Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: kUQ3Y4QUyh1DtzGJRZxsxK8CPiGNp0LDLT5XSocaEPM=
Subject key identifier: 0E:C8:B2:D3:E4:0B:CA:CB:F2:06:E7:6B:CA:8E:96:4E:A1:B4:5A:E5
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 019A73A5F111B2A58CC2B6114E46BCDF1B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 085C
Signing time: Tue 11 Nov 2025 16:00:46 +0000
Manifest this update: Tue 11 Nov 2025 16:00:46 +0000
Manifest next update: Wed 12 Nov 2025 16:00:46 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: Xxdimpnqc2Fps/4mTQsaSrQjJEP3yJ33GzD+uI+ni/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a5:f1:11:b2:a5:8c:c2:b6:11:4e:46:bc:df:1b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Nov 11 16:00:46 2025 GMT
Not After : Nov 12 16:00:46 2025 GMT
Subject: CN=0ec8b2d3e40bcacbf206e76bca8e964ea1b45ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:94:26:ba:2a:9d:c5:a1:34:a8:44:39:66:
38:0c:30:17:d4:0c:c9:b2:0d:2c:b7:c8:13:29:78:
99:0a:fb:75:6f:65:27:1b:2d:5d:8f:a1:51:37:f1:
2f:95:91:40:e0:15:7e:29:76:22:13:25:71:b4:83:
4c:db:56:25:4b:ff:e3:57:b0:df:ea:58:37:90:39:
9e:2e:ba:96:10:b9:68:ed:a6:dd:d8:52:c8:79:ad:
2c:37:fb:64:c2:e4:2e:02:3a:f3:95:e4:f6:6a:4e:
7e:53:1d:34:1f:96:e8:d7:1c:c3:7e:d6:61:3f:ac:
94:31:19:cf:ea:5e:e7:ff:c9:52:ed:06:96:22:29:
d6:b3:33:f3:79:92:c7:46:25:b4:4c:d0:ed:fa:a7:
58:0c:c6:e2:03:44:f0:e0:d8:81:7f:98:57:7d:df:
d3:62:02:c9:d4:2b:59:f6:e4:38:f1:c1:c7:2e:17:
c2:83:78:6d:49:1e:4d:36:7c:2c:d9:2c:6c:df:5e:
bf:7e:cf:84:60:06:c7:64:7f:b8:e4:58:9c:92:dd:
06:00:46:4b:c2:30:af:16:a9:35:4b:7a:be:64:cc:
38:95:c1:f6:b2:86:73:d3:9f:0e:ab:f2:fd:ce:bb:
14:a6:eb:f1:7d:90:7d:9c:ad:be:19:88:14:d3:f5:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C8:B2:D3:E4:0B:CA:CB:F2:06:E7:6B:CA:8E:96:4E:A1:B4:5A:E5
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3d:68:37:35:9e:d7:b7:0d:74:52:4e:50:98:d8:2c:a7:db:
e4:26:54:26:bf:9e:c0:b3:13:a8:2d:8d:f0:69:ee:8e:72:4d:
ea:53:59:66:a2:06:ee:4b:96:af:29:0d:c1:43:87:f6:8d:ac:
4c:7a:6b:d9:6e:dd:71:ad:66:da:e3:21:6c:b7:21:b8:99:75:
d4:e1:a4:89:9e:04:27:1b:0f:67:73:3d:bb:f6:78:17:38:33:
eb:aa:2d:8a:14:83:18:c2:7b:f7:f2:b2:7b:19:ff:94:2a:0b:
dd:f9:a6:a2:0d:aa:3a:c9:9b:d2:06:e1:d3:8a:58:bd:8c:5a:
55:cd:7c:8b:47:c1:7b:d0:d5:22:0a:1c:7c:f3:64:f6:24:6f:
78:ac:f1:23:86:75:9b:f9:cc:d8:88:44:e9:a2:18:fd:d8:89:
2b:9e:58:b7:05:9c:8d:a1:e3:8b:2c:ef:89:90:c6:b7:2e:e0:
98:f9:ba:2e:f3:a6:2d:c3:8e:19:3c:70:26:ce:56:39:bc:06:
14:97:ec:85:98:05:d8:c4:e3:1e:1d:94:88:3c:e8:97:50:9a:
cb:77:80:26:f5:d9:92:82:75:22:a5:b7:c2:4e:80:6b:bc:34:
ec:bf:1a:bd:e5:c6:c9:34:94:3e:c0:d6:61:d9:10:96:34:1f:
02:89:10:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:33:20 2025 by rpki-client