Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
File: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json)
Hash identifier: S4YEsoLKupShmXdz4bTqdePWIttFMRV3RIgT0Wg2Blk=
Subject key identifier: EF:AA:F1:CD:4C:11:3A:3B:B3:08:0D:3A:AD:4C:DE:C1:6A:CA:B4:15
Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
Certificate issuer: /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Certificate serial: 019A7225A1C75B01A624D33F76F9E555FAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
Manifest number: 15EE
Signing time: Tue 11 Nov 2025 09:01:00 +0000
Manifest this update: Tue 11 Nov 2025 09:01:00 +0000
Manifest next update: Wed 12 Nov 2025 09:01:00 +0000
Files and hashes: 1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: +WGkvAYppZL0ziVQyBp8WM6FydmkWGe7QiTV6wXRxUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a1:c7:5b:01:a6:24:d3:3f:76:f9:e5:55:fa:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Validity
Not Before: Nov 11 09:01:00 2025 GMT
Not After : Nov 12 09:01:00 2025 GMT
Subject: CN=efaaf1cd4c113a3bb3080d3aad4cdec16acab415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:0c:6b:b9:db:f0:eb:8f:9a:ec:3d:18:70:
12:38:ff:0c:f1:3b:b9:aa:56:db:e2:c0:20:1b:8d:
fc:b5:f8:3d:da:d0:d4:0c:2d:e6:95:2b:e5:0e:9b:
e4:4e:91:4f:5d:f2:d6:0f:0e:b0:ae:c5:12:d4:7c:
41:40:5f:c6:2e:16:db:a5:de:05:83:34:f5:ac:ea:
9f:91:6c:41:d6:d0:60:66:44:3a:d4:69:13:d7:3a:
4d:77:56:c4:e5:a5:24:da:b5:33:d2:be:ec:3d:07:
d8:9e:17:2b:8e:48:c9:d6:fa:47:ad:c6:7e:ad:c4:
78:12:7a:2d:6a:bc:de:7b:f4:de:0c:46:7e:61:a8:
da:e1:5c:cd:b2:e8:06:14:44:50:6a:4e:c3:df:92:
02:7e:09:9a:a2:03:c3:69:ae:4b:92:40:dc:70:a7:
9b:a6:bf:f8:f4:2d:d9:21:97:70:eb:a9:d9:aa:41:
05:89:db:f2:ac:03:0e:b0:fd:d9:8f:f8:5c:7b:a6:
20:4c:42:80:2c:8f:b0:96:df:88:58:dc:d9:71:ba:
95:04:a2:c3:00:93:43:1d:b1:04:65:ad:78:e4:5c:
8b:5b:75:f2:90:e5:34:11:2e:a6:db:86:bb:fd:de:
3e:f4:75:62:1c:57:8f:56:a8:8d:e2:a5:2f:31:94:
21:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AA:F1:CD:4C:11:3A:3B:B3:08:0D:3A:AD:4C:DE:C1:6A:CA:B4:15
X509v3 Authority Key Identifier:
keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d4:fb:e8:60:14:01:5d:13:b7:6a:b7:8f:c4:11:44:eb:2b:
9c:63:bf:7d:db:e1:b5:7f:32:a5:fe:c6:e3:58:25:e6:75:3b:
d4:4a:ed:69:ef:b1:73:b7:71:0a:8e:79:9f:53:c0:85:d5:95:
bb:8f:91:45:a1:ab:a6:0c:31:53:94:48:bc:1c:5d:4b:23:9e:
05:d5:c8:ce:05:c8:ff:ca:aa:70:ed:18:ef:83:bf:d6:eb:68:
e4:a6:53:46:27:3a:66:e7:12:5e:05:18:97:9e:9b:1a:67:69:
e9:ef:08:55:75:11:0f:b1:14:e6:33:62:d6:2f:d3:1f:ac:1e:
1d:44:44:71:d6:63:23:85:91:45:9d:3d:c0:9d:72:c6:b7:1f:
f0:2c:14:8c:ad:2b:34:06:e3:16:cc:ff:7b:8c:82:93:8f:45:
0a:69:ca:16:6a:4a:37:c5:ef:6f:8d:9b:1c:fa:db:3f:b5:e5:
67:5a:b9:3f:76:5c:54:b3:9a:ea:dd:1e:36:34:f8:41:13:ed:
55:48:1f:64:0f:05:63:1e:c3:7c:9c:ca:82:30:ef:62:4f:5c:
0a:57:45:97:5f:3c:fd:9e:70:19:94:31:ef:17:8c:46:2e:49:
d7:46:85:c2:9c:85:4f:27:db:6a:86:93:8b:04:00:71:a2:d2:
66:81:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:45 2025 by rpki-client