Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File: hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier: 6J7MX8Np1RkRX441BHJj30ZGWGT8q7PXlJe7v+k6GDk=
Subject key identifier: 68:40:93:2D:80:1C:D9:29:23:62:2E:93:88:62:49:17:7D:E0:4C:44
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer: /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial: 019A71B7919B4A7C54DF29B2F90688669990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number: 0FEF
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: LVHmYCjuciWqyYI+DuGMYgjnuP+RE8TUAujrI/etBW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:91:9b:4a:7c:54:df:29:b2:f9:06:88:66:99:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=6840932d801cd92923622e93886249177de04c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:b7:4d:59:46:01:44:4e:b2:d2:7a:7d:10:
b0:ca:c5:4f:88:fc:23:23:92:e0:04:18:19:33:1e:
a3:e1:c3:91:db:7a:09:1f:59:b7:bb:e7:99:4e:e7:
28:7f:3f:2f:17:a3:db:cc:42:d5:0d:e6:a5:16:58:
e2:8c:32:66:66:c3:13:08:67:d0:77:68:18:6f:15:
f5:2a:6d:68:6c:31:98:37:d3:7e:89:cd:b4:43:5e:
be:f5:db:42:bd:c8:72:7c:3f:20:bc:40:d3:78:04:
ab:ac:b6:f7:16:08:a8:10:1a:ff:da:d6:57:c3:9c:
f4:b0:7e:41:99:14:50:7f:c2:f7:4b:65:9c:89:57:
80:09:5e:bd:90:ca:f0:7d:64:6e:5f:27:cc:1c:a9:
ed:99:64:97:4f:9d:4d:eb:e1:90:01:b4:16:49:c4:
85:54:26:ec:6c:cc:2c:0c:a3:7d:c5:c5:f1:49:aa:
6b:c3:06:b3:ee:fa:6c:29:11:dd:11:d2:6b:2c:66:
37:87:51:1e:1c:9f:e7:53:9d:fc:d7:3b:80:32:fd:
8a:9a:bd:26:f4:c0:02:66:d6:53:2b:1c:70:85:32:
2f:b3:97:36:21:30:ca:d6:12:ea:a3:9d:1a:10:ac:
b8:f2:66:b8:8b:77:46:0b:fe:55:8b:cd:70:67:63:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:40:93:2D:80:1C:D9:29:23:62:2E:93:88:62:49:17:7D:E0:4C:44
X509v3 Authority Key Identifier:
keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e1:a3:30:19:29:e4:68:cf:c9:5a:1b:ce:4e:1d:0e:aa:35:
c0:8b:54:46:c7:2f:44:67:47:57:be:64:bf:03:00:0d:64:e3:
7d:6d:27:b3:16:eb:26:82:b9:68:d3:f9:3e:9c:24:22:0b:79:
69:2b:54:e8:ad:82:dd:f1:1d:ef:05:15:a6:88:99:e5:44:7e:
eb:d5:2d:ed:b6:9b:da:ca:96:b0:8d:dc:49:f9:02:15:ea:63:
19:e2:ce:97:49:c9:23:98:60:0a:37:8e:2f:91:3e:2c:f2:8a:
4e:76:51:b9:d3:92:76:97:68:21:e4:b5:1f:0e:30:25:a3:ac:
96:2a:21:4d:56:2f:bd:a8:1b:50:6f:68:90:59:c2:31:ac:5c:
e9:ec:4b:aa:c2:59:d4:d4:6b:45:c1:a5:72:0a:f9:ca:30:94:
be:75:81:24:cf:7f:15:a1:76:1e:a4:4b:99:bf:17:bd:a9:e2:
e3:40:3a:a5:2b:4e:16:24:a4:81:dd:71:e8:05:ad:2f:e6:03:
1f:d8:97:65:8f:f0:f0:62:13:05:ef:ba:d9:c1:57:12:f6:39:
50:8b:45:84:fa:e6:37:e1:76:32:7e:06:dd:f9:a8:5e:43:ae:
c1:b5:69:ca:3b:9d:74:30:7c:82:8c:a8:75:62:ab:98:ad:87:
3b:61:53:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:00:35 2025 by rpki-client