Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
File: b_rHiuobz0OKYe-RUCRI9glkHS0.mft (raw, json)
Hash identifier: 4RhX3Mk8xfNtk4J1v1Erux1xjXtLeEDcaS4Yvvy21g0=
Subject key identifier: A8:40:6F:88:76:16:B5:FA:4F:00:3F:BC:F7:48:6D:6D:CA:CA:03:94
Authority key identifier: 6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
Certificate issuer: /CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Certificate serial: 019A7301C4FFD310311D08B98BB02B7D5B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
Manifest number: 13B1
Signing time: Tue 11 Nov 2025 13:01:26 +0000
Manifest this update: Tue 11 Nov 2025 13:01:26 +0000
Manifest next update: Wed 12 Nov 2025 13:01:26 +0000
Files and hashes: 1: b_rHiuobz0OKYe-RUCRI9glkHS0.crl (hash: e8rNrxADEvIKRvyrIKOCxC5z1rh0vuoNrnu4jtdhcpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:c4:ff:d3:10:31:1d:08:b9:8b:b0:2b:7d:5b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Validity
Not Before: Nov 11 13:01:26 2025 GMT
Not After : Nov 12 13:01:26 2025 GMT
Subject: CN=a8406f887616b5fa4f003fbcf7486d6dcaca0394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:63:bc:6d:21:31:c8:ef:f5:c9:c7:aa:d3:
90:78:55:68:18:db:c1:89:0f:29:94:fc:af:05:88:
85:f5:9b:be:95:a8:2a:2b:da:89:57:6e:7f:25:71:
c9:62:16:2d:89:24:2b:1d:3e:c1:c0:c0:dd:e2:4d:
3e:08:ac:41:ac:45:9c:f6:fc:08:01:47:7b:eb:99:
f8:5b:b3:48:6a:9c:99:bc:a7:fb:25:80:92:3f:be:
20:80:45:b6:3e:3b:ec:80:ed:c0:b4:59:65:21:e4:
58:d5:1a:ac:47:cd:89:58:36:e4:52:55:13:3f:44:
db:2f:db:a8:53:ef:3c:49:71:11:3a:88:9c:d8:6a:
ee:b7:72:c4:f2:93:2e:f9:44:40:a3:c7:b7:bb:12:
7a:0f:cc:fa:e7:c9:29:8f:43:1f:2e:7c:39:32:55:
a0:54:86:a4:6d:59:e5:c2:1c:b2:72:b9:bf:48:35:
99:de:ae:68:0b:f1:4d:03:64:f8:3f:c6:e4:0c:c6:
ff:ab:52:46:b6:0b:d5:27:73:d3:14:b3:66:dd:ed:
51:b8:c5:ee:7f:20:69:72:10:20:d6:85:e4:77:d2:
5c:a9:7f:f6:a4:53:c4:a6:2f:65:36:2b:4d:fd:d8:
71:9a:3c:11:07:32:57:7f:13:0a:78:4e:b8:b0:34:
82:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:40:6F:88:76:16:B5:FA:4F:00:3F:BC:F7:48:6D:6D:CA:CA:03:94
X509v3 Authority Key Identifier:
keyid:6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f1:59:2d:61:49:9b:c2:55:4c:0e:6f:f9:09:47:31:f6:5c:
53:b6:2f:aa:f2:3d:c7:1c:38:40:68:31:26:1e:1e:e4:76:78:
11:56:f8:a1:03:5d:28:62:d0:76:67:bf:4b:75:31:fd:0f:a6:
43:53:35:ca:29:dd:e3:75:63:6b:e2:21:ad:93:d7:0d:40:f4:
3a:56:79:7e:9d:8e:a3:5b:4a:78:91:3b:0d:b5:03:79:6b:8b:
79:b7:c2:59:54:af:b4:2f:69:c5:65:0f:f8:64:b8:23:a2:bf:
02:bc:08:ae:94:32:22:d7:2c:70:4a:13:32:a8:a0:5d:69:ca:
5a:ed:44:bc:80:75:fb:a4:ca:b2:01:cb:54:19:61:5d:fa:56:
b0:60:24:d9:5e:f8:5f:28:aa:e8:4e:e2:58:c9:44:af:d5:0b:
94:52:0f:31:0e:07:e4:0e:20:9e:a6:3d:1c:59:3a:18:ef:d8:
f6:df:7d:29:ef:9c:bf:38:48:7e:f6:b6:92:22:ff:4b:25:d1:
f0:99:b9:21:2a:fb:79:fe:0c:34:4d:c2:0b:65:fa:4a:f8:a2:
ad:16:48:4c:60:3d:97:e1:64:87:b3:7a:b8:70:bf:bc:d3:87:
ec:4c:c8:89:10:2b:3f:f6:96:54:e9:50:66:df:42:17:02:0e:
cd:e6:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:05 2025 by rpki-client