Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json)
Hash identifier: iBhkBAlQOcMZhhFHDHWNLlE5sq/uph4PhzWLQqfw20w=
Subject key identifier: 3D:D0:C5:7C:03:7F:37:17:80:FB:F3:E9:B6:D4:47:0D:4A:43:EF:09
Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Certificate serial: 0199FE7DE94F9B036BD8EAF4AEBF1BE2E814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
Manifest number: 05F6
Signing time: Sun 19 Oct 2025 22:01:28 +0000
Manifest this update: Sun 19 Oct 2025 22:01:28 +0000
Manifest next update: Mon 20 Oct 2025 22:01:28 +0000
Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: Ox9lS0bU0hGfuHsIjLncRZGXeolEZgD6Sd/zzfYuk2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e9:4f:9b:03:6b:d8:ea:f4:ae:bf:1b:e2:e8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Validity
Not Before: Oct 19 22:01:28 2025 GMT
Not After : Oct 20 22:01:28 2025 GMT
Subject: CN=3dd0c57c037f371780fbf3e9b6d4470d4a43ef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:a8:60:f5:22:1d:7c:69:49:de:d2:1f:0f:
a0:ae:00:b3:b3:55:77:bb:9a:a1:1d:4c:7c:00:d9:
c9:52:47:74:e7:9a:a6:e3:18:2a:a2:ad:b0:06:ce:
4f:79:0f:82:41:bd:fe:14:4d:8c:7c:05:32:11:a5:
f0:a2:46:37:e9:6a:79:38:61:db:a5:10:7c:30:f2:
81:6f:7d:c5:25:8e:d9:dc:a4:9b:d7:eb:6c:ea:ec:
bc:6e:8e:41:6b:3f:9a:30:78:45:9b:8d:74:93:0a:
00:52:08:c8:90:b9:74:eb:0d:83:9e:ba:2f:22:18:
82:6a:08:1a:12:7a:c8:2b:0c:1f:e1:a9:1d:67:6f:
f4:5f:91:92:a4:33:72:22:1f:b3:16:cd:f2:75:a1:
ae:2c:05:38:54:dc:9b:f5:d9:ae:b3:4e:6b:c4:d2:
0f:d5:fc:07:83:71:66:c4:d7:e8:47:8c:60:3a:dd:
9a:99:37:4d:b9:13:ca:ae:0b:01:c8:ab:3e:2c:2f:
09:44:06:ec:86:d7:03:81:42:6e:51:3c:fb:fa:e5:
49:c5:90:39:d7:76:4d:88:08:94:68:ec:38:b4:83:
ad:96:84:b2:16:f5:58:ad:fe:29:04:53:64:cb:a6:
23:86:88:a8:8a:1e:09:84:ae:6d:fc:d5:14:d8:79:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D0:C5:7C:03:7F:37:17:80:FB:F3:E9:B6:D4:47:0D:4A:43:EF:09
X509v3 Authority Key Identifier:
keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:5a:aa:d6:e3:64:8c:63:8d:f1:eb:d5:a6:8f:8a:41:1a:20:
03:5d:5c:86:89:f0:3c:55:3a:f3:8d:68:8a:9b:56:1a:63:e8:
9f:34:52:db:f6:47:6a:dc:7e:22:c5:f4:05:ae:8a:cf:04:ca:
ad:24:46:ee:3e:a4:00:37:0e:e0:b1:65:5b:87:c4:c4:6b:16:
32:10:5b:68:4b:3c:a8:53:14:73:36:39:68:fb:2e:06:8d:cb:
a5:8a:a8:6b:f2:a5:ce:07:d6:76:dc:ce:bb:81:71:6b:91:fb:
42:1a:db:a7:70:3c:cc:0f:47:04:b8:6c:27:55:8a:4d:d5:ac:
6c:b9:87:7b:73:6b:b4:0e:55:83:cb:2f:62:b5:46:0b:42:e4:
9a:2f:fc:b2:91:0d:3f:bf:ef:0a:ab:92:b4:ba:c4:c7:64:fa:
76:e8:ea:e3:b0:40:57:6d:1e:b6:8b:41:81:ff:f8:ff:b4:b0:
82:cf:20:70:5e:3d:6b:02:42:d9:9b:5a:50:4c:b0:b0:8a:48:
66:a8:ed:1b:78:97:9a:9f:cb:03:26:7d:0b:f2:5f:89:5a:1e:
62:d2:87:8a:af:1b:d7:7b:df:39:23:00:95:b8:4b:73:ae:11:
83:fc:59:14:33:76:43:4a:9e:92:56:b6:eb:c1:9f:f9:ea:8e:
04:eb:21:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:52 2025 by rpki-client