Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json)
Hash identifier: fxLndt8bBPOfCvlow9qllt4FB6g0cZ4UOFelsB6SIt0=
Subject key identifier: E0:9C:7C:6D:65:A8:B2:1E:7A:0F:53:BF:75:3E:BB:57:BE:9E:44:04
Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225
Certificate serial: 019A7112DAEF29188E424938130846F3641A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
Manifest number: 16B7
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: qSiuBrZbaI+91Un/ts6Q9BC+4ISutCQW7NWHW64z160=)
2: kclE4AGa3IQ3ANoqx8hNmFyyOPc.roa (hash: era/rLdikRzOubIlTwlZQUllh2OgF4bxbh9GfJNQo5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:da:ef:29:18:8e:42:49:38:13:08:46:f3:64:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=e09c7c6d65a8b21e7a0f53bf753ebb57be9e4404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:f4:85:f2:fb:6a:44:64:f0:c2:78:bd:e3:
5c:f0:62:c9:13:ea:71:31:e5:cf:ed:be:94:01:dd:
b0:10:ff:0a:95:bc:54:fd:d3:9f:2c:11:c8:d6:2d:
33:ed:df:50:20:95:23:37:11:cf:2d:c2:5b:c1:a9:
65:ba:38:ce:06:59:00:62:af:af:00:9c:05:8f:53:
14:77:1c:6e:d1:57:b8:33:e1:13:21:8a:f8:dd:61:
98:2d:17:5e:41:ab:20:70:e7:d2:04:2a:bb:68:f1:
22:18:c3:aa:8d:ea:5f:77:4a:53:b8:30:93:ca:12:
c7:76:1e:19:2b:5f:7a:05:aa:1b:02:83:9c:8e:0d:
eb:8a:22:cf:76:47:c3:13:8f:29:1e:a1:58:72:64:
31:b7:e5:ad:12:60:a0:1e:75:25:07:38:68:33:d8:
75:5e:2c:f3:ec:27:94:e7:10:bc:ec:a4:c6:ec:b8:
dc:99:ec:e6:eb:d4:ab:6c:c9:e0:9c:39:8b:77:d0:
38:61:eb:52:d2:a8:3f:2f:8c:b3:cc:f1:73:54:6f:
cb:c2:64:93:8d:ff:a4:05:5c:0a:9f:4c:27:42:07:
95:31:e6:20:eb:0c:ae:d1:3b:f9:ac:5e:f6:0b:f5:
33:94:f7:73:d3:c9:2b:49:b1:53:1a:83:32:cb:66:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9C:7C:6D:65:A8:B2:1E:7A:0F:53:BF:75:3E:BB:57:BE:9E:44:04
X509v3 Authority Key Identifier:
keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e5:50:c6:a7:c3:13:ff:92:49:e4:69:74:b1:83:e2:d7:f5:
52:4f:3c:94:e2:8c:96:15:21:6e:af:25:dc:f3:a4:d1:9c:27:
69:b3:fa:9b:5f:90:e8:fe:29:fd:03:63:f8:a1:3a:2e:0b:99:
2a:23:a2:ab:2c:a9:65:1b:23:90:35:f4:2c:05:33:75:61:94:
68:a5:54:2d:0f:51:9b:d7:bc:43:b2:63:b1:a1:69:c0:46:fc:
43:ce:d0:cc:62:f2:69:f0:eb:27:a0:3a:b4:40:14:6e:0e:52:
06:be:97:33:84:c7:41:bd:d9:5c:05:c5:69:fd:20:4f:01:e1:
e5:60:0b:3a:c6:87:71:10:00:68:46:3f:30:c2:a3:d7:68:f2:
95:f8:58:cd:d1:a6:77:b0:2b:41:a1:1e:df:21:9a:03:af:0a:
af:b4:c9:3f:4c:97:62:3c:8e:2e:90:a5:63:9a:f6:ce:c4:77:
33:85:66:70:c4:f6:7a:bb:95:43:b3:7b:27:48:11:9c:bf:98:
15:e0:9b:c0:87:27:d9:28:c0:42:15:35:b1:38:59:2c:47:a1:
4b:97:48:36:d7:cf:11:bc:83:7b:16:52:50:c4:32:e1:a3:b9:
31:31:ff:dc:2b:4a:03:a5:ff:99:49:ed:87:f4:80:33:37:5a:
6a:56:4f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:14 2025 by rpki-client