Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
File: an0UIH91yLFYDbJ_defD_bH_hgw.mft (raw, json)
Hash identifier: MRnDJf/i898h/qEPqTymAH9Kscyh1uHmQ1El9ePnNQI=
Subject key identifier: C6:AC:D6:8B:96:36:7B:35:BC:78:D0:0C:79:C6:A4:F8:36:40:93:E1
Authority key identifier: 6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C
Certificate issuer: /CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c
Certificate serial: 019A725C4D1C261AF3139A5F6323FB56E725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
Manifest number: 09AE
Signing time: Tue 11 Nov 2025 10:00:42 +0000
Manifest this update: Tue 11 Nov 2025 10:00:42 +0000
Manifest next update: Wed 12 Nov 2025 10:00:42 +0000
Files and hashes: 1: an0UIH91yLFYDbJ_defD_bH_hgw.crl (hash: nfT2IblHbXAWuKig1eFNJYSPF5JIE4RBlKs3ubR0U3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4d:1c:26:1a:f3:13:9a:5f:63:23:fb:56:e7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c
Validity
Not Before: Nov 11 10:00:42 2025 GMT
Not After : Nov 12 10:00:42 2025 GMT
Subject: CN=c6acd68b96367b35bc78d00c79c6a4f8364093e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e7:1a:e0:60:5b:78:aa:cd:99:d6:e1:12:3f:
81:22:79:a1:b4:f0:43:76:82:69:28:07:a2:3c:22:
2c:cb:45:f0:cb:61:80:d9:d1:cd:94:6b:5d:8f:65:
7e:e3:21:ef:9a:c3:d5:ce:31:bf:86:4a:dc:70:73:
78:b2:a6:51:16:e7:d5:91:9a:6c:ef:3c:d2:d7:5e:
a9:43:73:b4:85:a5:b1:4d:48:c2:3a:ce:2e:1f:02:
fc:cd:b9:fb:49:c3:b9:e8:bd:ad:e6:70:35:c9:2f:
73:12:b7:50:b3:87:b0:92:54:01:3f:c0:ff:b5:65:
74:3d:4e:e8:d4:fd:7e:80:cd:0c:57:29:f0:54:76:
67:41:24:b7:d4:b1:ad:0d:62:e3:7f:06:2a:9c:b8:
89:71:3f:f2:23:e4:88:ad:ba:95:b4:5a:5f:08:e8:
ef:0b:6f:74:29:c3:c0:cb:82:77:ce:e0:f8:7e:c3:
a7:89:16:27:0d:06:96:4e:75:75:ed:7a:05:00:bc:
51:e0:3b:61:91:d7:97:60:ce:0b:b4:31:49:08:b9:
c6:f5:23:1c:5c:34:f5:f6:55:fe:5f:bd:a7:68:4e:
0a:f9:21:cb:87:37:f1:75:0d:e5:d0:cc:5d:0d:b1:
2f:e6:74:bd:f1:f6:c3:8c:a6:ed:f3:90:ba:4b:0b:
c9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AC:D6:8B:96:36:7B:35:BC:78:D0:0C:79:C6:A4:F8:36:40:93:E1
X509v3 Authority Key Identifier:
keyid:6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9a:2e:09:4c:5c:6a:fb:95:70:a0:28:0e:3c:75:07:fe:b9:
29:65:74:da:fc:f3:cd:40:66:23:85:3b:32:a9:5b:c4:66:28:
16:7d:f8:f3:2b:d5:82:81:de:7f:6c:c3:0d:3c:05:66:34:ce:
0f:19:77:00:f9:6f:20:ff:d7:db:01:81:ab:43:24:78:92:c1:
ee:8e:c7:d1:8a:35:3a:8f:83:fd:7d:c0:47:13:e9:e0:77:a1:
82:3c:3b:5f:e2:6b:6f:dc:ab:80:54:da:f5:17:86:ef:b9:9a:
29:04:18:cf:5a:43:6f:27:40:c9:e6:c7:3b:d0:99:00:63:54:
9c:dc:f5:d0:6a:6b:c9:b2:88:ac:19:a0:10:17:ba:6d:b5:69:
67:30:6d:ac:9a:9b:a3:c6:ea:37:25:2e:8a:7a:7d:e9:cb:c7:
7b:e3:d9:67:b3:db:72:ec:b1:a7:f1:68:fc:fc:ee:c9:c1:f5:
9b:ed:14:92:c9:5e:65:1d:26:76:cb:f9:26:d0:b7:63:de:42:
c0:2d:44:3c:97:84:58:03:46:2f:46:4d:01:26:23:2d:c4:f8:
71:66:a1:d5:91:92:fc:27:24:21:34:1d:a1:c5:48:ca:f9:3a:
a5:bb:5a:b2:4d:85:5c:e1:49:65:2d:1b:28:74:e3:1d:cd:ff:
eb:a1:bb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:11 2025 by rpki-client