Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: 0NkgtqG1CQjEcO3JyNVnI2j8lM12Ub+4o2nTc8a4Pnc=
Subject key identifier: 6D:77:6E:FD:16:05:FA:01:AE:91:EC:49:5D:F9:11:8D:C9:F1:91:62
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 019A722625D5DFD225F7BAFFD34866F4CD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 0A61
Signing time: Tue 11 Nov 2025 09:01:33 +0000
Manifest this update: Tue 11 Nov 2025 09:01:33 +0000
Manifest next update: Wed 12 Nov 2025 09:01:33 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: 5ARNccRPXbepwKTEME650VfrYdeiU5gl6Azj7L3pf08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:25:d5:df:d2:25:f7:ba:ff:d3:48:66:f4:cd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Nov 11 09:01:33 2025 GMT
Not After : Nov 12 09:01:33 2025 GMT
Subject: CN=6d776efd1605fa01ae91ec495df9118dc9f19162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:65:b9:93:a6:01:ca:53:86:ff:58:ac:3b:8c:
d1:f8:07:07:6c:ae:7d:41:09:4b:51:37:e4:40:68:
65:e4:41:0f:5f:7b:42:91:67:e4:ef:c4:36:b1:f5:
54:91:c3:19:0b:2c:c1:b1:fc:0a:cf:69:56:b6:c5:
75:dd:b4:f5:c0:06:91:63:c6:51:4e:3f:bf:cc:7c:
4d:1e:1e:15:88:ec:69:17:60:14:e7:66:e4:2e:ca:
63:47:38:b7:42:49:9d:e6:f0:6a:fa:c9:3a:cf:b9:
39:a2:44:16:3c:ce:46:76:38:75:e9:94:74:28:e0:
b1:65:ce:e2:5a:69:73:bf:81:80:c7:2c:c2:03:5f:
8b:ae:9c:4d:3a:38:9b:fa:a0:99:9e:d3:65:31:50:
c7:5d:7f:c4:0e:23:c3:50:57:cc:89:46:56:1e:58:
25:56:b1:3f:06:2d:a2:a1:81:3c:49:4c:9b:e0:89:
25:1a:26:a1:34:f5:f8:eb:30:28:e2:e2:aa:13:d3:
26:e1:15:03:36:5c:5e:7a:cb:b5:76:71:3c:f2:33:
54:dc:96:95:cf:0d:ea:c7:1d:0a:88:bd:96:cf:79:
4e:3a:d9:ed:02:65:db:42:bd:b6:e3:d0:04:5f:bd:
88:db:3c:01:ad:f6:25:4a:8c:db:3f:04:55:e0:d7:
d7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:77:6E:FD:16:05:FA:01:AE:91:EC:49:5D:F9:11:8D:C9:F1:91:62
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f6:95:9f:a9:ea:25:1a:4b:01:4c:1d:cf:21:b6:04:24:44:
08:b9:63:9c:22:e1:df:0b:97:0a:41:dc:ca:17:90:4f:4f:6e:
c3:af:0d:18:d5:03:bf:e1:d9:1d:e9:a6:50:67:c7:57:c3:e9:
b5:0f:da:8e:28:83:ef:ca:96:2a:fc:1f:b9:e4:3c:09:e2:08:
8b:9e:54:7e:2c:43:b0:dc:be:7b:c8:70:0a:60:df:5f:74:c8:
cb:80:86:3d:39:4c:61:3c:ef:e8:b9:32:c2:b2:8b:c8:16:bb:
b6:14:93:61:6f:2d:38:e5:11:e1:e4:cd:a1:6b:f2:3c:31:90:
38:a2:14:0a:a1:15:55:2b:bb:26:50:03:6c:8a:4b:9e:69:58:
a7:7d:db:39:bb:8a:f3:f3:4e:d9:42:7d:ca:cb:91:31:22:f7:
6d:4f:78:ef:61:31:98:ca:39:40:4f:91:e7:57:d6:30:04:f4:
7a:a0:9b:32:43:db:45:78:90:00:bf:b8:65:bb:4e:0c:7f:2b:
06:2b:7b:35:05:13:4b:c8:05:0a:a3:1d:bf:c1:39:54:fc:49:
82:77:86:4f:21:8c:f2:24:28:10:b2:c5:62:53:4b:bf:c0:c2:
13:cd:de:14:cb:c4:c5:19:ad:31:ba:9d:05:f3:29:24:53:b8:
85:03:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:12 2025 by rpki-client