Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: D44spG4iCdGAsJNmcwiHVpIpkA2nLdSQjVhpSQe2sik=
Subject key identifier: 46:EE:CC:14:7E:C6:E0:67:A4:CD:3A:78:E3:6D:0D:39:DD:96:8C:9D
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 019A71B8FF4077F255438110E72C54D22FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: ghZd0ckT4KcaxE1rJQmaK4+9d9rU2LjU9PBL1mJesg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ff:40:77:f2:55:43:81:10:e7:2c:54:d2:2f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=46eecc147ec6e067a4cd3a78e36d0d39dd968c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:f8:33:4c:55:f3:71:02:4b:83:e9:8a:16:
57:b9:ab:7e:db:1c:52:58:85:cb:ca:fe:88:f7:ce:
0c:30:fe:34:a5:fc:61:35:da:fe:0a:b6:4d:72:06:
b5:ed:89:96:b6:ee:41:11:d0:63:35:6e:81:df:0b:
a9:e7:6c:e7:1d:d0:25:d9:44:a9:b9:36:33:5d:67:
b6:a8:64:2d:ec:2b:ea:1b:f3:00:32:f5:48:7b:ba:
40:8e:d5:64:5b:13:62:02:5d:af:97:cb:57:3d:b4:
0d:21:32:20:46:ab:61:04:e9:09:ac:64:42:1f:6e:
f9:d0:62:9a:b6:03:af:f3:e2:31:d1:1c:de:e9:3a:
ed:f6:87:a2:46:ce:ef:a2:50:01:6c:28:46:fc:78:
14:ae:64:c4:02:1a:46:f0:a7:dc:4a:85:a0:36:cc:
68:59:c2:d8:8a:9f:be:f6:01:ea:d3:23:21:d5:28:
cd:9e:99:9f:cf:b6:ca:90:87:2f:dc:5e:81:d4:d0:
06:48:a0:71:ce:a0:fd:31:63:17:90:68:4d:00:81:
3c:8d:cc:a6:e1:a1:24:3d:45:dd:b9:af:60:8b:ef:
e1:9f:32:07:f9:de:b3:5f:b5:1e:7d:0b:94:fb:2a:
4b:cf:0e:c3:b3:c1:28:df:dc:8b:78:23:35:fb:84:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EE:CC:14:7E:C6:E0:67:A4:CD:3A:78:E3:6D:0D:39:DD:96:8C:9D
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cb:b4:ee:a5:8a:0f:99:40:4f:38:6e:50:65:65:3f:d3:25:
f1:7c:e0:8b:43:c0:23:6f:08:fb:93:f7:10:c5:e2:86:7d:01:
be:de:43:2c:47:f1:90:08:e3:2f:18:ff:01:75:6a:9d:80:ff:
b0:95:2c:fa:b1:6b:44:6e:c6:18:48:79:0c:bd:e8:35:d8:08:
73:f9:92:b6:8a:17:14:3b:fe:9a:f2:35:96:96:10:c6:a2:c5:
29:f0:74:cd:be:56:d1:ac:b0:df:34:a1:5b:a8:5e:a9:cc:76:
5a:d5:0b:18:55:6c:04:d0:67:ff:98:f2:ac:4a:01:35:c0:b2:
7d:1c:71:72:49:d1:8c:62:7a:28:b1:f4:69:69:33:d1:a4:1d:
d1:99:2c:bc:45:11:54:0c:df:1b:e5:2c:bb:87:18:ca:55:8e:
da:40:cc:ff:ba:26:eb:54:34:bc:f9:17:fe:b9:a5:2c:27:96:
4f:11:32:9c:fb:74:34:a2:7c:65:2f:69:a4:71:5d:a7:22:e3:
7e:11:5c:96:b1:5e:f3:c3:dc:b7:62:20:19:af:93:2c:c6:ce:
92:3c:fb:95:ce:1e:28:d7:bb:a1:54:14:8e:d2:bb:8d:96:99:
51:80:52:9a:5e:dd:57:ce:45:70:10:71:a8:fc:38:8d:70:50:
bb:d3:ac:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:35 2025 by rpki-client