0:fb:b1:78:83:2e:f7:0f:fd:f0:66:7b:7a:a6:
61:09:1f:8d:05:fa:b8:f6:b1:42:e1:3e:6d:5b:05:
7f:ec:7a:41:49:2e:ba:f2:49:6c:1a:f6:2e:f5:05:
89:07:07:3f:a5:28:f9:40:c2:9d:a9:11:92:71:fa:
50:52:2f:61:d1:bf:91:8b:d1:78:2a:ad:3f:fa:db:
a1:c5:55:5a:00:29:35:5e:3d:14:14:97:55:5c:b7:
10:80:47:71:f0:d8:42:41:9c:e8:a5:2d:1f:50:8c:
b3:d4:be:ad:e6:31:57:cd:07:c1:94:98:f5:6b:6d:
9e:49:b4:75:b0:bc:a3:26:9d:96:b3:8a:25:80:f3:
66:71:da:e7:bd:0f:7a:58:bc:7d:cd:75:fa:94:c3:
79:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A6:7E:34:3D:1E:DC:84:E4:A7:17:43:16:97:93:67:5A:9F:E0:6B
X509v3 Authority Key Identifier:
keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ed:b8:31:ac:9f:8c:97:3a:5a:ea:0c:a8:dc:74:8e:e4:61:
bc:d3:57:be:f1:2f:05:92:df:9a:d4:7c:3d:21:51:10:2c:45:
95:2a:eb:87:42:91:ee:e6:7c:d0:ec:fb:6c:10:ad:f7:01:da:
71:68:60:37:20:57:93:b0:23:85:be:07:ae:83:d1:62:19:b1:
da:12:f1:b8:1f:f5:32:a4:77:30:e8:9c:6c:e2:53:2c:10:1d:
33:2c:da:63:92:8e:90:e2:51:3b:63:df:d9:25:b4:31:39:8b:
94:31:3f:05:e3:b2:21:67:86:e6:43:c5:96:a5:6b:cc:23:c1:
d2:70:c0:1c:68:cd:8a:17:35:b3:95:94:a8:b8:f1:65:c8:cb:
f4:ed:4a:59:e6:79:a4:43:ed:df:1e:0d:a4:ae:8c:1b:36:b3:
38:26:15:af:b2:d1:c5:b5:4f:95:64:ba:b2:36:56:d1:cb:6b:
b0:e4:69:18:5b:2c:28:59:e6:ab:a5:35:da:21:f7:df:53:6d:
22:28:ca:b8:e3:f6:bd:9e:fa:fa:e0:de:c7:bb:b5:a8:16:6c:
01:13:21:77:3c:18:99:c2:ea:9b:56:a1:b2:45:08:88:63:23:
15:c4:95:ec:f4:0f:59:56:6c:88:fe:17:cb:c2:78:9b:b9:0c:
a3:ad:0a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:30:02 2025 by rpki-client