Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
File: hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft (raw, json)
Hash identifier: RJvxMCek1894uUEBQo7s+XiWiHabwJCYYH6CLvTMPgM=
Subject key identifier: 4C:65:E5:A0:24:C4:F4:C1:FB:56:C3:0C:81:BE:B8:3F:D3:FD:D6:97
Authority key identifier: 84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
Certificate issuer: /CN=84ac851a2bfaae15e85e162baa0788c85912a932
Certificate serial: 019A71B9244B35040159B12AF6446F0F4F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
Manifest number: 1351
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl (hash: BTOjGbQyyF3LqRjDXTQXr0HmKsuycUOG6YGEsIRGtgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:24:4b:35:04:01:59:b1:2a:f6:44:6f:0f:4f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ac851a2bfaae15e85e162baa0788c85912a932
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=4c65e5a024c4f4c1fb56c30c81beb83fd3fdd697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:77:17:b7:f8:1c:30:0f:5e:7d:1f:a4:cc:
28:6a:83:86:55:61:cf:e9:a0:08:d8:6a:ba:7e:27:
6c:ec:d0:5a:02:82:82:a2:06:13:fc:3e:17:04:ee:
ab:95:0f:b1:bb:f0:7a:2e:d0:f2:17:31:4c:c3:a2:
69:c8:66:a6:a5:51:c8:bd:8e:08:66:98:89:98:76:
2d:86:55:3e:d9:63:55:65:2d:b8:74:5a:ae:a3:5d:
40:33:cb:7c:85:9f:51:4e:0a:ec:7d:13:23:27:3e:
2a:13:6c:67:74:bf:e5:8f:7e:ea:99:46:ab:ae:46:
1b:37:44:c4:6d:18:a3:73:ca:69:7e:03:71:b8:13:
cc:05:83:1d:6e:9f:b4:75:e9:ad:11:97:ab:39:40:
79:c7:c4:6e:12:49:99:55:04:1c:4d:90:a0:6e:6a:
7d:f5:fc:4d:c0:1f:fa:ff:ab:4d:49:ad:93:89:15:
11:5f:a7:14:21:9a:b8:76:4f:97:96:e9:96:9d:a5:
b1:c8:43:4a:f0:e3:f2:61:ff:35:36:63:3c:bb:42:
8d:52:ca:6e:29:24:a2:3b:e8:6e:f6:ee:87:78:55:
d4:4f:dc:fe:6f:28:d6:a6:58:81:42:fb:1d:43:4b:
5d:dc:f8:f9:75:e0:22:23:bf:4e:f8:41:22:43:9d:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:65:E5:A0:24:C4:F4:C1:FB:56:C3:0C:81:BE:B8:3F:D3:FD:D6:97
X509v3 Authority Key Identifier:
keyid:84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c4:01:46:df:1c:3d:04:57:03:07:b4:6e:26:1d:34:b9:f4:
49:a8:bc:7b:d1:4f:82:49:a0:20:b9:f1:ca:4e:d2:31:0d:c5:
3b:7c:1d:ca:c3:5c:2a:31:01:91:75:8f:0a:b5:e0:28:f4:c4:
25:87:ab:3c:7f:81:2a:18:dd:db:f3:47:e4:3e:e1:4c:5b:74:
c5:4c:b1:80:4c:04:c3:44:12:ea:fd:f9:e7:42:1b:ca:51:38:
ef:f6:fe:36:dd:a1:d6:16:f0:1d:0d:82:44:9c:88:19:d9:15:
1e:4f:fc:92:a6:5b:c6:35:a1:38:a2:d0:b8:7f:37:0e:b8:b7:
c2:89:d8:a8:0b:75:78:60:55:85:61:39:a5:7e:17:41:0d:f3:
e5:1e:d6:4e:95:70:a2:4e:83:4f:94:a6:23:3d:10:01:ec:ee:
ad:56:30:89:43:d0:61:3f:e9:24:80:4e:f7:55:97:dc:a5:cf:
f9:5a:9b:19:57:11:e6:8a:7b:a0:0a:75:34:38:4c:f3:ac:7c:
ba:b1:eb:dc:5c:56:8f:7e:52:39:57:f1:15:86:29:45:4a:a5:
61:8a:2f:25:3b:50:d3:76:ea:a3:dd:52:fd:f3:79:07:ec:c3:
d4:55:55:f6:66:a4:f1:fa:ce:dc:c2:7a:1b:03:08:db:96:d2:
1a:69:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:47 2025 by rpki-client