Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: NN24asMj+uJNilxgLEnMSJTfAzN86KMpM+heJ6Tfczs=
Subject key identifier: 15:B8:F1:C9:F2:62:45:AD:73:F3:FF:55:0B:57:66:11:2D:15:68:3F
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 019A4EF407FF73BA6D0DCD10845CC71247F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:06 +0000
Manifest this update: Tue 04 Nov 2025 13:00:06 +0000
Manifest next update: Wed 05 Nov 2025 13:00:06 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: SPc9oPpFU2AMBi3X4VczCxS3PlueTLvfmQ2eyol/0So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:07:ff:73:ba:6d:0d:cd:10:84:5c:c7:12:47:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Nov 4 13:00:06 2025 GMT
Not After : Nov 5 13:00:06 2025 GMT
Subject: CN=15b8f1c9f26245ad73f3ff550b5766112d15683f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:18:86:32:04:03:d0:19:fa:69:eb:cb:65:
19:13:14:84:3f:29:e3:fd:a5:ea:0e:a9:52:5a:44:
38:9c:51:9e:a3:5f:5f:68:75:05:b6:e7:5b:1e:49:
8d:1e:97:4a:d9:9d:3e:6c:97:b6:35:1c:eb:2a:a8:
0e:f9:26:41:7e:63:4b:aa:a6:a9:e3:bf:1e:9d:0a:
45:47:c0:63:a2:69:f1:b6:b4:4c:88:87:eb:b0:75:
f6:14:77:cb:51:92:77:e5:59:96:e2:88:38:c3:12:
9f:91:a0:e7:9b:d2:f2:8d:2d:5b:cf:02:64:9e:d8:
15:19:5d:88:7e:c6:f0:83:68:7d:86:ea:81:44:b2:
4d:42:43:bc:1a:fb:b6:33:b4:fc:9d:ed:d6:82:07:
cb:27:96:45:61:38:1b:3c:3d:23:be:87:30:d0:d8:
f0:84:b1:a7:29:4b:e4:62:ce:3d:0c:9b:c2:bf:f4:
8a:9f:e4:e8:ea:40:08:ec:c7:d2:82:68:9c:79:b8:
09:f1:9d:ff:71:35:fc:84:eb:4e:48:c5:3d:04:ee:
21:ef:ec:6e:2f:f0:20:2b:a0:63:4b:c8:81:d6:70:
bb:d8:74:45:91:5f:b6:0d:fb:97:1a:b5:45:1f:84:
e0:d1:a4:e9:c1:f4:50:03:72:1b:79:25:87:00:ee:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B8:F1:C9:F2:62:45:AD:73:F3:FF:55:0B:57:66:11:2D:15:68:3F
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f0:b7:34:c4:6a:5d:03:2a:83:b9:34:9f:e6:4c:34:e8:9b:
d8:88:8d:9a:66:c9:43:ad:4b:dc:fb:61:25:62:b3:3b:5f:5c:
20:54:c2:e2:d8:5b:1d:2d:f1:de:98:3d:07:13:1c:d2:d4:43:
18:ec:47:c6:75:cd:24:52:f2:85:40:0f:61:18:65:97:63:08:
af:0b:ba:fa:06:e3:dd:67:4b:c3:9a:4f:b7:e9:c3:7e:8b:48:
36:a0:6c:fa:a8:00:5a:ca:88:26:d3:fa:29:bd:a2:fd:ea:06:
ed:fb:af:53:f4:4f:b5:d8:12:7d:d6:b9:4c:83:63:70:22:b3:
02:f2:bc:f2:79:47:76:55:8e:16:e2:db:88:72:a2:f7:8d:e9:
17:a9:ec:ac:c7:24:dd:f6:01:95:53:74:d0:4e:de:c9:a6:76:
03:70:18:b1:11:cc:62:a1:9d:f5:2d:4b:4c:cb:7d:c7:e2:84:
e8:2f:18:8d:99:f0:74:d7:eb:26:cf:54:74:d8:96:d3:10:fb:
6f:ee:c2:1a:7b:ec:52:87:51:35:ec:42:91:4b:3d:4b:43:0f:
01:fe:1f:bc:c9:5d:6f:7e:86:28:a3:55:58:9a:97:a5:0a:79:
99:45:e6:73:5e:c9:ab:22:76:60:2e:dd:1c:d6:30:0f:b5:c7:
36:68:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:11 2025 by rpki-client