Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft
File: Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft (raw, json)
Hash identifier: 1VDur9O+LP/ADBAl/H3+imRg/Lzt+Xd++c/NpBdnvAU=
Subject key identifier: B6:72:82:4F:79:81:16:91:CD:0B:62:38:07:DB:8A:8E:8F:05:BE:57
Authority key identifier: 1F:3D:9D:D4:AA:1F:F2:EB:50:DA:0D:40:CA:EC:5B:FD:A6:8E:73:37
Certificate issuer: /CN=1f3d9dd4aa1ff2eb50da0d40caec5bfda68e7337
Certificate serial: 019A725C9AD0D2C8C26CD76F4C5EC49BC855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft
Manifest number: 77
Signing time: Tue 11 Nov 2025 10:01:02 +0000
Manifest this update: Tue 11 Nov 2025 10:01:02 +0000
Manifest next update: Wed 12 Nov 2025 10:01:02 +0000
Files and hashes: 1: Hz2d1Kof8utQ2g1Ayuxb_aaOczc.crl (hash: yGQnyxc+qFl7mhJBqaWmKiir6GVvE774KCI9VioaauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9a:d0:d2:c8:c2:6c:d7:6f:4c:5e:c4:9b:c8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3d9dd4aa1ff2eb50da0d40caec5bfda68e7337
Validity
Not Before: Nov 11 10:01:02 2025 GMT
Not After : Nov 12 10:01:02 2025 GMT
Subject: CN=b672824f79811691cd0b623807db8a8e8f05be57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:8c:d8:ad:18:78:a3:e1:7d:96:68:01:89:
1b:25:a7:6f:66:75:07:07:f8:43:74:75:cc:ab:cc:
a0:51:e1:20:48:87:27:7a:81:0b:3b:44:cb:a7:6c:
ca:c9:d3:df:f3:b7:5a:64:a8:09:6d:59:b8:5b:64:
59:23:5a:6f:93:cd:2a:b7:9d:17:e9:ba:47:b7:fe:
2a:f0:c7:95:48:ce:1a:db:44:5f:9c:ed:03:3f:42:
9e:0a:a5:66:b7:54:a5:b0:3e:7a:6e:50:c7:63:4d:
d0:42:d0:f0:f0:42:a3:22:bf:62:4c:47:07:24:48:
6c:0d:92:3d:05:82:75:10:0d:e0:37:40:5a:16:6f:
1e:b1:59:98:81:33:51:b3:da:f4:d4:06:c1:64:cd:
dd:95:cc:1e:4e:05:5f:8a:0b:f5:f5:6d:fb:91:4d:
04:13:35:69:11:5b:30:65:49:35:4c:5a:a3:ae:11:
2b:56:79:e9:d8:78:59:46:0c:f5:e8:ca:59:04:77:
b2:8b:7a:2a:a1:0a:a2:33:b7:07:fc:8f:4d:00:6b:
11:0d:18:6e:e5:21:b1:f2:5d:37:4a:6b:57:f0:ec:
77:a4:3d:d7:47:f1:9a:fd:94:28:40:76:04:c1:64:
48:15:f7:d6:b6:14:1e:5d:15:8f:0f:fc:24:fa:ed:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:72:82:4F:79:81:16:91:CD:0B:62:38:07:DB:8A:8E:8F:05:BE:57
X509v3 Authority Key Identifier:
keyid:1F:3D:9D:D4:AA:1F:F2:EB:50:DA:0D:40:CA:EC:5B:FD:A6:8E:73:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:31:64:f0:c3:bb:48:b7:67:99:69:c5:05:85:5a:e5:1d:5e:
f2:b6:f7:2b:1c:25:d4:b5:f3:fa:e0:9d:d5:09:9c:de:ec:b2:
02:a0:c9:62:bc:30:c9:43:a1:93:a5:0e:29:c6:e8:91:d0:79:
af:a0:e7:c5:67:97:b9:f0:1d:22:c1:72:a5:45:f1:78:4f:c3:
72:6b:80:9e:2b:c4:ab:e3:28:27:bd:52:5f:6e:87:39:d1:cb:
75:d1:c1:31:0b:ce:20:be:ff:bf:e3:31:da:28:d9:81:2a:f7:
8d:1a:dd:48:b6:a1:06:e4:63:4e:87:9b:31:93:af:5d:c1:25:
8e:a5:55:00:7d:f0:d4:34:cf:aa:d4:6b:bc:4d:5f:0e:6f:21:
8d:7b:77:73:a5:e5:23:8b:5c:1d:99:e3:76:35:9e:e3:ab:42:
48:c4:bf:94:b6:bf:a9:57:fd:6f:d1:1f:dc:0a:b7:bb:8a:91:
e1:73:08:9d:0b:e6:ad:ec:ec:b4:ee:27:f5:4b:3d:55:53:b5:
42:d4:31:43:bc:ff:a5:24:e3:46:9f:4f:e0:cd:da:90:35:75:
44:79:77:51:1a:57:17:44:70:91:9c:45:79:a9:84:f7:7e:b8:
49:fa:58:a9:28:91:32:6f:c5:ea:29:c9:ee:8c:74:a4:f2:b4:
39:3e:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:24 2025 by rpki-client