Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
File: h3OqvdPia0S3mDfBRwq44XQV6o4.mft (raw, json)
Hash identifier: 5R0tI4EzUv+9hGRuFsQ7+s5fTvxi+RJ1HVaRiVMUFGI=
Subject key identifier: 46:F0:18:63:8A:8C:B1:5A:B8:73:C7:99:CB:B1:06:05:19:3C:8A:BE
Authority key identifier: 87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E
Certificate issuer: /CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
Certificate serial: 019A7225818A79F28D6DEE14DBF4C01B8C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
Manifest number: 030B
Signing time: Tue 11 Nov 2025 09:00:51 +0000
Manifest this update: Tue 11 Nov 2025 09:00:51 +0000
Manifest next update: Wed 12 Nov 2025 09:00:51 +0000
Files and hashes: 1: h3OqvdPia0S3mDfBRwq44XQV6o4.crl (hash: mgZ72ZmdgFbnejG+s+di9u5wU6gbj1xgPuV0XJd/VQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:81:8a:79:f2:8d:6d:ee:14:db:f4:c0:1b:8c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
Validity
Not Before: Nov 11 09:00:51 2025 GMT
Not After : Nov 12 09:00:51 2025 GMT
Subject: CN=46f018638a8cb15ab873c799cbb10605193c8abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:8b:aa:a4:0d:74:42:36:1e:de:4e:a0:49:
5f:20:6b:67:99:8a:72:d6:6d:29:80:00:1a:d1:d8:
bd:4b:65:46:8e:22:0c:6f:d8:14:3f:87:7f:90:02:
f7:c8:00:81:60:76:e2:62:79:d2:b7:d6:e1:3e:27:
7e:70:08:13:5f:ef:24:06:65:ae:5e:6b:51:d4:cf:
05:b6:7c:99:b5:99:57:fa:44:c4:fe:86:49:88:62:
a1:dc:45:79:32:c1:51:6f:ff:8e:dd:e0:11:51:34:
02:97:10:12:bc:8b:ad:32:ff:0a:2b:a1:62:ff:00:
22:c4:6a:42:f6:36:e9:1d:85:a6:ec:bb:79:29:f0:
28:e6:db:1e:d9:45:7b:de:7c:0a:6b:af:94:db:4d:
71:1b:0f:b3:4c:e8:16:76:1a:56:0f:70:5b:53:d8:
7b:11:1a:eb:ee:f1:4d:1b:d1:56:ba:4e:3a:aa:1a:
fb:ad:d3:c4:b8:a3:cb:d1:7f:6f:03:86:e5:d7:80:
7a:3c:3f:df:49:8f:b6:8c:ed:84:7f:50:81:ca:ae:
88:d0:3b:03:d3:54:ed:31:73:0f:d0:39:b7:a6:47:
0c:6b:47:64:6e:84:b6:a5:a2:ad:f8:d0:a1:f6:3b:
d4:a0:e7:48:ed:b1:b5:3d:85:87:f9:5d:d8:b9:6d:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F0:18:63:8A:8C:B1:5A:B8:73:C7:99:CB:B1:06:05:19:3C:8A:BE
X509v3 Authority Key Identifier:
keyid:87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:19:16:b4:ff:f3:a7:dc:32:f4:e9:89:b0:d8:e6:a6:64:84:
03:de:05:53:5e:88:ba:e2:24:44:13:b0:1f:59:3c:1e:c9:60:
ba:e5:1f:10:87:6f:dd:84:e5:fe:ba:ab:98:35:5a:50:f5:d5:
42:d3:b7:e4:8b:05:7c:86:fd:31:1a:92:10:13:25:7f:ff:0a:
70:6f:40:eb:36:15:02:28:ee:42:99:f5:ac:0a:92:e2:b6:6a:
bd:c9:10:b7:db:d9:5a:3a:cc:10:67:5f:f0:13:d5:7e:d8:06:
c5:f2:11:f8:59:8b:c3:13:dd:ef:6a:80:24:76:cc:fd:eb:b2:
b3:cc:89:9d:15:69:81:e2:05:61:b9:a1:e2:a7:ca:e9:08:18:
02:73:e1:d2:23:6c:f3:3f:1c:7c:41:3b:f4:00:a0:f2:22:e8:
cb:1f:de:1f:a4:a6:d5:29:df:35:8e:0c:ef:c6:fc:e5:c2:90:
4d:a2:d3:c8:d1:e3:1a:31:0b:0b:9a:b3:37:e7:2f:d2:24:34:
bb:c1:bd:d3:cd:9b:a0:cf:54:53:ea:b4:6e:4d:ad:17:d1:92:
be:f7:79:86:5a:37:24:33:d9:f6:92:f4:c4:15:fc:35:ad:84:
56:88:a5:01:b0:13:5a:67:3d:86:9b:a9:24:28:e2:72:ca:a1:
9a:2c:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:47 2025 by rpki-client