Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
File: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json)
Hash identifier: KInAdmEjhXzCXsJhKWnfxx0BMFrdNLL/7zKr9nkNCWY=
Subject key identifier: 94:11:73:99:F2:62:09:8A:CC:3D:96:F1:1C:11:FD:04:A1:E4:5A:0C
Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Certificate issuer: /CN=ac7862c299d6088718760a96168272fccbfda970
Certificate serial: 01975A924E84A4DD78588545EAD9E2C9AF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
Manifest number: 03C5
Signing time: Tue 10 Jun 2025 16:00:27 +0000
Manifest this update: Tue 10 Jun 2025 16:00:27 +0000
Manifest next update: Wed 11 Jun 2025 16:00:27 +0000
Files and hashes: 1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: ijruToPuboIipzW3jaEzaJf/jk0/qhtuY38qYMx+s1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:92:4e:84:a4:dd:78:58:85:45:ea:d9:e2:c9:af:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7862c299d6088718760a96168272fccbfda970
Validity
Not Before: Jun 10 16:00:27 2025 GMT
Not After : Jun 11 16:00:27 2025 GMT
Subject: CN=94117399f262098acc3d96f11c11fd04a1e45a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:15:6c:36:4d:90:8e:d1:4c:5e:8e:25:38:
00:c4:b3:a0:29:0b:b9:6f:5e:f1:77:54:be:9f:6d:
c7:bc:50:3a:35:31:90:f5:58:55:2f:c6:76:a6:bb:
81:d1:21:f0:4d:9d:62:3c:22:6c:d7:45:47:24:c7:
ec:9f:fa:83:24:0b:3e:89:bd:a5:0a:38:c4:f5:b0:
4c:42:b1:37:91:f4:2f:e3:e3:e3:71:38:6e:c6:a5:
cb:51:3d:ea:ab:c5:98:17:5c:00:4e:f9:80:ae:75:
91:1f:9a:d5:a5:b2:91:e7:18:b8:db:ea:9e:65:a1:
f0:64:aa:d6:c8:e3:ee:70:4d:29:56:72:25:18:8b:
e8:53:80:a2:cf:a2:eb:8e:f2:e5:f9:28:5d:4e:1a:
97:0f:e2:c8:fd:68:44:50:a1:37:ec:a6:68:6b:4b:
7b:a7:a9:32:4f:22:95:fa:5e:4e:81:75:0f:97:87:
ea:91:c1:8e:a8:9e:26:53:2d:60:66:87:45:ad:85:
e7:28:4c:58:be:3d:40:fb:ab:5b:85:91:ab:a9:f5:
46:be:e0:d7:ad:d5:ed:c9:f3:b2:a2:e7:4f:e5:fb:
38:dd:b2:53:bf:f9:9c:0b:35:1f:72:33:32:61:ba:
4d:b9:0b:7d:d9:30:22:8c:05:cf:2f:df:a3:fe:c7:
a8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:11:73:99:F2:62:09:8A:CC:3D:96:F1:1C:11:FD:04:A1:E4:5A:0C
X509v3 Authority Key Identifier:
keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1a:a2:93:ae:55:89:41:52:e2:74:c9:74:9a:54:70:e0:81:
0d:80:c1:ca:29:5d:af:d0:d0:54:77:a1:5e:d6:23:7f:57:29:
f0:93:22:d3:17:dd:b6:24:ee:26:c0:91:4c:2c:d2:87:da:9b:
3a:d7:18:f8:81:c3:81:05:14:bc:ee:68:78:a2:ba:4f:95:6b:
88:9e:10:4a:00:45:df:39:83:25:e3:b1:da:bf:dc:19:d8:58:
b8:d7:3f:3c:a0:e5:e5:94:5c:54:e2:c4:24:8d:39:07:88:2e:
01:dd:d6:a6:fb:b3:d6:77:5c:86:10:8a:b5:9d:11:6e:d9:2a:
1e:5c:87:e8:61:82:1a:2b:60:04:47:3a:c2:7e:43:29:b9:1d:
c0:2f:52:6b:31:21:3a:32:92:3b:5c:5e:7d:f8:cb:3e:27:22:
31:52:3b:82:c7:9d:ac:4f:d2:81:ef:6a:19:eb:7b:cb:6f:f9:
6f:d9:91:3f:33:81:9e:95:68:ae:97:79:09:38:45:22:1e:05:
26:b3:22:ee:e6:6b:6f:e6:4d:00:60:0f:bc:ef:b9:01:9d:ff:
0e:bc:f8:6e:8b:26:f0:3b:19:4d:09:e1:7e:fe:20:c3:8f:2f:
63:9e:a0:a1:68:ba:55:0e:4c:24:70:9e:1d:d4:2c:91:0c:55:
99:a9:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:27:51 2025 by rpki-client