Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
File: h16pmc28YATHGlRwyg7HrnOCCPo.mft (raw, json)
Hash identifier: 9PP8HCwXc9P9HJzImAeoLtc3V02cVR5zEdVs2LsOjEs=
Subject key identifier: 79:17:61:EC:50:E1:F6:82:2C:0A:E8:34:D9:F6:D9:6A:4F:2F:4B:81
Authority key identifier: 87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA
Certificate issuer: /CN=875ea999cdbc6004c71a5470ca0ec7ae738208fa
Certificate serial: 019A7225DE379F989986A11E467319758FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
Manifest number: 0680
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: h16pmc28YATHGlRwyg7HrnOCCPo.crl (hash: d/cx/xeuEBx90qzU8IuXP8MGN9zaVWY4DUUapHKCO14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:de:37:9f:98:99:86:a1:1e:46:73:19:75:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875ea999cdbc6004c71a5470ca0ec7ae738208fa
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=791761ec50e1f6822c0ae834d9f6d96a4f2f4b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:14:53:a3:5d:b3:ce:03:df:a2:aa:78:ad:
2d:6e:1f:7e:4f:a2:fc:8a:9a:75:0a:52:72:aa:57:
36:37:53:1e:37:28:ab:de:c9:02:62:c5:3c:8f:a4:
3f:d0:4c:03:8d:6d:b7:13:be:62:ee:ba:12:cf:45:
fc:0e:cc:9a:20:3b:c8:a2:38:ba:41:a4:9e:5a:f9:
26:95:54:c3:0f:f1:ff:5d:5b:43:f2:b9:f2:2e:ae:
64:75:6f:7c:23:54:36:e7:76:66:bc:c8:5d:09:b9:
32:84:65:ff:65:c1:0e:ee:64:0f:1c:07:87:00:92:
9a:30:e6:03:fe:7b:46:8c:eb:0f:ef:f8:0e:ab:eb:
8e:8c:8a:f2:b4:ff:03:92:c2:04:ba:89:37:88:3f:
60:0b:2c:4f:6e:2b:7c:18:f8:a3:11:10:20:fb:37:
ab:f5:d0:39:e9:8e:33:50:95:80:cf:fa:e0:ea:c7:
ff:bb:71:89:fa:9f:3b:54:c3:80:f5:af:10:f5:64:
49:2e:ee:b3:a2:68:08:82:97:17:87:e4:aa:6a:47:
f0:62:3c:02:b5:36:1c:29:90:9f:15:63:74:98:3d:
d7:b0:63:98:c7:9c:08:32:a9:16:c5:88:04:9f:a5:
26:a8:0a:29:ce:23:53:d7:6f:e5:d2:1d:16:0e:13:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:17:61:EC:50:E1:F6:82:2C:0A:E8:34:D9:F6:D9:6A:4F:2F:4B:81
X509v3 Authority Key Identifier:
keyid:87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8c:2a:d5:64:90:1a:27:5a:78:70:99:c1:c9:97:06:c3:45:
de:bb:f5:f1:a9:92:ea:1d:09:d0:be:f3:8b:5a:2a:7d:17:74:
4c:5e:e4:ac:f0:30:fe:35:2e:57:30:42:18:06:96:1b:2b:2f:
7e:2b:1b:0f:9b:73:ca:56:86:4a:e8:61:5f:b4:74:32:ac:c2:
81:42:63:33:87:cf:50:e9:cc:79:6f:6b:e2:0d:53:9e:24:5a:
9f:db:f0:ec:36:fa:f6:9b:68:40:e5:ea:e4:a5:a9:17:d0:d6:
6c:c2:a9:42:58:ed:64:57:e9:c5:66:2f:e8:bb:20:b9:28:9c:
84:73:08:50:8d:c8:33:7a:b3:5b:77:bd:94:87:97:c3:e8:79:
64:2a:dc:ba:df:7c:b7:a1:91:af:00:2d:bc:30:ed:60:f8:6c:
2c:cb:94:58:1a:9b:31:d1:91:55:40:a2:13:64:09:e0:3f:07:
70:b1:2b:3b:4a:f1:03:dd:d8:92:23:f9:94:20:c5:7b:b4:a3:
56:46:8d:f5:1f:4b:9e:45:d6:c6:f2:f7:fe:65:7e:d8:9c:ca:
43:6a:7a:a7:5f:e9:a9:9d:3d:c9:6a:f9:5f:41:da:fb:12:38:
5f:f9:1e:c1:ea:5e:5d:76:0b:bb:93:25:08:09:6b:0c:91:53:
da:fd:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:02 2025 by rpki-client