Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
File: SRHEgJhyKUvlgXsVnlnynlBgljY.mft (raw, json)
Hash identifier: f0AsfsJYk/4x3WtsvzVeED/gVOOWuaCgCk4ydzPeDQU=
Subject key identifier: F6:1A:A2:FF:72:3B:0D:AD:FD:72:3F:41:64:18:7C:43:74:03:90:1A
Authority key identifier: 49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
Certificate issuer: /CN=4911c4809872294be5817b159e59f29e50609636
Certificate serial: 019A7225AE6E425B510781ADFA3035A8EBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
Manifest number: 0170
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: SRHEgJhyKUvlgXsVnlnynlBgljY.crl (hash: E87AJ7quYXzIL9ojOgmu0vEF6I0IYWfUkZVIi1I6DXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ae:6e:42:5b:51:07:81:ad:fa:30:35:a8:eb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911c4809872294be5817b159e59f29e50609636
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=f61aa2ff723b0dadfd723f4164187c437403901a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:54:cd:45:34:54:29:20:e4:43:ce:5b:3d:0a:
5f:51:23:78:39:93:1a:99:47:7c:bb:4b:e6:12:df:
a6:11:0e:00:ba:29:c5:5c:f3:ee:ac:bd:93:9c:d7:
b3:8d:f8:05:3a:0c:40:6b:82:41:ea:ad:30:c6:e2:
3b:bd:da:a1:ca:c9:39:d2:63:63:fd:c6:7b:91:30:
03:fe:a3:fd:c8:a6:16:92:19:e4:71:be:87:2f:80:
3b:89:5d:5b:e2:d3:e5:ce:73:ea:04:b7:cd:b0:50:
cf:3a:62:14:41:79:b2:95:32:72:ee:bf:6c:21:35:
d1:ea:81:89:72:5f:33:d8:9d:dc:22:a6:fc:f9:a1:
eb:71:a6:f5:f5:30:9c:c3:b1:b4:4f:07:85:9b:63:
72:67:27:61:bd:7e:81:3e:fa:d7:ef:ab:ad:82:8a:
43:0c:72:9b:70:ad:ff:06:38:f1:77:97:bb:d6:aa:
b2:01:a5:67:f2:5d:06:e1:7c:4b:10:e1:71:67:58:
ec:17:95:f0:81:d9:ff:4d:20:d3:7b:f8:86:e9:8f:
33:6a:ee:77:27:f8:fd:8d:d5:d9:65:fa:29:9b:e5:
f1:9f:fa:1e:95:96:25:e6:3e:75:66:d1:86:17:a9:
e9:b5:db:b7:ef:d7:b6:c0:2b:22:a6:e2:bb:d6:37:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1A:A2:FF:72:3B:0D:AD:FD:72:3F:41:64:18:7C:43:74:03:90:1A
X509v3 Authority Key Identifier:
keyid:49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:24:37:47:5c:43:20:9e:08:9a:35:c7:9f:b0:46:b6:53:9a:
71:0a:09:70:df:37:ae:a4:a7:1a:74:78:d4:96:e5:e8:77:45:
ef:e0:76:18:5c:55:c5:f2:38:c1:a9:04:3b:32:46:ae:c1:71:
55:0c:8a:18:da:f3:58:11:c2:b2:e6:f3:d6:7a:be:bf:cf:e7:
78:6c:9b:1a:d1:91:cb:15:f3:ad:89:58:69:56:4d:84:27:fa:
63:02:15:83:53:ed:34:b7:6c:46:25:00:43:00:02:bb:1b:7d:
a9:d4:0a:6d:59:7d:bd:3b:db:8e:58:da:05:67:d1:a2:be:e9:
a6:45:d6:94:e8:f2:f9:a4:3b:85:33:ed:77:f8:ba:02:30:a0:
24:2d:19:9a:de:53:af:ed:cd:a7:69:91:4f:87:70:f9:aa:32:
7c:7c:11:25:fe:9b:a6:3c:cc:6b:1f:68:9e:4d:cb:9c:06:8a:
0d:f8:9f:2e:aa:bd:2c:cd:d6:17:1c:bb:91:60:e6:c6:16:f7:
7d:34:90:80:ac:b5:62:41:2b:75:08:e6:19:a5:f3:f6:5c:c2:
9b:42:e4:27:84:e6:c3:7a:a9:d4:f5:1e:94:2d:cf:10:29:a1:
d2:35:92:a7:5c:e0:75:65:55:54:bb:f0:9d:82:11:46:80:d6:
5f:e3:2f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:02 2025 by rpki-client