Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
File: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft (raw, json)
Hash identifier: sWiZdUewGW2NYUrC5MeDVfl/WaNYpLk3TMorLbiP7B8=
Subject key identifier: 3B:74:DB:A7:14:63:DB:DE:1A:C5:D9:F4:2C:D8:DC:72:D8:6F:11:00
Authority key identifier: 30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
Certificate issuer: /CN=307a4415bad40b643e10bec4d282cd3072ba56da
Certificate serial: 019A71B9281173B80301D5F3AC65448BDA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:31 +0000
Manifest this update: Tue 11 Nov 2025 07:02:31 +0000
Manifest next update: Wed 12 Nov 2025 07:02:31 +0000
Files and hashes: 1: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl (hash: mehDGdGKLPdl+R+eTQ+QcjGn7V3JZ4TKjAtn5RkUEQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:28:11:73:b8:03:01:d5:f3:ac:65:44:8b:da:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a4415bad40b643e10bec4d282cd3072ba56da
Validity
Not Before: Nov 11 07:02:31 2025 GMT
Not After : Nov 12 07:02:31 2025 GMT
Subject: CN=3b74dba71463dbde1ac5d9f42cd8dc72d86f1100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e3:60:6c:96:54:8b:1e:50:83:cc:56:45:26:
39:17:9a:b3:c6:e0:7e:fe:5c:ec:5a:76:61:a2:5c:
0c:b2:6f:16:fb:0e:79:1d:03:7e:3a:9f:4d:27:92:
84:31:cc:34:5d:73:a1:c6:de:7c:6b:3b:ac:d8:3f:
e3:3b:d7:97:52:62:47:4e:ec:26:71:17:e2:99:a0:
c3:cd:e9:1d:32:a6:da:4f:fe:32:e1:94:f4:31:64:
d1:f3:82:98:29:e1:a5:d1:69:5c:ae:87:9e:8e:f6:
2b:05:a8:c6:b6:d1:80:92:3a:82:6d:3e:b1:e1:18:
78:b6:80:04:df:b4:33:ec:00:cf:87:8b:a6:5a:a0:
41:06:58:c4:c2:08:de:c4:47:41:46:75:f2:b9:fa:
9a:4e:93:cb:60:80:ab:58:e3:fc:4d:58:39:9a:b0:
c3:7a:48:fa:36:1e:e0:3f:b2:45:7e:87:bd:fb:87:
14:3e:99:90:69:b2:a3:20:0d:f7:32:4f:1c:5f:41:
49:9f:b8:c4:d6:14:00:db:d1:d6:a4:79:d5:e7:da:
2f:53:76:58:06:58:1c:fc:27:8a:fb:60:9f:64:0d:
84:32:ed:1d:47:f2:8b:ef:2e:08:63:c3:f2:b9:df:
a4:fb:b8:30:60:5d:62:3e:83:d1:c2:17:fc:36:93:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:74:DB:A7:14:63:DB:DE:1A:C5:D9:F4:2C:D8:DC:72:D8:6F:11:00
X509v3 Authority Key Identifier:
keyid:30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:83:47:4b:bf:2b:31:57:9b:b4:c3:8c:15:c7:9b:59:f3:c3:
56:80:1e:0d:38:99:3d:61:57:0d:a1:5d:76:81:0c:58:ca:5e:
07:9f:22:8e:71:39:31:c8:cf:39:ad:df:e3:3f:50:37:fc:4d:
4f:e6:ca:79:6c:fd:32:1f:f2:05:22:93:8c:32:f5:0b:56:3d:
89:69:72:4c:79:ad:47:54:fb:be:15:a9:48:10:2a:37:a3:cb:
6c:a5:76:61:0c:7c:6a:58:55:38:4b:8e:ce:57:f7:9b:80:89:
12:cb:56:21:06:48:10:8c:01:08:2a:8d:bd:43:53:81:15:d3:
ed:fb:2c:82:a5:16:61:89:b5:d3:35:df:53:e4:45:a4:2d:1b:
2c:55:2d:38:2a:ae:47:82:f1:47:e8:fa:cc:6b:a6:16:5e:7e:
79:b6:4f:36:66:b2:fc:4d:e1:c6:4a:15:ac:16:9c:8c:a2:04:
0d:1b:da:da:9f:4f:3f:5c:2b:7c:cc:90:ae:c9:eb:e1:ff:2b:
a5:3f:46:8d:70:90:d3:de:9e:a7:09:ed:4f:c6:f9:5f:b4:b6:
01:c2:74:11:cf:a9:d7:c2:43:67:3d:ef:5b:04:43:d6:51:30:
dd:79:a1:e7:34:bb:6e:33:23:e0:c3:36:b6:b1:98:cb:be:e6:
ce:1f:16:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:51 2025 by rpki-client