Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
File: a_HqpcMxvs8ydwGi69zxobtfBww.mft (raw, json)
Hash identifier: QmuWZ60/Sm8dtkFgnNqviZathuQ64F6PiQU5Oauq0b8=
Subject key identifier: 53:0B:C3:7E:4A:78:6B:35:F1:52:33:DE:D2:5C:4D:4A:BD:21:78:D3
Authority key identifier: 6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
Certificate issuer: /CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Certificate serial: 019A7301156CCF172D3B6BDFBDEE985F1977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
Manifest number: 0DB6
Signing time: Tue 11 Nov 2025 13:00:42 +0000
Manifest this update: Tue 11 Nov 2025 13:00:42 +0000
Manifest next update: Wed 12 Nov 2025 13:00:42 +0000
Files and hashes: 1: a_HqpcMxvs8ydwGi69zxobtfBww.crl (hash: 58+GSKcdnfNCm+9jjd6rtJ2xoz7P91rz75hlgmRrb6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:15:6c:cf:17:2d:3b:6b:df:bd:ee:98:5f:19:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Validity
Not Before: Nov 11 13:00:42 2025 GMT
Not After : Nov 12 13:00:42 2025 GMT
Subject: CN=530bc37e4a786b35f15233ded25c4d4abd2178d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:03:a5:08:2c:7d:aa:44:4b:84:55:68:18:
a2:d3:fe:78:de:a3:67:98:5a:c6:04:aa:09:6f:f9:
f0:62:90:e8:7a:c6:ac:78:7a:e9:d0:72:6b:89:2b:
f7:37:ad:9b:a8:7b:85:35:cc:85:59:35:fd:58:d5:
84:95:f0:66:9f:f9:7e:c9:f1:03:b8:01:5b:11:87:
dc:f5:c3:ac:4a:8c:e0:04:3a:38:d2:3b:e5:7c:cb:
25:dc:65:7b:e4:10:a2:3f:34:d9:53:0f:a4:40:38:
59:ee:84:2f:9b:13:0c:e3:51:84:96:d8:17:f4:0f:
1d:91:15:b0:b2:66:3f:67:4c:05:2f:37:43:32:4f:
e1:ce:b5:8b:3c:af:62:55:48:6f:00:71:e9:42:c5:
f8:fd:95:cd:fc:08:a2:57:cb:3d:3c:86:32:d3:87:
a4:f5:88:88:a9:69:90:33:89:50:ad:25:e7:33:75:
a8:68:9d:2f:b0:3f:c5:3b:c0:2f:5f:80:c5:7c:e1:
cf:64:6e:d4:91:79:31:2a:e5:67:b8:72:d9:24:a6:
8a:34:2b:a6:2e:0e:ad:ba:96:59:b4:47:12:bb:6a:
11:7d:21:19:d2:b7:0a:12:ca:58:cd:91:99:98:b1:
c0:b1:12:27:d2:56:2d:8f:8f:cd:a2:2b:1c:2f:d8:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0B:C3:7E:4A:78:6B:35:F1:52:33:DE:D2:5C:4D:4A:BD:21:78:D3
X509v3 Authority Key Identifier:
keyid:6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:57:67:62:8f:d0:90:de:26:00:73:50:7b:c4:ab:bc:07:1c:
26:6a:31:97:42:3c:d8:45:03:3b:39:4b:e0:51:85:a2:2e:e1:
52:11:25:3a:00:d1:b9:9c:a2:48:ae:18:a9:30:aa:e3:c8:9d:
d8:76:02:9f:eb:b6:e6:5f:66:5d:c8:61:7b:9f:a6:a5:43:92:
7b:fb:ec:b9:7b:52:84:25:da:c7:92:67:2e:20:37:7c:59:7f:
bb:6c:34:40:d8:7d:cd:e3:df:c3:52:0f:6c:39:38:8f:5a:43:
44:8e:52:1c:13:4a:0a:fc:40:70:7d:ec:c7:e6:bc:70:ca:ad:
98:03:95:3e:70:c2:08:2f:f5:4c:9f:c0:08:60:e1:e2:34:63:
b5:0b:95:0d:f8:68:d6:94:62:59:13:d7:89:66:8d:55:ce:7f:
eb:e9:98:d1:c5:45:74:16:d1:54:df:54:27:e5:ff:41:23:e7:
c4:45:0f:16:50:b1:1f:f4:70:62:9c:73:75:08:70:8d:69:01:
58:ec:2a:e1:f5:e8:c1:f0:35:a0:87:ba:84:8c:87:5d:84:bd:
3f:84:38:dc:56:4e:b5:24:03:07:72:e6:62:53:0b:90:30:46:
54:38:b4:49:0f:e8:9e:32:f2:e8:9a:5c:7c:63:1a:64:bc:3b:
1c:98:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:25 2025 by rpki-client