Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.mft
File: HR3nlQkjqWQxniwzg0m9Emh75K4.mft (raw, json)
Hash identifier: u7/Lx+jMZbSjZrqD6Lw0FsGWT4gOslDmZJu3eSpUMUk=
Subject key identifier: 9F:B8:4E:7E:66:23:AC:A3:14:C6:C7:90:0D:F3:7B:B4:BD:9D:E8:A2
Authority key identifier: 1D:1D:E7:95:09:23:A9:64:31:9E:2C:33:83:49:BD:12:68:7B:E4:AE
Certificate issuer: /CN=1d1de7950923a964319e2c338349bd12687be4ae
Certificate serial: 019A71B88ACB01ECBAF0DA769F17C9208C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR3nlQkjqWQxniwzg0m9Emh75K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.mft
Manifest number: 0B95
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: HR3nlQkjqWQxniwzg0m9Emh75K4.crl (hash: 3n6/zt2C+RXAbc85hyoQ1dvEIUu8sEuwglPnnH074Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR3nlQkjqWQxniwzg0m9Emh75K4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8a:cb:01:ec:ba:f0:da:76:9f:17:c9:20:8c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1de7950923a964319e2c338349bd12687be4ae
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=9fb84e7e6623aca314c6c7900df37bb4bd9de8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:54:eb:a9:6e:b5:f6:73:e6:39:78:e6:48:
77:f6:82:d5:47:df:2d:29:33:bf:f5:26:0c:fd:ac:
d0:8f:9c:eb:45:e6:3a:72:47:31:76:73:30:fe:39:
12:07:02:06:8b:32:38:07:df:d9:47:73:22:9a:70:
05:be:62:66:85:2d:af:5b:83:24:4d:4b:58:03:99:
99:7e:b4:50:71:3b:2c:7c:b0:b7:c7:fa:3d:37:b1:
75:02:b1:11:3c:04:c0:12:89:a0:ca:e1:f2:7b:6d:
17:f2:f4:77:6c:98:f4:7f:c0:07:df:ca:d9:da:67:
05:2d:e1:04:10:09:67:ee:d9:1a:db:69:53:87:39:
59:83:b4:80:3f:18:ce:01:8c:ac:5b:d3:ea:db:9a:
f2:fd:4c:da:9f:96:66:17:cc:a7:5d:b8:98:68:89:
79:d7:a3:2b:85:38:70:74:9e:30:2a:06:b8:97:d5:
d6:5c:95:57:a6:c3:c1:a3:9c:7c:b3:a5:2d:14:9f:
6f:04:e6:2f:80:0b:c4:75:06:a0:df:fa:73:26:90:
bf:5e:db:b1:2c:c7:2d:50:02:72:89:2a:e3:a7:ed:
5d:17:46:b4:11:1e:aa:fe:6e:84:69:23:9d:b5:a1:
8d:da:be:07:33:c7:59:ba:94:d7:aa:52:6c:bc:d6:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B8:4E:7E:66:23:AC:A3:14:C6:C7:90:0D:F3:7B:B4:BD:9D:E8:A2
X509v3 Authority Key Identifier:
keyid:1D:1D:E7:95:09:23:A9:64:31:9E:2C:33:83:49:BD:12:68:7B:E4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR3nlQkjqWQxniwzg0m9Emh75K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ff:91:75:38:be:98:e9:42:9a:0b:5f:09:71:54:2b:5e:df:
2c:ee:f2:00:63:d8:b3:92:5b:85:98:5f:07:fa:f6:18:e3:08:
e1:f5:5b:07:fc:5a:ca:31:bf:f2:fd:4b:b5:6d:66:c5:a1:71:
de:7d:e8:9b:3b:45:25:c6:29:5d:8b:65:ae:26:db:0b:aa:87:
56:51:d5:83:58:5e:bb:68:40:1c:c6:da:73:4e:cf:73:be:6f:
d1:68:f8:b6:16:14:60:c2:e9:7c:4e:5b:34:01:8f:48:16:5b:
86:81:f0:28:e6:b0:b1:59:99:4c:8c:b3:80:2b:ac:ca:4c:04:
37:36:3a:24:be:f1:0f:02:14:4f:42:3a:58:df:94:a8:5c:1e:
78:f8:77:d1:0d:5d:52:f6:29:b6:15:de:52:69:25:be:2c:0b:
73:e2:49:ae:43:ea:dd:1d:59:8f:8b:86:db:fc:3c:95:4b:00:
72:20:81:a2:fe:bc:60:0b:27:8d:85:95:47:32:33:d6:e7:f5:
37:a5:47:00:a3:c0:a2:c7:34:10:b1:a3:9c:fa:bb:3d:17:79:
1a:3a:35:9a:b7:fc:e9:28:63:f0:c2:75:29:d3:4c:34:53:24:
39:be:66:05:ff:7d:bc:70:67:52:b7:60:08:62:37:68:c0:92:
4a:f4:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:35 2025 by rpki-client