Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: k+Cv5DPqGP1JVEtXmYTU4NQBxuuq7LPf9ql3ZTNmOWY=
Subject key identifier: CF:46:63:17:84:0B:23:13:3C:2D:8E:79:73:63:29:7E:92:B6:E6:1F
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 019A04111CB6B5971B3A018DC688F86E5134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 0A28
Signing time: Tue 21 Oct 2025 00:00:21 +0000
Manifest this update: Tue 21 Oct 2025 00:00:21 +0000
Manifest next update: Wed 22 Oct 2025 00:00:21 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: 9fAbGCdljwacHAdSMdTZ4X0aJsVXisc2c8tLrvwzWj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:1c:b6:b5:97:1b:3a:01:8d:c6:88:f8:6e:51:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Oct 21 00:00:21 2025 GMT
Not After : Oct 22 00:00:21 2025 GMT
Subject: CN=cf466317840b23133c2d8e797363297e92b6e61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:24:3e:67:a0:b0:98:aa:27:c6:c5:73:fe:
e5:eb:8e:04:29:5d:42:db:0c:7e:a6:bd:2b:bb:d5:
20:ff:e0:9e:36:0d:1f:80:d4:11:5e:82:c0:8a:2b:
a1:fc:3f:1b:e7:c8:1a:a4:da:23:b5:cf:05:af:57:
b8:a4:f3:d2:36:09:20:3b:63:93:b8:e1:93:65:3b:
ef:3b:6e:02:9a:b4:ef:c1:1f:74:85:4e:7c:d0:94:
e4:43:7d:b1:eb:ef:9c:20:2c:19:e5:44:d4:03:0b:
d6:a5:16:ef:b3:75:45:77:bf:3e:1e:02:4a:e4:b1:
56:d6:24:79:9c:1f:ac:13:59:0b:cf:84:dd:26:6f:
e1:e0:cd:50:1d:1d:70:9a:2d:ce:b8:ce:f7:53:93:
30:e4:49:f4:c8:ec:76:5a:54:c2:65:5d:15:a0:dc:
c5:20:d9:53:f2:dc:ec:bf:be:a2:f5:84:ee:3d:43:
5b:f3:bc:6c:40:be:60:ae:50:b0:68:d3:ce:c9:98:
3d:45:98:fd:e4:69:dd:4a:a2:46:6a:c1:3a:87:17:
2a:17:ee:70:4b:1b:f8:5f:7b:43:09:27:ae:4d:bd:
a1:57:f0:7d:27:99:a9:2a:62:78:4e:73:0e:db:64:
98:32:dd:d5:61:e4:81:93:53:3e:b0:4b:6e:41:2e:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:46:63:17:84:0B:23:13:3C:2D:8E:79:73:63:29:7E:92:B6:E6:1F
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:af:80:f4:49:32:2f:b5:48:33:1c:e2:ac:13:c6:51:8c:32:
af:02:a2:93:13:c9:53:96:98:0e:df:67:a5:5b:bd:4a:df:e3:
a9:72:95:1a:a0:6f:00:3c:8e:07:46:d9:87:78:33:31:57:64:
2c:39:fc:7c:a9:3b:7d:4c:0c:f7:49:c4:d7:d7:a3:33:da:c5:
f9:7e:37:de:91:48:63:6a:d7:dd:70:e1:7f:e6:85:6a:45:8a:
b8:ba:4f:82:77:45:c7:8d:ec:a1:d9:ce:84:c4:9e:63:b8:be:
e9:49:f5:21:e8:9e:73:2e:38:75:4d:7d:a2:43:9c:92:65:c0:
c7:64:06:1e:cc:1d:9f:9f:c1:64:a7:41:4a:c3:8e:a3:b0:6d:
d1:2a:00:6a:a8:4b:c8:24:63:e2:6a:5f:3d:1e:53:d5:ff:94:
38:dd:39:30:86:7e:31:70:d4:3d:22:e5:43:b4:56:48:c8:1f:
3c:47:18:e6:e8:0a:5c:03:27:a1:a8:0e:b6:17:c5:02:f0:48:
30:f4:06:c9:03:76:a4:dd:c2:24:cd:f9:a2:00:8b:99:5c:a5:
b2:0d:a5:48:ba:af:e1:eb:a1:79:f3:80:bd:9c:b8:18:a5:e7:
10:ed:6f:3b:1d:a2:43:94:fe:15:dd:95:81:b3:dc:d7:58:85:
73:27:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:18 2025 by rpki-client