Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File: hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier: IahydkAFVqRE1QTJsKRpqX1GUO+IjsSgTgV2/0Wgl+8=
Subject key identifier: CA:E7:47:E9:B6:DF:D9:58:2E:5B:4E:E2:20:CF:FD:E9:99:63:E2:51
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer: /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial: 019A0035B3C667F8AC1DB31BEF29FE359E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 06:01:50 +0000
Manifest this update: Mon 20 Oct 2025 06:01:50 +0000
Manifest next update: Tue 21 Oct 2025 06:01:50 +0000
Files and hashes: 1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: ZzkhcMXv0WpCdbVbUsDGBvV01qzbOJDhQbfBDZS3UVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:b3:c6:67:f8:ac:1d:b3:1b:ef:29:fe:35:9e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Validity
Not Before: Oct 20 06:01:50 2025 GMT
Not After : Oct 21 06:01:50 2025 GMT
Subject: CN=cae747e9b6dfd9582e5b4ee220cffde99963e251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:b4:44:51:1a:4c:66:cf:fc:14:17:1b:15:
9e:44:51:f8:8c:0f:18:f0:c8:5c:64:13:aa:80:d7:
56:84:28:28:2e:5f:ea:f3:02:6d:7a:e1:0e:10:fa:
47:66:ee:28:f9:fd:7d:78:ae:45:8e:6f:13:e0:2d:
47:49:fe:92:23:73:7e:81:2b:c6:e0:4a:85:c6:6b:
f2:70:c1:30:23:1f:ba:d0:f7:65:1f:6c:30:d0:50:
3a:09:5c:09:c6:bf:2a:f3:d5:3c:66:6a:1a:79:46:
df:1a:d7:46:c5:69:9e:8c:af:0f:9f:ef:6c:fa:aa:
14:8f:d2:ac:54:97:f5:33:df:34:dc:56:bc:d8:a5:
ad:25:94:39:b0:da:da:c1:12:49:5f:71:4e:46:55:
b2:49:09:8c:97:f5:06:60:cb:aa:6e:56:b1:62:c3:
f9:c8:7a:fd:82:27:98:d0:2f:e2:51:81:3a:a3:77:
15:0e:6d:5d:e1:03:c3:1a:fb:23:52:b2:fa:c8:dd:
d0:c0:27:14:b6:c2:37:7d:d8:80:2c:34:a3:31:f1:
64:fe:e9:16:26:b6:21:31:04:00:ad:4e:2b:da:eb:
06:1b:94:c8:03:7e:20:1b:41:95:fb:0d:de:0d:e8:
4a:3a:18:32:22:94:58:d3:84:31:91:e9:52:09:92:
3d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E7:47:E9:B6:DF:D9:58:2E:5B:4E:E2:20:CF:FD:E9:99:63:E2:51
X509v3 Authority Key Identifier:
keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:09:84:09:ab:b8:1d:2f:29:c3:37:94:8c:9c:e9:4b:4c:c8:
47:63:74:22:13:76:b4:07:5f:82:a6:72:45:73:1a:fc:4f:6d:
04:cb:95:d4:b7:53:c1:a7:d4:83:a9:6f:b4:dd:12:01:f5:bf:
21:4e:4a:81:3c:a7:c7:70:9f:1c:23:22:ac:d1:f8:37:11:d2:
3f:6c:a6:70:d3:bb:74:3c:b7:30:b3:cd:b7:b3:2c:d4:29:f9:
bc:9e:1f:e5:b4:fb:a4:b0:92:c5:e7:73:1c:c3:b9:0a:f6:e5:
71:04:cf:85:ac:80:e6:59:cb:92:aa:55:c1:16:be:cb:74:88:
99:45:48:0c:0f:86:fb:09:a7:36:de:31:65:f4:f3:e9:e0:4b:
d3:d7:1e:65:b3:d1:ee:59:a6:cd:88:4c:a4:d0:d8:8a:d5:ff:
61:cd:08:78:4a:b5:c0:f3:1e:eb:f8:6f:35:fb:8d:c8:c8:db:
8a:6d:4c:89:6b:51:ed:d3:cf:d0:68:23:82:f7:90:e5:cc:49:
d6:41:a7:61:45:de:00:76:9b:f0:bf:25:82:67:2e:53:46:2e:
fa:ee:a5:31:b4:20:da:f9:29:e0:64:78:7d:8c:8d:e7:da:e7:
fe:b5:aa:8c:a3:d3:2b:74:27:29:c8:2b:06:c3:2e:6b:db:d4:
0d:e9:6d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:33 2025 by rpki-client