Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: vi3qpT24n7TsDeBWQr+UHaISnhlDbF2an7t8b99kFQs=
Subject key identifier: C4:23:0D:88:A1:30:35:C7:B5:15:B0:28:14:9A:3A:97:56:F9:19:12
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 019A71B8685FF9473D2C3E8E382C767D2220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: l9SRqf9UyOm3yjkFdonkecVtN5u53qdrgNRvH3hWKVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:68:5f:f9:47:3d:2c:3e:8e:38:2c:76:7d:22:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=c4230d88a13035c7b515b028149a3a9756f91912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:94:5b:64:0a:10:a8:20:cb:48:79:d3:1e:
c7:3d:33:40:13:5e:5c:e5:bf:80:8d:db:6c:b8:c4:
8b:c7:ab:c9:97:36:df:f1:77:02:ec:d1:fd:06:f3:
a4:02:e8:ef:ec:10:27:42:54:25:33:84:ab:72:3b:
c1:08:f7:c5:b7:21:81:66:58:08:b7:c9:e2:c9:8e:
24:52:2a:9c:2d:ed:8f:aa:86:da:4c:3d:45:46:52:
7c:5e:c7:82:63:84:fd:96:b2:4b:27:4d:c7:18:82:
1a:95:39:86:ba:d3:95:ba:25:c0:5a:28:c0:16:88:
c6:51:0e:64:a6:50:00:e9:e8:c0:5c:75:ff:1a:ce:
87:ad:8b:d2:07:f4:20:9e:ec:d3:fc:62:4f:1b:45:
c3:6c:22:2e:55:55:98:c0:84:f5:26:e1:c3:d5:9f:
75:a4:68:1a:01:37:8b:f2:30:43:74:b1:3f:a9:32:
e5:70:8c:1d:a4:ff:75:c4:c4:f9:fa:a5:85:46:80:
91:b0:81:e7:75:6f:5d:5f:14:c6:cd:65:dc:e6:9e:
2d:4b:ba:f2:8a:7d:0a:33:83:fd:c3:94:bd:ac:82:
cc:73:25:13:4a:cb:5d:6f:9a:67:32:7b:e5:75:85:
21:9e:80:9d:0b:bc:92:0f:f9:48:d0:0b:63:ac:27:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:23:0D:88:A1:30:35:C7:B5:15:B0:28:14:9A:3A:97:56:F9:19:12
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8f:bc:10:76:92:98:43:20:a8:c9:2b:2d:12:e8:f2:da:22:
5d:f0:9e:ee:9b:ce:8c:ab:83:68:cc:17:17:7e:36:df:41:fe:
4c:c5:37:d0:bc:4e:a5:d7:30:dd:bb:5b:c7:09:4d:12:38:b6:
1a:5a:a0:89:f8:ea:c6:48:6f:6c:32:76:d3:8d:d4:9b:fc:01:
18:9a:1b:bd:7c:17:3f:17:40:37:eb:dc:6d:c6:90:de:52:84:
cf:62:17:e3:fe:cc:b3:91:b5:dc:5d:8e:c8:bc:b7:b4:48:b4:
c8:43:19:56:f6:ef:9d:fa:83:3d:a4:4a:85:64:62:a4:32:16:
c7:89:23:a0:95:d7:bf:e8:0a:ca:ce:7e:e0:90:a1:24:ee:6b:
cd:60:bb:52:40:6c:45:3b:8f:a6:96:61:9b:61:20:4c:33:83:
64:90:f7:17:6c:03:03:bc:93:89:63:e3:6b:14:e9:83:97:08:
65:ee:44:70:11:b3:37:39:8d:e0:1a:11:bb:8a:43:fa:ee:ea:
e2:8d:53:da:13:78:1f:06:de:7f:fd:c3:13:8b:b6:8c:88:04:
e8:1d:ca:c7:97:31:ef:02:af:b2:ed:f2:93:ac:99:a3:f0:95:
62:fc:8d:bd:00:8c:82:79:55:8c:aa:78:5f:c5:04:0e:95:be:
84:53:8d:f5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpxuGhf+Uc9LD6OOCx2fSIgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzc4NzZmZDQ1Y2FmNDhkN2QxNTBkYTRiNDAwOTgxYTE2
N2ZlOTkwHhcNMjUxMTExMDcwMTQxWhcNMjUxMTEyMDcwMTQxWjAzMTEwLwYDVQQD
EyhjNDIzMGQ4OGExMzAzNWM3YjUxNWIwMjgxNDlhM2E5NzU2ZjkxOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYWUW2QKEKggy0h50x7HPTNAE15c
5b+AjdtsuMSLx6vJlzbf8XcC7NH9BvOkAujv7BAnQlQlM4SrcjvBCPfFtyGBZlgI
t8niyY4kUiqcLe2PqobaTD1FRlJ8XseCY4T9lrJLJ03HGIIalTmGutOVuiXAWijA
FojGUQ5kplAA6ejAXHX/Gs6HrYvSB/QgnuzT/GJPG0XDbCIuVVWYwIT1JuHD1Z91
pGgaATeL8jBDdLE/qTLlcIwdpP91xMT5+qWFRoCRsIHndW9dXxTGzWXc5p4tS7ry
in0KM4P9w5S9rILMcyUTSstdb5pnMnvldYUhnoCdC7ySD/lI0AtjrCfJsQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMQjDYihMDXHtRWwKBSaOpdW+RkSMB8GA1UdIwQY
MBaAFPh3h2/UXK9I19FQ2ktACYGhZ/6ZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IZUhiOVJjcjBqWDBWRGFTMEFKZ2FGbl9way5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZjFjNjJmLTM0NTQtNGUyNi04Y2Vi
LWYwM2UzODYzMTNiNS8xLzEtSGVIYjlSY3IwalgwVkRhUzBBSmdhRm5fcGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y2L2YxYzYyZi0zNDU0LTRlMjYtOGNlYi1mMDNlMzg2MzEz
YjUvMS8xLUhlSGI5UmNyMGpYMFZEYVMwQUpnYUZuX3BrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKo+8
EHaSmEMgqMkrLRLo8toiXfCe7pvOjKuDaMwXF34230H+TMU30LxOpdcw3btbxwlN
Eji2GlqgifjqxkhvbDJ2043Um/wBGJobvXwXPxdAN+vcbcaQ3lKEz2IX4/7Ms5G1
3F2OyLy3tEi0yEMZVvbvnfqDPaRKhWRipDIWx4kjoJXXv+gKys5+4JChJO5rzWC7
UkBsRTuPppZhm2EgTDODZJD3F2wDA7yTiWPjaxTpg5cIZe5EcBGzNzmN4BoRu4pD
+u7q4o1T2hN4Hwbef/3DE4u2jIgE6B3Kx5cx7wKvsu3yk6yZo/CVYvyNvQCMgnlV
jKp4X8UEDpW+hFON9Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:21 2025 by rpki-client