Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
File: rh967y8S0HaqitWli8uNyvPwvUw.mft (raw, json)
Hash identifier: xWlOzZb5ucX442aZTIbttU80dvCj/Kmr2Tv3aVLfTEQ=
Subject key identifier: F9:A9:AC:81:F1:9B:59:1E:2F:09:7E:F5:A3:E9:B6:5D:A5:1D:E4:82
Authority key identifier: AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
Certificate issuer: /CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Certificate serial: 0199FC58F67C0931903A456ED390D94978E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
Manifest number: 1231
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: rh967y8S0HaqitWli8uNyvPwvUw.crl (hash: imHq0KZV3OI4q/p16udmEqxBWMxSWK0nx2aM4BdvgFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f6:7c:09:31:90:3a:45:6e:d3:90:d9:49:78:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=f9a9ac81f19b591e2f097ef5a3e9b65da51de482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:37:f2:4d:b1:f0:b3:e0:93:6f:d4:f9:4c:
e0:04:f4:7b:ea:d4:c0:85:52:4b:84:77:e9:03:46:
49:72:4d:c3:98:6f:c3:44:13:04:69:75:b3:45:7c:
3d:14:2a:07:7e:62:3b:bd:f2:d6:10:8b:20:26:72:
37:54:3f:23:5a:28:35:eb:d0:04:22:1b:60:49:11:
b5:47:6a:83:55:ea:85:9a:d5:c9:02:56:6e:b4:f3:
b2:f5:d4:34:66:d8:e0:3f:33:cd:97:44:6e:be:48:
e9:88:52:64:54:99:fe:b8:89:7e:2d:ad:3c:f9:f9:
e8:4f:52:97:69:54:ae:50:e9:f3:e5:85:5f:16:4c:
63:94:ca:1b:de:34:49:31:ec:43:fb:d3:56:c6:07:
05:16:a3:da:0b:36:db:2a:38:06:5d:b5:f9:8f:a9:
71:25:05:b4:4b:08:eb:7a:fb:c5:3a:3e:b3:4a:96:
53:cb:cf:7f:69:8b:a2:cd:85:9a:bb:04:10:51:2b:
da:14:83:cb:7a:61:4b:a6:fa:f1:1d:40:20:3f:38:
fe:ee:6a:ff:8d:1b:43:18:fe:0d:20:07:ff:4a:d2:
42:58:d9:a0:b1:51:b0:ab:58:f5:8b:f6:d1:6c:c2:
a6:19:5c:1c:2a:20:18:bf:7b:99:5d:33:fb:00:26:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A9:AC:81:F1:9B:59:1E:2F:09:7E:F5:A3:E9:B6:5D:A5:1D:E4:82
X509v3 Authority Key Identifier:
keyid:AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:22:9a:2f:ca:cb:af:7f:eb:71:eb:aa:6d:be:39:e9:18:ef:
ba:c9:cc:be:78:05:de:c3:22:2f:08:61:6a:a5:7b:d0:ce:08:
14:ef:f1:8c:1a:bb:b8:e2:4c:71:b9:9a:ac:c8:7d:79:b1:32:
b6:76:1b:d9:ad:97:ee:d7:4f:3e:6e:cd:b0:05:ed:36:73:69:
c9:a2:f8:f6:48:63:fc:17:b4:2a:0d:b6:3c:4e:43:df:c5:01:
c4:9d:2d:6e:6b:c8:03:88:64:fb:fc:d6:c2:89:8f:c2:09:3e:
a5:1a:c3:65:41:b7:23:31:36:b9:41:d4:64:de:f6:c7:01:47:
50:66:8b:e0:da:2b:f0:f0:7f:89:c1:4d:ba:ec:15:13:17:97:
86:c0:9e:ef:96:1e:e8:9e:bc:07:92:37:0b:3c:f7:f2:a3:34:
57:a0:26:b7:d2:de:9b:26:9b:30:7a:a6:39:a7:24:23:5f:45:
88:39:a7:02:40:db:c9:e5:ce:3c:17:6d:63:b5:38:39:dd:f7:
c1:c5:28:03:2b:ba:ad:78:91:38:c8:cc:54:51:b2:5a:3a:21:
d1:a4:ed:bb:bd:0e:39:c9:7d:8b:53:d5:4e:37:a3:5a:62:a4:
1e:13:79:35:ac:3f:5a:5d:cb:f2:a3:63:e5:9e:ac:97:f2:5c:
9d:53:2c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:51 2025 by rpki-client