Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
File: h3YEKrfwcZWY6znlPvkuCsz6T6M.mft (raw, json)
Hash identifier: HhwP1IjhOk0EfiEsa4+VdOHDrcNHiKS06r0Fv1tzsJ8=
Subject key identifier: 80:5B:EB:E5:62:47:9C:0A:89:96:BD:2B:42:71:6F:80:17:39:C2:5F
Authority key identifier: 87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
Certificate issuer: /CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Certificate serial: 0199FFC8506B77FFEA3AD701944717BA8B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
Manifest number: 0AE5
Signing time: Mon 20 Oct 2025 04:02:21 +0000
Manifest this update: Mon 20 Oct 2025 04:02:21 +0000
Manifest next update: Tue 21 Oct 2025 04:02:21 +0000
Files and hashes: 1: h3YEKrfwcZWY6znlPvkuCsz6T6M.crl (hash: aGKbplf440YQO5PGPUKSXVnTUg8LtztH5jjRCbggqJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:50:6b:77:ff:ea:3a:d7:01:94:47:17:ba:8b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Validity
Not Before: Oct 20 04:02:21 2025 GMT
Not After : Oct 21 04:02:21 2025 GMT
Subject: CN=805bebe562479c0a8996bd2b42716f801739c25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:6a:4f:6a:1f:f4:b7:63:98:58:3e:07:1e:
0c:55:59:99:42:be:fb:f7:22:4d:a0:e5:8b:09:ca:
ee:4a:ea:37:2a:f2:d3:bb:ad:5b:1b:22:e8:b8:b3:
8b:7e:d3:95:ef:38:a3:83:77:22:6e:88:88:37:a8:
9d:f2:61:16:3a:9e:09:72:27:ad:83:e5:de:7a:36:
72:ca:d5:18:4e:58:73:3a:00:c1:9b:61:f4:9a:ee:
6d:fa:e6:4e:2b:6b:3e:49:76:5d:9c:9e:22:e1:c1:
96:8a:3d:42:99:2c:6b:24:ed:e7:74:14:f5:bb:74:
f1:ee:3b:fa:ed:35:06:a0:e7:f2:f4:aa:d4:1c:14:
1b:a2:f3:74:83:e3:8f:5d:28:97:23:d3:21:35:23:
1c:5c:a1:e9:8e:ff:14:78:2f:9a:1e:a0:b5:5e:a6:
d7:89:b3:71:f5:be:cc:91:36:72:7b:d3:0e:5e:dc:
9f:e9:e1:d5:fe:d9:74:04:9a:b7:f6:2e:d9:3f:8c:
52:88:43:7b:6c:03:f3:fa:17:ad:77:8e:5c:b1:e6:
6f:93:dc:54:57:2e:9f:40:49:85:7c:db:62:1d:3d:
4f:d2:f9:0c:80:26:8d:ce:f0:c2:10:4f:1d:9e:53:
1a:55:fb:0a:7d:cf:48:48:35:eb:a9:22:4d:5e:e5:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5B:EB:E5:62:47:9C:0A:89:96:BD:2B:42:71:6F:80:17:39:C2:5F
X509v3 Authority Key Identifier:
keyid:87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8f:52:8d:3c:1c:ab:0b:27:d0:fa:15:b5:3e:99:1c:c1:54:
ae:57:35:06:b3:19:7b:95:09:76:00:79:d3:2f:e5:1c:fc:c2:
95:b0:27:06:68:e6:3f:e6:c3:38:76:c6:7d:ec:7c:c1:e5:4e:
81:41:fc:23:64:9d:00:85:bf:97:c0:2a:70:96:c9:89:a3:74:
42:56:40:4f:40:75:87:0c:8c:06:4e:bf:a4:67:5a:22:24:bb:
d3:3a:a8:07:8c:ac:c9:a4:4f:a7:9b:4d:ec:37:17:41:bb:45:
88:83:88:9b:3a:8c:cb:c7:d8:85:56:fb:b3:6c:9b:51:39:b0:
89:67:0a:ab:e2:7d:ac:8e:e2:2a:72:71:ba:bd:3d:3f:fe:77:
64:cb:c1:66:b3:3f:db:c4:0d:c6:ed:22:e6:e1:35:6a:79:f8:
3d:fc:3a:06:23:c3:67:70:32:03:71:dd:d9:56:6d:f4:39:a1:
d8:70:95:06:49:f9:00:7a:5a:e8:03:0a:b6:2e:92:5c:52:f1:
8d:9d:f2:b3:78:83:86:4e:cf:ee:f9:08:c7:df:a2:c9:b2:53:
bb:64:2e:14:ba:6c:00:7e:3c:91:f8:13:24:c0:0c:6e:28:4b:
27:eb:06:8e:82:61:a6:e0:8e:e5:97:0a:d7:0f:41:26:02:e5:
7b:43:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:29:09 2025 by rpki-client