Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
File: an0UIH91yLFYDbJ_defD_bH_hgw.mft (raw, json)
Hash identifier: Cw5VumIGSFg5p2h/wotPMsHRkgLrtvXIecHxiSxDFX8=
Subject key identifier: 0E:94:CF:8D:2E:E3:31:B9:8A:C8:3D:B0:63:69:6D:2A:96:11:01:AA
Authority key identifier: 6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C
Certificate issuer: /CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c
Certificate serial: 019A4DAA6FEACD3B466115920B6A93DE55C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
Manifest number: 099B
Signing time: Tue 04 Nov 2025 07:00:06 +0000
Manifest this update: Tue 04 Nov 2025 07:00:06 +0000
Manifest next update: Wed 05 Nov 2025 07:00:06 +0000
Files and hashes: 1: an0UIH91yLFYDbJ_defD_bH_hgw.crl (hash: 0cd+sxYOQ9aom/CkNTqXZOoFRbNgrsZU/YeJ3DrkYFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:6f:ea:cd:3b:46:61:15:92:0b:6a:93:de:55:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c
Validity
Not Before: Nov 4 07:00:06 2025 GMT
Not After : Nov 5 07:00:06 2025 GMT
Subject: CN=0e94cf8d2ee331b98ac83db063696d2a961101aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:0a:48:d4:df:50:33:cb:96:bf:63:ca:0d:
6b:52:f5:cf:3a:a4:e8:49:f0:29:be:44:34:30:5d:
9e:74:8f:e9:3f:ca:a3:a2:dd:18:61:73:47:a5:b2:
b9:4e:75:f8:69:ac:dd:fb:06:c7:bb:76:0a:b0:ae:
82:12:c0:21:1e:b7:be:9b:0a:d6:37:99:a3:4e:cd:
0d:4a:35:02:65:f4:f6:31:2c:53:70:27:e2:66:dd:
8b:d9:8d:de:1f:ff:ba:a8:0c:7c:ed:35:3a:04:d5:
a1:29:86:36:67:d5:9f:e1:81:e2:c8:a9:84:6d:24:
b8:a4:68:6d:c8:fc:02:85:d9:76:9e:f3:d9:8b:7a:
09:56:6a:dd:fd:25:28:8f:37:08:e3:8f:af:cc:59:
50:b5:a4:3e:a7:bc:12:68:a4:84:50:e5:6c:62:08:
70:70:e5:27:f0:2d:4a:ba:34:19:35:66:61:1c:30:
ab:b2:63:d0:5a:07:e4:8e:3d:21:89:fb:c0:4b:4a:
d0:e6:29:bc:22:8e:c4:89:b4:b3:33:13:af:7b:72:
99:f2:d1:f1:05:4e:27:27:6a:45:ae:3f:5e:cd:da:
52:85:11:b0:40:ac:36:9a:c6:0e:ef:b8:61:0e:1e:
0f:b4:21:fa:0a:61:b5:31:ca:55:9a:a0:83:cd:3b:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:94:CF:8D:2E:E3:31:B9:8A:C8:3D:B0:63:69:6D:2A:96:11:01:AA
X509v3 Authority Key Identifier:
keyid:6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c4:de:6e:20:71:9f:ff:6c:a1:c5:f3:71:9e:96:ef:13:8b:
c6:db:ac:0f:2e:7f:c3:3a:83:1d:b5:f6:6f:67:20:92:e8:38:
c6:8b:24:46:c4:9d:10:8a:0c:4b:22:78:d9:7c:aa:44:5a:29:
9f:4b:ee:e3:6b:80:e5:e2:c9:a8:c8:f7:49:94:e6:3b:15:bc:
c0:9e:b6:14:10:b7:18:73:40:db:80:ef:3f:24:b6:46:36:25:
f6:7b:4b:ae:b1:b3:20:9a:fe:60:90:6f:e1:53:34:8b:cd:c5:
ca:57:7f:25:26:ee:63:50:f2:59:70:23:ef:60:16:40:58:15:
ae:6d:0a:23:4b:c3:d8:e1:c8:1c:8e:85:e4:34:d6:6f:87:bb:
ac:df:c3:16:74:ca:f9:76:0a:12:f8:27:36:f1:ca:dc:f7:29:
51:92:5e:b7:5f:a8:7a:59:c7:df:95:be:78:0a:c1:16:90:aa:
05:8c:1c:a7:07:af:20:e2:ab:72:d4:af:ff:ac:ed:d0:f4:dd:
21:58:bd:c5:ac:1c:75:48:3d:d1:06:fd:8e:94:2f:14:86:8b:
8d:e7:93:3f:2c:9f:2a:47:fd:69:43:4a:95:aa:0b:a6:64:aa:
dc:67:45:21:04:1a:79:5d:a4:d0:4c:f8:8c:8d:70:06:3b:f7:
ea:db:eb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:41 2025 by rpki-client