Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
File: rHI58-_bN5H1vlVSmbXYFpfz0BI.mft (raw, json)
Hash identifier: nR6uD6oGB2FnpebokDohgO+627cGX8Sw0AOtn//aABs=
Subject key identifier: EA:B5:07:64:3F:D6:01:B1:25:78:77:7E:CF:93:93:51:C1:CF:61:B6
Authority key identifier: AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
Certificate issuer: /CN=ac7239f3efdb3791f5be555299b5d81697f3d012
Certificate serial: 019A4D73DFA0B4D09F70E59B7406D20691F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
Manifest number: 12C8
Signing time: Tue 04 Nov 2025 06:00:30 +0000
Manifest this update: Tue 04 Nov 2025 06:00:30 +0000
Manifest next update: Wed 05 Nov 2025 06:00:30 +0000
Files and hashes: 1: rHI58-_bN5H1vlVSmbXYFpfz0BI.crl (hash: Q3YqRJ/Biwo0PMzFFxDVe5FeVPTGCSLBxNMSnj8qndI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:df:a0:b4:d0:9f:70:e5:9b:74:06:d2:06:91:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7239f3efdb3791f5be555299b5d81697f3d012
Validity
Not Before: Nov 4 06:00:30 2025 GMT
Not After : Nov 5 06:00:30 2025 GMT
Subject: CN=eab507643fd601b12578777ecf939351c1cf61b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:eb:0b:ad:d7:06:4e:d5:1d:61:2f:e3:38:
34:f8:40:8d:c2:d8:e2:4d:4d:60:bc:27:06:14:91:
29:46:ae:03:49:c1:24:02:d8:37:20:47:71:18:98:
cc:00:52:c9:d8:40:4c:e1:c4:45:fe:3d:04:25:f6:
56:bd:b6:29:5c:ae:d3:71:65:79:e5:64:3b:60:4b:
8e:86:4e:9d:07:56:ea:d5:fd:3c:df:7f:e4:27:1d:
85:28:f8:2a:94:67:df:af:f2:41:6b:da:e6:12:76:
65:27:76:cc:c6:bf:89:92:f8:dd:79:7d:57:1d:c6:
05:7b:bd:f4:cd:25:0d:62:3c:2f:a5:49:84:f2:f9:
c6:63:70:67:34:9e:1e:0d:74:72:ac:3a:36:d7:53:
bf:00:e1:39:0c:7d:72:95:74:b9:62:2a:09:80:1e:
54:63:cf:6c:d2:a0:91:93:56:b0:da:15:bc:14:da:
c2:d6:04:5f:99:da:a1:fd:a5:24:7c:f2:6f:32:d8:
0d:01:91:c8:01:1e:df:7a:60:fa:ec:51:3c:87:59:
2e:8e:9d:51:30:42:8d:6a:43:01:64:af:c0:1b:9f:
b8:39:36:ad:48:f2:b8:d1:20:04:83:be:2b:75:25:
24:c6:29:05:14:28:e9:fa:f0:80:f1:ff:a7:29:10:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B5:07:64:3F:D6:01:B1:25:78:77:7E:CF:93:93:51:C1:CF:61:B6
X509v3 Authority Key Identifier:
keyid:AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3a:67:b3:7c:24:83:65:71:c3:c2:77:ab:17:3b:62:8a:4c:
c5:e0:60:b2:fe:96:b9:31:06:49:f6:1e:68:c7:33:d1:5f:37:
b5:05:18:c2:cc:a9:2a:ca:55:49:05:32:49:2d:70:ea:64:26:
a5:87:bd:5b:5f:6e:70:86:6d:04:47:5e:49:4d:28:80:66:5d:
f7:4a:fc:9f:af:92:5f:9a:af:90:85:ea:c1:2b:34:01:3e:ec:
15:e2:15:5d:54:95:4f:a6:41:12:14:05:c3:af:83:4b:e7:e7:
a2:32:ce:ad:2f:00:10:de:35:39:b0:4b:c4:b8:51:ee:92:83:
df:08:37:cc:80:c6:16:e0:41:22:06:5d:af:d6:d1:f2:06:d3:
d5:8b:74:aa:f6:61:b0:0b:11:d7:f4:58:d9:62:29:3f:4c:2c:
88:75:ed:09:82:4c:ee:11:1f:30:2a:a9:cb:b6:4e:ab:b0:91:
15:41:b8:ba:77:3b:75:35:22:61:95:a4:8d:9c:1d:c8:03:01:
d4:7d:17:77:45:10:be:6f:90:5a:5c:06:f7:0c:e5:21:03:91:
42:b0:87:ad:ad:51:56:fc:fb:b8:7b:b3:b9:69:e8:de:a1:93:
25:11:a1:aa:c2:f4:87:97:d9:30:19:b4:17:7d:d8:e2:5d:04:
06:79:aa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:47 2025 by rpki-client