Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
File: hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft (raw, json)
Hash identifier: upVU0//AimLI/MIP4TenJptMv3dyKnXdk7AbdoKdKkM=
Subject key identifier: B9:D4:BE:84:27:09:CD:B5:8B:51:AD:2C:63:6A:08:EB:40:C1:83:77
Authority key identifier: 86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77
Certificate issuer: /CN=8618b054d20dfdc9c5493c52c86234774904be77
Certificate serial: 019923A08ACC9A9E8F32D5760D090D6F1A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:02:27 +0000
Manifest this update: Sun 07 Sep 2025 10:02:27 +0000
Manifest next update: Mon 08 Sep 2025 10:02:27 +0000
Files and hashes: 1: hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl (hash: qVV0RI0D/aYwMe5I6SGKU6V4tCl86WxUsnSHMLgR34w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:8a:cc:9a:9e:8f:32:d5:76:0d:09:0d:6f:1a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8618b054d20dfdc9c5493c52c86234774904be77
Validity
Not Before: Sep 7 10:02:27 2025 GMT
Not After : Sep 8 10:02:27 2025 GMT
Subject: CN=b9d4be842709cdb58b51ad2c636a08eb40c18377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:58:a9:c5:14:01:8c:50:ef:14:2c:11:bf:
93:16:73:e3:7d:3a:5d:c2:0e:99:43:5b:01:01:25:
09:a2:46:34:94:99:23:37:63:2f:65:dd:c2:d0:5d:
83:f3:a8:2a:90:ea:10:09:7a:88:5b:6d:d9:b4:a3:
29:a6:fc:07:5a:30:97:c1:cd:14:db:d6:9e:be:65:
54:06:ae:3b:95:14:36:00:ce:e0:8e:f4:41:4d:6f:
08:7a:01:94:31:66:15:e4:62:07:70:bf:d2:dd:46:
26:1b:30:21:f9:dd:a0:4e:7c:0e:9f:51:87:21:df:
2b:af:36:41:56:d9:06:9d:8e:0f:a7:41:fa:ec:62:
97:75:ed:a3:c9:d5:3d:02:b3:03:c1:cf:8c:dd:d5:
95:ae:31:96:23:57:3a:6c:bb:ee:80:43:b5:98:81:
17:fe:87:f2:68:b2:00:61:63:22:dc:82:90:e3:5e:
79:3d:9b:61:c7:f3:5f:23:61:fc:1a:ff:17:0e:44:
c4:7d:09:db:6a:37:6c:1f:0e:75:52:76:9c:48:f2:
0b:53:66:0e:3f:bc:92:e4:f2:0f:e5:c8:3d:fc:b5:
62:7e:94:9a:02:80:68:c4:40:37:43:67:0c:f3:11:
82:a5:f0:3e:c5:78:d7:d0:82:4b:85:c8:cb:ad:83:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D4:BE:84:27:09:CD:B5:8B:51:AD:2C:63:6A:08:EB:40:C1:83:77
X509v3 Authority Key Identifier:
keyid:86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a6:bb:b0:58:4f:6e:61:61:95:92:d3:3d:d9:a5:a9:c9:cb:
09:db:99:7e:64:3c:5a:b0:6a:1f:de:11:5d:79:25:cf:98:e4:
cf:23:8f:7f:85:12:3c:e9:58:7d:a4:f1:86:d0:b1:a2:e6:b0:
40:ab:f2:fb:9e:89:24:40:9d:a7:c1:75:29:82:5f:2a:22:37:
2d:19:fd:44:3f:f9:50:8b:ab:95:6d:12:cb:dc:b6:5f:05:80:
f3:59:19:6f:d5:7f:a4:9e:0a:7d:61:04:01:d7:79:2f:16:c7:
6d:66:a3:32:c7:24:e5:e5:cc:a7:6b:77:a5:e1:9d:8b:fe:31:
21:36:96:ec:b3:a9:6a:cb:23:27:92:f3:8d:91:ed:7d:8d:c2:
a8:a2:d3:5b:e8:d0:ad:f1:92:76:b9:29:1a:ab:32:29:a4:f5:
99:e9:35:83:7b:bb:fb:a7:0c:f1:88:b9:7d:cd:d9:6c:de:bf:
bb:95:6e:0f:f9:36:2d:19:34:80:66:55:53:fb:94:38:6f:2e:
17:99:1f:53:90:79:dc:73:f9:71:63:1c:74:0e:b8:1d:b4:de:
ad:85:c6:aa:41:05:b3:27:f4:fb:03:1d:fa:81:04:1a:d8:cc:
96:6f:96:fe:8d:f9:4a:4f:b6:48:27:48:fb:1e:b0:f1:59:55:
c5:c6:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:56 2025 by rpki-client