Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: tBl1vc4eQwq/i1RiEMMPPNkzmr7+4dGQioYEAhSxQOY=
Subject key identifier: 7E:1D:92:68:C5:76:89:8C:8F:5B:BD:99:8A:40:DF:25:E2:FE:02:6D
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 0199FBEB8B8332D1EDAF0ABEA2F791FEB8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: jesSdyBA5FAdg+TdBrIgsOi3Klnj7V5dkq1xTGIqQGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8b:83:32:d1:ed:af:0a:be:a2:f7:91:fe:b8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=7e1d9268c576898c8f5bbd998a40df25e2fe026d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:e4:3c:de:60:01:9f:ea:21:80:26:91:84:
a9:b6:5f:f9:17:9a:28:86:6e:88:05:84:ee:b2:e6:
78:d1:af:52:b8:aa:af:1a:a4:4c:0e:e1:b8:72:c7:
c1:fe:ee:08:50:a3:62:6d:d6:ae:da:5c:56:0d:04:
4e:2b:d0:e6:d6:3d:fc:ab:6b:64:8e:e0:85:8c:c7:
5a:1b:e6:06:17:87:71:fd:bd:e8:32:90:6f:da:6a:
86:87:24:83:fb:75:0c:43:44:40:7f:6a:8c:13:0d:
d8:42:a5:e9:37:73:97:34:e5:f2:7c:3b:0d:1a:b1:
90:8f:76:46:0c:77:c5:e4:93:73:00:fb:bb:fc:74:
fd:35:07:08:18:35:31:dc:b5:5a:10:94:23:09:5c:
27:d5:e1:14:2a:7d:1c:ce:1d:1a:45:41:88:61:7e:
a9:f4:2c:90:7c:dc:e2:31:fe:04:f7:d3:f4:aa:46:
de:ff:be:55:fc:31:90:1b:fa:3a:e3:fc:cd:4f:05:
51:88:54:d7:02:58:ae:4b:5a:f5:3b:6b:b9:e1:d3:
d0:fb:0e:40:2c:99:0d:0c:61:36:e5:88:55:d2:2c:
00:93:0c:70:cd:88:87:f6:e7:32:ae:09:ad:7d:8d:
61:13:fa:1e:3d:dc:ab:f7:85:79:4d:ef:b3:9b:be:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1D:92:68:C5:76:89:8C:8F:5B:BD:99:8A:40:DF:25:E2:FE:02:6D
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:11:17:c2:dd:05:24:ec:7d:57:35:b2:53:fb:d2:b3:c9:a1:
f3:cf:f7:38:ed:4d:0b:10:e1:ab:2f:dc:f9:42:ef:8a:a8:c1:
ad:ff:b7:8a:df:75:ec:02:4d:97:37:5e:d4:f9:3a:a0:34:e5:
55:c9:e5:91:7b:b6:a0:d8:1d:4a:ad:0a:80:b0:a7:f8:3a:b5:
4c:e6:81:0c:c6:6b:56:52:92:c5:1c:77:be:3f:9c:f1:a0:89:
fc:69:ac:55:d4:c1:3a:e4:f3:70:67:ed:e5:bd:6c:cb:aa:72:
d1:39:9a:b4:5c:73:04:41:16:bf:c6:9c:51:eb:e2:f8:3d:ac:
5e:13:32:82:65:9e:2c:e6:70:79:84:b1:84:6c:33:18:55:4a:
5b:c8:8d:6f:62:30:06:5d:8e:e4:8a:59:4f:c0:5e:27:35:eb:
49:ea:5b:14:37:ea:65:1e:84:18:cf:4d:cd:bb:7e:5a:f8:c0:
29:e0:24:a3:20:3b:81:5c:08:8d:08:d4:38:7f:57:d8:d6:c4:
cf:62:80:4f:bf:1e:f6:8d:7a:62:5d:f0:ba:f3:bc:86:81:fa:
96:5a:98:71:b3:78:9f:80:6c:7b:7e:3c:32:e8:b1:99:92:14:
3f:24:3a:2f:9d:db:58:3d:9a:be:c2:fe:19:ea:61:a0:61:a1:
c4:0c:49:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:29 2025 by rpki-client