Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
File: RHhnr-yeLyk5So9fl_kJKdkoIQI.mft (raw, json)
Hash identifier: f/XDoGX6dPTA/7ypyq19PdI43NzATAE9+uSu0WOsw4Y=
Subject key identifier: D5:E7:57:17:03:90:15:B8:EC:BF:27:58:0E:B5:19:AF:27:4A:D5:39
Authority key identifier: 44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02
Certificate issuer: /CN=447867afec9e2f29394a8f5f97f90929d9282102
Certificate serial: 019A4EF49AA61BD5665C1E5EC955521B8338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: RHhnr-yeLyk5So9fl_kJKdkoIQI.crl (hash: GpG8R/hFHLckhIwIiiDPBONPzPlG+O+U4P/aBmqiJtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9a:a6:1b:d5:66:5c:1e:5e:c9:55:52:1b:83:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447867afec9e2f29394a8f5f97f90929d9282102
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=d5e75717039015b8ecbf27580eb519af274ad539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:6d:b3:08:38:a1:ea:28:de:1d:21:01:15:
82:e1:ea:ba:7a:75:da:f4:e5:b7:84:0c:0e:08:79:
e5:ed:e7:e4:50:b0:cf:2e:14:7a:c7:fb:b9:e6:fa:
23:a3:97:a3:43:18:c8:71:e2:a7:01:5c:96:cc:96:
b6:fd:ad:9a:cd:70:46:c3:6a:0d:9c:86:5e:01:79:
6a:78:f0:5a:b8:d6:3e:c0:98:8b:3b:34:3b:69:00:
48:e2:09:87:2e:69:45:3c:17:05:65:66:ee:1d:dd:
50:28:b1:03:12:05:ce:0d:dc:41:af:9f:b6:3a:34:
89:17:78:6a:5b:03:92:72:fa:87:11:89:10:0e:48:
5a:6d:1b:d9:25:fb:b6:97:fa:44:06:96:48:11:dc:
8c:0a:2f:0b:df:0f:f9:50:04:1d:91:8f:03:59:0f:
12:7c:5e:58:29:b3:25:68:3f:66:b1:94:a9:89:4e:
2f:18:06:21:fb:80:68:3e:0a:1d:ca:c7:61:53:85:
35:23:d3:fb:65:34:28:f9:8b:65:f0:c1:5a:7e:8e:
d3:4a:7d:c2:4b:d6:82:38:5c:91:b9:81:dc:98:68:
1c:7b:2e:f9:dd:23:32:a2:45:c0:81:82:df:d1:0d:
57:53:9b:6d:22:ed:57:94:40:67:bb:a0:8c:95:51:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E7:57:17:03:90:15:B8:EC:BF:27:58:0E:B5:19:AF:27:4A:D5:39
X509v3 Authority Key Identifier:
keyid:44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5a:b4:da:09:73:c7:c7:11:e9:2b:3f:ac:b8:52:59:98:b2:
fd:ab:21:bd:29:e4:55:45:ac:a5:81:79:49:5a:01:a5:df:d4:
e6:b3:6f:33:8b:44:24:f6:5d:63:0d:a1:14:aa:86:20:67:0d:
e1:e4:17:40:7e:68:aa:9e:76:33:bc:4b:66:ae:ab:2f:4f:58:
28:40:65:59:39:07:42:3e:9e:ec:3e:50:0e:0b:56:48:1e:89:
df:7b:1e:7f:c6:5e:e2:dc:cf:f0:c0:a6:f1:8a:5e:06:5c:74:
85:c6:72:66:c0:a1:f9:93:ab:7c:f2:c9:14:a9:47:5b:eb:d8:
13:28:93:f3:3e:9a:78:2b:14:dd:d3:78:37:30:e4:97:f8:07:
8d:9e:ac:28:ea:e0:8b:7a:a1:90:73:4a:23:c3:89:4e:a2:5f:
ed:03:12:9c:28:7d:61:26:ca:f9:c9:a2:04:bc:a6:8f:aa:40:
53:f1:74:30:b6:da:55:7a:5a:2f:d0:13:4f:c2:7c:39:4e:b2:
a5:08:9d:88:f8:45:47:0a:a0:53:db:66:23:c2:cb:5b:fa:81:
7c:5c:80:56:6f:9a:01:cb:27:16:e1:c4:9d:4d:44:b2:ec:5b:
01:a6:0a:49:48:59:0a:7f:ca:5f:1a:9c:d5:25:1a:d5:3b:89:
75:5a:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:29 2025 by rpki-client