Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
File: hheg4tbmBy6I03dN18z78HochjI.mft (raw, json)
Hash identifier: h9GpRDXDWZH4qabV4YWehtbmRjvEcV9w8Kpo2QpdoO4=
Subject key identifier: 66:A1:56:D3:17:2B:39:FE:69:8B:CF:AF:9C:AB:21:14:E9:B1:C4:62
Authority key identifier: 86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
Certificate issuer: /CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Certificate serial: 019A7112E1C7F9B1BD73675DB2E165BE2FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
Manifest number: 1310
Signing time: Tue 11 Nov 2025 04:00:54 +0000
Manifest this update: Tue 11 Nov 2025 04:00:54 +0000
Manifest next update: Wed 12 Nov 2025 04:00:54 +0000
Files and hashes: 1: hheg4tbmBy6I03dN18z78HochjI.crl (hash: d2IhvK7JhZHJRndJ9AgMt8RF19MgVdU4dyUletRV9sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e1:c7:f9:b1:bd:73:67:5d:b2:e1:65:be:2f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Validity
Not Before: Nov 11 04:00:54 2025 GMT
Not After : Nov 12 04:00:54 2025 GMT
Subject: CN=66a156d3172b39fe698bcfaf9cab2114e9b1c462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:52:c3:15:6b:ed:db:57:4b:62:3b:60:28:
f4:47:5a:c1:4c:9b:74:77:6e:9b:59:14:b8:ee:86:
a9:15:2e:89:5b:fd:e0:b1:36:6f:d3:5b:fb:bf:50:
76:9d:07:49:aa:13:b3:4c:d5:31:f1:81:79:4e:f9:
c1:5b:ad:91:6f:3b:6c:bb:3c:20:0c:65:fc:52:0b:
35:0f:12:10:30:62:86:52:8f:c7:fe:ba:fd:87:f9:
89:3c:e0:a0:e1:d3:4c:4e:c9:e6:ee:08:49:57:d9:
e8:c4:99:a0:4c:4f:75:32:62:f1:69:a8:d9:b5:9f:
ae:7f:10:cc:20:7d:88:19:61:5c:54:7e:35:22:8c:
a8:2c:f1:ab:c0:53:07:1d:68:25:ce:3a:ff:d4:46:
5e:c8:2e:d3:7e:4d:96:93:a3:3e:61:32:18:6a:cb:
e6:bb:68:28:13:7a:c1:68:40:8e:b2:bf:f6:e9:be:
79:df:85:5f:72:33:6a:82:ff:b3:47:c7:92:e1:bd:
17:eb:88:10:4c:ce:72:a3:51:46:c1:a3:6e:b3:1b:
b1:45:44:d3:af:a9:e2:70:95:8a:df:6a:b9:e5:f6:
63:3b:8f:28:8f:fd:b8:f0:77:91:10:f2:e0:15:ab:
d0:a6:c7:d4:66:71:e8:9b:83:c3:f8:11:28:ca:a7:
7b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A1:56:D3:17:2B:39:FE:69:8B:CF:AF:9C:AB:21:14:E9:B1:C4:62
X509v3 Authority Key Identifier:
keyid:86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d7:7e:6d:06:2b:ee:96:42:a4:8f:2c:ef:61:04:27:b2:9b:
3c:38:64:67:e3:ca:3b:e5:01:c5:17:4c:87:f6:04:9f:e0:b7:
75:50:1c:d1:07:9b:84:c0:19:95:87:1b:b7:2e:48:69:58:84:
99:2e:a5:79:42:08:14:8f:a1:aa:f2:82:f9:2d:c1:ba:af:4f:
eb:aa:1a:9c:31:dd:13:b0:ea:97:ac:93:45:25:ce:fa:57:03:
88:2c:de:1a:25:37:54:d1:f2:84:32:78:c9:86:38:3c:3f:78:
1a:5c:1a:69:75:46:ab:3c:fc:b8:7d:8e:65:dc:0f:73:eb:e1:
0a:5c:73:40:26:b2:49:32:3a:96:4d:11:34:76:13:da:a4:b3:
c6:c9:e2:e6:cd:71:35:84:e7:fc:f5:a3:57:00:60:7c:70:4c:
8a:74:48:18:f3:04:9b:92:45:2d:5d:0f:4c:67:4b:17:01:2d:
51:eb:b7:f0:ea:12:b0:e6:10:45:dd:73:8f:66:b8:2e:83:99:
e7:bd:53:29:37:a4:0e:5a:a6:ea:92:80:ce:f1:29:e1:3f:d0:
59:5b:5c:6d:02:38:8f:11:7a:77:dd:04:aa:28:3d:2c:8d:3a:
9f:2a:bb:bc:1a:70:ea:19:11:eb:7e:5e:71:e3:e0:51:9f:a6:
f5:c9:d0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:44 2025 by rpki-client