Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
File: H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft (raw, json)
Hash identifier: GKzWsOxvNgNEVSBPqOetsJei+tFW3NxSUbbHDaqNCZ0=
Subject key identifier: 86:29:7B:39:7E:85:2C:A9:A2:70:E8:21:D7:54:80:3B:9C:27:8F:2D
Authority key identifier: 1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
Certificate issuer: /CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Certificate serial: 019A7225CB04720F1B7D025261EFF31443E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
Manifest number: 011A
Signing time: Tue 11 Nov 2025 09:01:10 +0000
Manifest this update: Tue 11 Nov 2025 09:01:10 +0000
Manifest next update: Wed 12 Nov 2025 09:01:10 +0000
Files and hashes: 1: H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl (hash: 43QizqO64A7s/IGu2l1kgydpwN8bcQUVtNYPrtrIb5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:cb:04:72:0f:1b:7d:02:52:61:ef:f3:14:43:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Validity
Not Before: Nov 11 09:01:10 2025 GMT
Not After : Nov 12 09:01:10 2025 GMT
Subject: CN=86297b397e852ca9a270e821d754803b9c278f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:18:af:54:6f:e3:e5:f8:81:3b:e2:1d:64:9e:
7b:f2:c8:8a:92:43:f0:d1:4f:de:bf:19:7f:ec:19:
11:38:48:cf:15:29:d8:e5:e6:9b:08:14:7b:8f:02:
99:93:4b:25:6b:5f:09:b5:11:97:d1:4c:4d:62:a8:
11:0c:50:cc:6e:78:60:c5:a2:ae:3d:f4:38:e1:e8:
d6:ce:e4:fa:63:45:c9:39:5f:64:c9:ca:d2:54:bf:
2e:71:ab:a4:f1:79:29:25:8c:0e:b9:f5:32:b2:49:
74:9b:f4:ce:ee:d1:5e:16:37:0d:0e:ec:2d:42:fb:
c9:9a:18:2a:ae:48:87:f5:5f:a2:32:81:cf:da:37:
44:97:fa:7d:bf:df:d8:3f:05:cf:0f:d8:a7:9e:12:
95:35:d6:ed:70:94:90:ef:7d:fe:d3:10:e0:2b:3d:
c2:b2:fc:b4:bb:8a:12:26:7b:7d:79:15:58:af:3c:
62:3a:87:6c:f1:46:b4:b8:06:ad:77:31:b0:79:99:
0c:e5:81:fd:15:ca:a1:e7:0c:78:a0:2f:33:1a:61:
3f:58:25:b0:b4:77:30:fc:05:ce:bd:bd:da:88:ab:
16:9a:35:78:e3:dd:46:5e:7d:5a:25:55:35:0f:81:
61:82:13:48:4e:75:5b:7d:09:0d:a9:d5:4d:bb:ab:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:29:7B:39:7E:85:2C:A9:A2:70:E8:21:D7:54:80:3B:9C:27:8F:2D
X509v3 Authority Key Identifier:
keyid:1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a5:7e:88:b0:8f:ca:b4:e4:ec:9d:7f:b1:de:dc:41:47:1d:
ce:df:57:ba:26:13:79:25:2f:1b:4a:58:fe:52:2c:c5:d6:4e:
4c:8e:79:ad:e9:b0:82:89:11:c9:22:d9:e8:8b:3d:50:5f:94:
27:fc:c4:2d:7a:f2:95:45:f2:19:ad:7e:01:86:20:47:de:44:
f5:02:b0:0f:eb:98:0f:eb:16:74:60:70:d8:95:a1:a0:51:dc:
61:c3:cd:04:bd:77:ab:b5:47:36:39:e8:69:7a:90:04:c8:6c:
89:fb:e9:c5:f4:ba:7d:93:a2:aa:e1:a2:fc:a7:46:2f:d6:5f:
d3:09:91:e7:a6:2a:b6:71:46:72:8f:43:00:08:42:a7:d0:cd:
0c:06:16:da:c6:46:a8:b7:44:bd:da:9e:48:fe:90:5d:f6:da:
ef:64:7e:c4:a6:57:60:3b:08:38:92:ee:a3:27:da:dc:e0:a4:
48:4b:08:46:a8:af:e7:88:30:fa:f0:f1:11:ec:f9:68:01:59:
c3:8e:c2:10:e1:18:c3:33:3d:f8:80:b2:8f:39:db:ed:e2:37:
7f:dd:a6:1f:ce:10:bd:d2:78:7d:9e:54:83:34:00:49:a9:4f:
af:7f:91:57:05:87:6d:ed:7c:62:c9:b1:0c:4e:5f:85:ca:7d:
59:b5:9c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:28 2025 by rpki-client