Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json)
Hash identifier: FWwxl/p2reIHYsOKvpxyLv2K9NPfwIrvihh0imAJeNQ=
Subject key identifier: 41:7E:E6:4A:7C:3B:6F:98:F4:C4:E8:01:1A:D4:BF:4E:41:5A:11:8B
Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Certificate issuer: /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Certificate serial: 019A71B915F96C0A205CCD68E5D3930C42F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
Manifest number: 069E
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: hpw8kLWv5XJ8xCIWsnZ7UYR8/iMPc5JaS9GByeDF5Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:15:f9:6c:0a:20:5c:cd:68:e5:d3:93:0c:42:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=417ee64a7c3b6f98f4c4e8011ad4bf4e415a118b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:a6:5d:10:6a:56:d7:c9:a4:39:51:07:51:
3f:74:22:6f:76:c3:17:08:b3:cd:de:a2:5a:22:2f:
b6:14:f8:39:0e:e8:57:76:49:a1:9b:60:96:6e:02:
e5:b8:45:f8:f4:2e:14:ac:04:dc:d8:b2:a2:98:2d:
2a:14:6d:47:10:03:c1:a5:97:0c:bb:e3:a3:f2:af:
bc:f2:07:af:7e:d6:b5:a2:f1:95:56:78:1c:9f:63:
11:50:b5:23:81:83:90:ce:f1:3d:2d:de:a8:99:7c:
e0:5c:a6:e7:1f:ec:cd:09:a9:2c:7a:84:79:a2:97:
b0:9a:8a:87:ab:49:b7:1b:2a:89:96:32:5a:ff:bd:
01:01:c9:73:ab:8c:dc:22:c4:18:6f:57:f2:4b:ec:
89:a3:d7:e6:7e:d5:19:8f:ed:33:e7:85:08:00:e0:
ef:22:67:8b:75:9b:c2:96:a4:eb:96:f6:c2:b1:2a:
e3:2e:dc:00:ba:0f:b5:e7:0e:67:a9:34:4f:b6:5d:
df:5d:7e:2a:ca:2f:7e:7c:c9:c7:c1:09:2e:c1:80:
d4:7f:23:b1:64:82:2e:17:5d:9c:db:75:5d:ac:5b:
ed:1f:eb:38:d4:3a:eb:dc:d8:69:e3:ad:96:4a:70:
0a:81:ac:b8:aa:09:41:6f:64:1a:ab:75:e8:96:30:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7E:E6:4A:7C:3B:6F:98:F4:C4:E8:01:1A:D4:BF:4E:41:5A:11:8B
X509v3 Authority Key Identifier:
keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c6:b9:da:9e:af:eb:13:d3:6b:19:8b:33:0b:0c:85:42:bb:
9a:ea:24:e0:cf:c7:2a:7c:32:09:8b:80:35:9d:22:3b:89:d5:
7f:1d:ad:56:22:5a:b6:14:2e:4a:72:47:8c:6a:5f:cf:eb:4c:
61:73:4b:cc:d0:5b:a7:d9:26:f0:23:a6:25:82:a2:22:58:41:
2a:ac:29:ea:e5:1c:ac:a0:b8:a5:60:75:f6:a5:c8:71:2b:96:
dd:c2:36:3a:12:c6:96:db:cc:b4:5f:8f:a6:c3:97:97:87:82:
ea:56:6f:76:ba:fa:f1:22:cd:59:36:2f:8b:5a:10:b3:bb:77:
c2:1f:ea:de:18:42:e3:07:5a:32:5b:60:ac:f7:5a:a6:23:17:
6a:87:ed:6d:89:18:16:80:92:f2:06:48:9c:4b:a7:5c:b9:70:
f3:35:16:35:26:45:e1:e4:b0:4e:d6:13:f1:30:01:c4:94:8c:
94:46:47:42:27:18:2f:97:ff:66:65:be:d6:4d:17:bc:7f:22:
ec:f6:e6:fd:3f:0e:b7:1d:ce:1a:78:93:ec:88:f9:65:77:04:
7c:86:8c:ef:71:14:d4:40:1c:59:32:fc:9b:be:37:15:f1:d9:
05:0b:6b:bb:fa:dc:0d:df:85:64:65:bd:ab:d0:61:ab:50:ba:
93:80:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:51 2025 by rpki-client