Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: IglfIwjszYFbqz2Ixik+8BU9IQLexHhLLRDSvzNTtMU=
Subject key identifier: 42:9B:C3:EE:39:B7:96:D2:55:82:99:50:31:D8:D1:D0:BA:49:93:A6
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 0199FFC87B6F0A5688D99BD7BF7F3A793597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 04:02:32 +0000
Manifest this update: Mon 20 Oct 2025 04:02:32 +0000
Manifest next update: Tue 21 Oct 2025 04:02:32 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: unzat9EWqDyv35XZC++U5pqiImvCPPQkn6alytejKBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:7b:6f:0a:56:88:d9:9b:d7:bf:7f:3a:79:35:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Oct 20 04:02:32 2025 GMT
Not After : Oct 21 04:02:32 2025 GMT
Subject: CN=429bc3ee39b796d25582995031d8d1d0ba4993a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:6b:a8:b4:5b:e4:4e:cd:dc:58:cf:18:fc:
6f:a2:f0:94:f7:9e:09:54:e2:94:cf:80:c4:e5:5b:
36:10:52:b2:ca:37:0c:fd:9b:64:8c:88:0b:2b:03:
18:d3:aa:de:10:2b:0c:33:99:bb:91:31:5e:34:77:
21:27:c3:6c:dd:c0:94:d6:c3:2f:c9:f1:b8:ef:1b:
e0:0f:12:2b:fe:5a:fa:29:03:eb:d7:0e:92:94:65:
80:a0:57:f5:c4:a8:f6:6f:30:10:82:51:e6:1d:a1:
c0:79:27:f0:e6:54:53:04:34:c3:92:0c:b0:2a:91:
2b:9e:03:1c:b0:fa:cb:a0:9e:c4:8f:d7:1c:2f:d9:
48:d2:61:26:bd:61:f2:45:a9:05:dc:ab:36:77:d5:
5d:9c:80:19:6d:c5:24:d0:0b:02:38:39:42:9f:14:
14:6a:13:9e:63:c3:03:99:b6:92:8a:77:ed:cd:64:
ee:26:88:aa:ba:61:fc:82:b4:ec:bd:c9:d5:40:49:
87:7f:eb:bd:0b:91:eb:fd:09:8f:9a:6f:99:4e:aa:
9b:28:53:c1:cb:51:28:63:50:36:67:ac:34:05:ad:
8a:2e:cf:33:10:7a:b8:d3:c0:41:a1:70:ba:2a:e9:
ea:ec:c0:c0:ba:ab:1f:a3:eb:14:84:44:dd:6a:51:
ee:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:C3:EE:39:B7:96:D2:55:82:99:50:31:D8:D1:D0:BA:49:93:A6
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:8f:9a:31:f8:aa:6d:43:f0:38:0e:da:50:86:b5:a7:26:0d:
d6:10:ab:3f:95:58:00:b1:f1:16:21:2b:e9:cc:4a:74:1c:f1:
7c:57:a5:ce:5f:8a:d0:10:24:da:72:7e:5c:9e:0f:77:2a:35:
71:4c:59:3e:7e:a2:90:11:a3:29:97:c8:2e:3c:cf:4c:db:44:
5b:0b:da:8b:8f:be:33:f6:07:9b:30:b8:f0:fb:8c:02:a0:64:
5d:85:d6:57:06:0f:51:77:22:7d:75:fd:62:36:c7:6e:ad:fc:
83:de:66:8b:64:75:9a:40:50:fc:fb:59:ec:bc:51:85:6b:ba:
92:aa:3e:77:2d:b4:f5:fb:98:f4:d8:1e:50:ad:98:c7:d6:a2:
8e:10:7a:91:05:e0:70:98:15:1a:16:dd:bb:a4:4c:71:f6:49:
10:b1:f1:01:28:94:0d:71:0e:b9:87:38:d4:b4:1b:92:1d:23:
6a:e1:e5:b4:3a:96:7b:44:56:6e:45:7c:89:2c:bd:2d:87:90:
89:9f:82:47:48:98:14:b3:97:0c:51:57:8f:bc:9d:89:93:12:
fe:b7:30:88:20:05:b3:49:57:29:e5:b1:bb:8c:bd:1b:d5:27:
56:33:83:95:f9:3f:fc:f7:61:c9:be:27:ef:c6:21:5f:d4:d4:
37:a7:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:16 2025 by rpki-client