Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File: 24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier: Jeubr7rRn81DKdP4ediw2En9UjF6RYhwaoa1VcFLh6E=
Subject key identifier: 93:26:74:FB:F8:6F:E3:E9:68:53:D9:CE:33:A8:C1:EC:E1:FA:FB:23
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer: /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial: 019A72261DECC3789013F028091643B2E080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: VC+lmRtn52IEvfdYURMYAE55ROKOlQ/gN9U78YB0iRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1d:ec:c3:78:90:13:f0:28:09:16:43:b2:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=932674fbf86fe3e96853d9ce33a8c1ece1fafb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:c9:9a:1e:ab:ec:fa:cb:24:4d:5b:a8:b6:
bc:1a:29:31:07:f3:36:83:bf:c1:17:9a:d7:9d:2b:
01:62:49:c5:54:cf:3d:5e:66:de:24:8b:f1:15:15:
7f:b5:b3:c5:bb:a8:c0:28:ea:a4:eb:da:a9:92:e3:
23:0c:77:16:d1:90:15:5b:44:33:61:1f:5d:6e:a5:
ef:bb:16:04:b6:5e:50:31:04:00:ad:a2:87:33:d5:
49:59:0a:4c:d8:79:82:e7:94:27:01:18:0c:62:df:
38:62:e9:10:1d:58:bd:3f:c3:50:48:62:c2:5d:00:
27:f9:4d:05:0e:42:5e:07:bb:92:69:48:19:d8:a0:
64:ee:6e:99:4b:ef:3a:0c:08:c0:24:2b:44:0c:ab:
11:11:e0:57:4d:95:fc:01:66:c7:2b:fc:e0:12:7d:
f2:6f:df:3f:c5:37:d8:c0:59:c2:03:9d:9a:b8:50:
cf:25:f4:14:ab:a7:55:13:f1:26:82:61:12:18:98:
4e:4b:81:a9:dc:b3:a2:5b:a7:32:d5:24:89:a8:46:
54:d5:c6:ac:3f:b2:5c:23:63:2b:80:19:a5:04:57:
a6:8e:7a:ee:10:ac:82:10:12:d5:4d:fe:eb:db:a2:
7c:bc:84:a9:d0:47:59:ae:cc:76:c3:39:e8:18:cf:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:26:74:FB:F8:6F:E3:E9:68:53:D9:CE:33:A8:C1:EC:E1:FA:FB:23
X509v3 Authority Key Identifier:
keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3d:16:fe:2c:bb:35:92:37:ba:87:48:5e:93:13:d5:e8:76:
9d:59:30:c0:e2:01:e6:62:03:5e:c9:8f:25:e6:d6:d4:cb:db:
84:49:aa:4a:1a:18:94:87:8e:fd:ef:1c:e4:ab:f7:69:ce:fd:
d1:bf:db:61:14:cd:1a:f7:ed:01:32:ce:47:3e:6a:b9:19:e4:
79:6b:9d:90:07:46:ce:cf:1b:ab:be:3c:ce:ac:55:56:65:ac:
0e:94:70:d1:27:c3:ce:4b:10:37:cd:4c:16:e0:60:f4:0d:fb:
f4:3d:2a:6e:b5:8e:7d:7d:82:2f:8b:e7:58:92:94:23:38:4d:
55:00:24:b6:d9:4b:f0:33:68:b9:80:4e:2d:01:fb:89:40:14:
3d:33:0a:e8:ea:ff:2d:bc:20:21:1e:1b:eb:6e:fb:6c:49:d1:
ce:e7:6d:2f:52:3a:fc:5c:5b:bf:e3:8e:4e:55:ba:fe:12:4e:
36:c2:b5:23:78:69:7c:f8:0c:dd:23:9a:35:4a:19:51:6b:90:
b0:eb:65:81:06:a9:c4:93:75:81:2b:77:24:b6:d0:db:26:51:
8d:4c:7a:39:3b:f9:e0:7f:6e:5b:59:80:1c:f7:bc:f8:77:89:
91:4f:80:e2:51:cd:eb:4c:7c:e7:be:60:74:fe:c5:58:19:aa:
60:97:1a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:22 2025 by rpki-client