Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
File: h6Tl13JcWGiqvqAluDjcwjPG_8k.mft (raw, json)
Hash identifier: KLpldss7OgxfaKTPpVk3gytfiUkJJCdxa/EM31bp32k=
Subject key identifier: 2B:00:0C:D2:7C:F6:FE:61:12:30:C8:E3:F4:E2:8D:EB:A9:F3:1D:CE
Authority key identifier: 87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
Certificate issuer: /CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Certificate serial: 019A7149E63DC12E5F12C2730DFEB2166382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
Manifest number: 1455
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: 326zxIS7flVicYpYeyjZhIJPEQc.roa (hash: 7OXoJx4K7+k1nQ/ABjRnbXIbMj5YXCBVmfp1DpVjQws=)
2: h6Tl13JcWGiqvqAluDjcwjPG_8k.crl (hash: g7dgtMD4ngNtjjA5/xeunwYgCJAIHP5aQlFLtYJG+Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e6:3d:c1:2e:5f:12:c2:73:0d:fe:b2:16:63:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=2b000cd27cf6fe611230c8e3f4e28deba9f31dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:51:5c:00:ff:e3:fc:54:73:cc:26:a3:8a:
56:a8:14:be:e1:5a:e9:d6:1b:81:ca:cf:d9:e7:81:
89:51:20:57:27:cc:e7:c4:a5:98:a5:b0:d4:98:0f:
b4:98:7e:44:5f:fd:95:af:2f:5e:d8:34:2c:f1:3c:
fe:09:f2:f1:25:88:a1:0a:56:e7:28:bc:9e:2b:b3:
b4:57:c1:f4:78:e7:27:d3:77:56:56:db:0a:7b:06:
13:42:56:4a:19:33:3b:7c:a9:29:3e:95:e1:3c:fc:
69:92:2e:f2:b8:81:a4:1c:27:9f:a0:cb:98:46:e2:
65:f2:6e:96:87:22:fd:44:c2:b1:90:37:d9:25:69:
f0:1c:4c:e3:03:dc:c4:98:fe:b7:c1:98:b3:5f:aa:
3c:b0:fd:66:e3:9d:58:c0:c3:19:78:46:01:77:32:
55:72:08:27:c5:b1:af:38:8f:cb:38:40:a0:1c:74:
04:76:f8:2b:f2:70:14:c4:35:ac:56:12:c3:87:48:
78:b3:8d:ba:83:28:70:5f:7d:41:8f:31:7d:40:70:
43:cd:fe:03:45:54:25:10:0e:38:d8:32:d0:a5:bb:
32:82:b2:33:32:7d:91:d1:54:c3:39:cc:dd:e3:28:
e0:9d:f7:ed:07:b5:e8:43:49:c5:34:bb:3c:65:3d:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:00:0C:D2:7C:F6:FE:61:12:30:C8:E3:F4:E2:8D:EB:A9:F3:1D:CE
X509v3 Authority Key Identifier:
keyid:87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a9:02:e8:ee:b5:a4:5b:91:b5:3d:f9:6e:04:a3:0d:36:5c:
60:d4:7d:9f:ec:e0:b4:54:43:f8:20:14:23:e9:21:a9:97:bc:
01:4d:b4:38:4b:e9:b5:68:36:7b:48:9c:2d:a3:f0:13:e1:3f:
5e:d1:e1:e2:3f:74:fc:20:1c:b0:bf:fa:a9:54:6b:94:3c:58:
e7:27:9c:76:38:70:75:44:da:c4:49:25:ef:98:8e:0f:a0:5e:
cb:27:83:ae:02:21:be:a7:3b:a8:82:57:6e:a0:74:86:71:b9:
c2:8d:b7:d8:00:e3:4d:e2:1f:1c:e4:53:72:3d:59:0c:fb:78:
73:bd:46:8d:84:5f:a3:de:a8:55:0f:a2:9d:73:ce:6e:42:70:
95:40:c4:c6:f8:11:ff:ad:76:0a:06:22:dd:1c:66:90:f7:96:
89:d0:88:3d:87:f5:f9:cc:4c:18:45:32:c3:29:f6:9e:7c:36:
99:ad:d0:2d:f0:98:ac:95:b2:03:5e:d4:92:12:7c:33:c6:f6:
b7:78:43:9e:f4:54:5f:be:10:32:7c:3b:cb:e6:0a:1e:b6:b4:
1e:e4:25:b8:44:b2:c4:bd:fd:aa:0e:8f:e8:b1:46:e6:9b:c1:
33:09:19:7d:a4:71:4c:e9:ee:02:d3:d3:ef:70:d4:05:fd:61:
cb:b1:26:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:58 2025 by rpki-client