Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
File: b_rHiuobz0OKYe-RUCRI9glkHS0.mft (raw, json)
Hash identifier: r1ysZ4Rs9N126lPFPEXH2eU/NkllcsgUBmKCZlhvWbA=
Subject key identifier: C9:D8:F7:EC:20:F5:90:01:9C:C4:BB:23:6B:3D:A2:EF:90:EF:B6:16
Authority key identifier: 6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
Certificate issuer: /CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Certificate serial: 019A503DFEF68DEDADE5A84A4DD0E23D39C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
Manifest number: 139F
Signing time: Tue 04 Nov 2025 19:00:31 +0000
Manifest this update: Tue 04 Nov 2025 19:00:31 +0000
Manifest next update: Wed 05 Nov 2025 19:00:31 +0000
Files and hashes: 1: b_rHiuobz0OKYe-RUCRI9glkHS0.crl (hash: p4qyumwY0I+L5j+OpqZMS+GEN+BI3Q9vYG5P/4P4Tw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:fe:f6:8d:ed:ad:e5:a8:4a:4d:d0:e2:3d:39:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Validity
Not Before: Nov 4 19:00:31 2025 GMT
Not After : Nov 5 19:00:31 2025 GMT
Subject: CN=c9d8f7ec20f590019cc4bb236b3da2ef90efb616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:4e:4c:12:64:5e:bf:a1:3d:10:62:08:e5:
e0:ec:ab:0f:c7:95:c9:7d:54:f4:08:86:b1:32:1b:
3f:d2:98:20:1c:a8:aa:5c:a7:91:f9:20:23:2e:84:
47:39:dc:6d:75:ff:5b:b9:8f:98:24:e6:58:c7:b5:
fc:4a:a1:c5:9d:98:ad:ec:0f:d6:89:d7:24:c0:e0:
97:5c:d0:c1:60:20:ae:31:82:70:06:f2:a9:27:7d:
48:ec:32:74:f0:aa:24:14:9a:8f:c6:fd:79:ae:09:
c1:9e:d8:e6:f3:85:fe:99:41:90:fe:aa:29:26:e3:
4e:19:16:95:af:5b:41:df:18:f2:b1:01:b1:a4:95:
43:4d:16:9b:91:b5:d6:4c:79:86:5b:21:d4:ef:7d:
93:da:8c:11:01:82:15:e2:95:81:53:f9:fb:bf:00:
89:9b:3f:c1:46:b5:fc:a9:2d:e2:ed:ce:3b:b9:42:
c7:34:86:ce:4e:44:f0:18:52:ba:48:ac:f2:2d:bb:
62:53:2e:a2:47:d2:7c:2b:cd:2b:66:a5:e0:e1:8c:
ef:41:70:d7:b5:be:5c:d6:e3:d0:c2:b4:ba:ff:01:
94:57:73:1b:7c:44:13:25:e4:c7:59:52:3c:78:fb:
6f:3d:19:da:82:09:dc:22:e6:d0:46:8c:c4:02:23:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D8:F7:EC:20:F5:90:01:9C:C4:BB:23:6B:3D:A2:EF:90:EF:B6:16
X509v3 Authority Key Identifier:
keyid:6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0f:fa:db:d8:a1:83:93:36:e0:bc:9f:59:9c:70:21:c5:51:
be:d6:82:5e:35:5c:a8:94:f5:e4:92:50:07:37:6d:38:1e:e3:
79:cd:70:a0:3b:f8:b8:fd:cf:c6:17:f1:2e:6d:b3:8a:ef:0f:
5f:ad:02:01:59:04:81:0c:ce:2f:95:46:5c:6d:93:b5:c6:3a:
74:28:f3:77:33:e0:b3:8d:58:29:a3:48:40:a5:15:a0:4f:26:
f2:ff:11:72:c8:53:9a:0d:ee:aa:1b:51:18:d5:a9:0c:ce:46:
61:28:16:d0:51:1a:e5:8b:1c:f6:01:16:1b:00:66:4e:27:7c:
20:5c:a6:d4:59:18:b7:69:42:91:e5:8e:64:f8:cc:45:02:6f:
90:07:ce:80:4a:24:39:5d:e5:3d:32:63:01:22:df:ee:3e:8c:
32:a0:aa:7f:a5:ae:d5:f9:f7:71:68:f2:df:c6:b5:e7:f0:08:
bc:6d:1d:26:06:04:55:06:4c:da:9b:e1:8b:af:42:19:52:1f:
ae:ab:32:de:a7:28:06:2d:d2:19:ec:60:8e:39:ee:72:db:f3:
01:d8:48:d6:79:0f:79:5d:10:09:64:10:b9:d2:90:2b:b9:2b:
4a:31:7c:8b:5b:eb:e6:19:7c:a5:43:c3:9e:c3:4d:cc:77:f6:
65:8d:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:40 2025 by rpki-client