Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
File: hebJukv_0bW6FFCrXdaderdAEGA.mft (raw, json)
Hash identifier: AMNnNyJOsu2huhIRaB1HkcwiRldQ1MDHby0l3zEpas4=
Subject key identifier: AB:86:97:2F:29:B2:FE:93:5A:52:8E:47:E3:75:6A:04:51:5E:83:F1
Authority key identifier: 85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
Certificate issuer: /CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Certificate serial: 019A722588FB84806AD7F9DD93B8408763BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
Manifest number: 99
Signing time: Tue 11 Nov 2025 09:00:53 +0000
Manifest this update: Tue 11 Nov 2025 09:00:53 +0000
Manifest next update: Wed 12 Nov 2025 09:00:53 +0000
Files and hashes: 1: hebJukv_0bW6FFCrXdaderdAEGA.crl (hash: QER8T9b2A4xSW5y+BwoX3i9gMlPu37sJfnYwclk4Zhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:88:fb:84:80:6a:d7:f9:dd:93:b8:40:87:63:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Validity
Not Before: Nov 11 09:00:53 2025 GMT
Not After : Nov 12 09:00:53 2025 GMT
Subject: CN=ab86972f29b2fe935a528e47e3756a04515e83f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:ef:82:92:11:0b:e2:81:3e:f0:6e:9d:b0:
29:be:10:db:20:05:c8:96:88:cf:d1:3a:48:9a:4b:
1f:50:05:4b:3a:70:68:f1:b4:4d:a5:a4:99:1d:d1:
b1:66:65:44:ea:44:db:dd:3c:5f:b0:9b:9d:d3:7e:
08:ed:0d:6e:a0:42:d0:3d:1d:85:5f:de:37:c5:14:
59:a4:c5:2f:d2:75:37:40:bc:d6:df:31:44:59:b3:
8c:ec:78:18:5a:99:ca:d5:09:40:b2:fe:66:40:37:
36:90:ec:0e:3e:72:c8:89:c5:e9:ab:6f:a7:63:03:
47:20:ad:4c:3b:70:26:53:19:5c:d0:9c:fc:0c:4f:
99:d2:4a:5e:fe:37:3a:46:dd:1a:56:e7:ed:65:58:
08:65:11:53:0f:7f:95:bd:95:12:66:9d:9e:bb:d4:
d3:8a:60:e6:29:6e:c0:ea:22:95:f8:6e:e1:83:90:
55:d8:fc:d1:2c:55:60:51:bc:ba:09:3a:b0:00:ed:
c8:de:80:f5:29:81:fc:53:97:92:59:49:23:c6:36:
81:2c:15:91:c1:d2:da:7f:9f:e4:1e:73:65:b1:cb:
05:cd:00:dd:f2:61:21:df:63:65:5d:d2:cb:90:c2:
fb:b1:ba:16:b5:f3:1a:8f:84:dd:de:9e:15:4a:21:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:86:97:2F:29:B2:FE:93:5A:52:8E:47:E3:75:6A:04:51:5E:83:F1
X509v3 Authority Key Identifier:
keyid:85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:03:e7:e0:d5:25:28:93:f8:14:e4:b3:44:89:34:8e:72:07:
b1:5f:c6:1e:ea:a5:f4:85:c0:ef:a7:82:96:98:95:7f:93:a9:
0d:6a:55:7f:12:c2:51:81:f3:44:11:48:9c:96:2a:09:07:7e:
92:44:dd:be:b9:78:2a:64:13:7b:61:12:b3:d8:e3:b3:9a:b2:
4c:ab:10:73:df:3e:5b:b9:f0:45:f3:40:b2:09:f6:dd:f6:e7:
6a:9c:f8:3e:80:dd:61:fe:c0:96:0d:76:88:12:67:e5:bb:0a:
85:ae:7d:04:9b:6c:83:73:ed:c6:ae:f4:b5:35:3d:cd:43:32:
cd:70:20:3b:f1:44:59:ea:2a:1a:c2:d7:b0:cf:7d:6a:8e:18:
15:fc:c5:0f:48:38:8d:40:28:aa:d0:85:2b:99:3a:09:ef:6c:
b8:bf:68:28:3d:25:c3:9c:d6:29:27:eb:35:e9:e6:56:97:8a:
11:38:31:41:e2:cd:b4:fb:1f:11:58:5a:a5:7b:eb:58:8f:f8:
77:dc:89:d4:e6:d8:9a:f4:48:23:59:79:15:cd:24:35:e1:f0:
0d:ba:24:2e:14:e1:e7:64:7c:72:72:b5:9f:de:0b:0b:0b:5f:
aa:c4:36:25:54:f4:9c:be:34:58:4b:c9:fc:ed:17:8b:53:7e:
b9:29:fe:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:40 2025 by rpki-client