Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
File: hUYNJS18tlxJNM6stG-pbctrVws.mft (raw, json)
Hash identifier: pzjp8U1KzYEV6CsaWx0sksbKjSHXBn1ae5wbEXQGDoY=
Subject key identifier: F7:4C:6F:F8:22:C0:1B:98:57:D4:5A:01:53:A3:BA:43:6E:9A:B8:E5
Authority key identifier: 85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B
Certificate issuer: /CN=85460d252d7cb65c4934ceacb46fa96dcb6b570b
Certificate serial: 019A70DC38362F43051C1181CFEA6F3F5D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
Manifest number: 084D
Signing time: Tue 11 Nov 2025 03:01:11 +0000
Manifest this update: Tue 11 Nov 2025 03:01:11 +0000
Manifest next update: Wed 12 Nov 2025 03:01:11 +0000
Files and hashes: 1: hUYNJS18tlxJNM6stG-pbctrVws.crl (hash: JpX5XHtVwtZ3NUlwjdpF9B3Ebtja5kPdyd1glfP0vu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:38:36:2f:43:05:1c:11:81:cf:ea:6f:3f:5d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85460d252d7cb65c4934ceacb46fa96dcb6b570b
Validity
Not Before: Nov 11 03:01:11 2025 GMT
Not After : Nov 12 03:01:11 2025 GMT
Subject: CN=f74c6ff822c01b9857d45a0153a3ba436e9ab8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:65:15:6e:69:3b:72:27:c4:b6:2e:0b:53:b9:
7b:09:6d:83:c8:1a:e4:32:a3:6b:32:4e:ab:0c:8c:
01:d1:c6:0c:fa:26:45:ed:f4:42:8c:54:89:94:74:
70:31:b6:ea:40:03:6f:45:31:04:df:96:cf:09:99:
5b:91:3b:5e:c8:27:d9:09:ba:46:80:77:9c:36:c1:
b9:9e:7a:3b:d5:fc:97:e1:82:e7:6e:cf:0e:aa:f2:
79:65:51:7b:70:1e:cf:b6:a0:32:de:8d:a0:37:75:
41:63:7e:09:5b:8e:82:6e:9f:74:6c:6a:ac:20:30:
af:66:1e:36:4e:6f:44:e0:eb:39:10:ed:ab:35:c0:
94:fc:bb:43:fe:d5:ef:73:e9:a8:f8:8e:af:00:6d:
9a:60:ae:d8:82:ef:2c:5e:91:e4:69:e7:d3:e9:45:
ca:df:38:32:d7:cb:9a:b1:0b:02:5b:9b:e9:6a:f7:
ba:95:52:6a:9c:d7:e8:0e:89:bb:43:f7:eb:50:a0:
82:31:45:44:57:99:cd:ea:f8:3e:6e:b8:91:15:68:
65:64:9f:97:53:67:cb:04:e9:c8:75:3a:28:e0:fe:
00:67:01:c5:36:55:a1:c2:90:b9:f9:7d:ee:41:64:
5e:dd:2f:66:6f:8a:2c:ca:34:88:f4:b8:46:df:f3:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4C:6F:F8:22:C0:1B:98:57:D4:5A:01:53:A3:BA:43:6E:9A:B8:E5
X509v3 Authority Key Identifier:
keyid:85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c2:26:7a:5b:72:cb:52:8d:6c:dc:5a:e5:19:5d:7c:ba:41:
da:86:0e:49:ff:90:0b:2b:7b:54:93:42:87:16:53:0a:3b:fb:
85:d3:0f:e3:ef:ef:f7:51:bf:04:8b:f7:30:b7:e1:bb:81:71:
08:62:63:07:0b:aa:72:da:44:63:4f:0f:d7:91:7e:24:e4:9d:
c9:fc:e9:e6:85:a0:a6:d4:69:3f:f7:6e:b9:84:b6:58:a8:5a:
cc:c7:29:67:c3:4d:cd:1e:58:bc:46:bc:ec:78:fc:7a:8f:93:
20:c5:75:cd:0f:90:75:36:0d:d8:15:c8:d3:d2:e1:cc:4a:20:
08:d4:b2:ba:57:9b:45:07:08:d2:3b:f3:fd:1b:91:1e:ec:76:
b4:15:8a:62:4a:04:9b:2e:fa:61:00:8c:20:b1:49:7d:31:54:
f2:c7:06:92:dd:59:e5:7d:75:d6:21:f7:79:7f:03:2b:05:8f:
66:d0:41:1d:e2:35:3a:01:10:72:a2:81:8f:3f:b4:92:dc:fa:
59:1c:8f:f6:24:58:8f:46:65:e1:be:1c:ea:33:60:44:d8:37:
6e:03:fe:00:a2:57:d1:ef:cb:32:5c:e2:02:4a:2a:fc:29:d0:
c3:54:2b:71:3b:5b:7b:3a:7f:86:a9:0c:3a:62:75:57:b8:b9:
6e:b7:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:12 2025 by rpki-client