Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File: 94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier: DQkpNzPDhtI4j7vLm1Zi6zE8DtzPZgnBeo9Ifw7sOgw=
Subject key identifier: 8C:F7:E5:62:9B:DC:C4:63:86:66:88:CA:C0:9B:34:5E:B8:06:A7:35
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer: /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial: 019A4F62BB9AA5D0074D8592F079D936FD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:01:01 +0000
Manifest this update: Tue 04 Nov 2025 15:01:01 +0000
Manifest next update: Wed 05 Nov 2025 15:01:01 +0000
Files and hashes: 1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: +d0p+BoZsfXq41hWpTOE96CwVJih+m3kqJz3vPcZOLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:bb:9a:a5:d0:07:4d:85:92:f0:79:d9:36:fd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
Validity
Not Before: Nov 4 15:01:01 2025 GMT
Not After : Nov 5 15:01:01 2025 GMT
Subject: CN=8cf7e5629bdcc463866688cac09b345eb806a735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:9f:18:f6:c4:8b:c0:52:ed:61:c5:6d:6f:
61:1d:8e:fe:ef:dd:a1:b8:92:88:7e:9a:b3:d0:55:
d5:b7:05:ee:ef:16:91:2a:77:5f:e7:b1:3c:f7:f8:
30:d6:08:1c:cf:df:d4:f7:8f:bb:9c:9b:66:3e:a8:
c1:24:98:ee:40:78:d9:80:91:41:f1:2e:43:92:4d:
4e:b0:87:f4:a0:fb:d8:77:6e:b6:56:a8:8b:d1:93:
50:04:4e:6b:cc:5e:2e:d2:f5:36:cd:2a:33:30:00:
6d:c4:05:c8:f1:5a:f0:0e:e0:91:25:22:61:ff:1f:
8e:28:49:ca:48:4c:cb:15:79:2d:c9:7c:8e:ac:04:
64:06:d5:b9:29:41:74:ff:7c:18:b7:7a:84:a2:bb:
42:4e:f1:48:ec:0d:46:75:88:34:54:0d:c9:20:d9:
ce:5c:a0:8e:7b:00:f2:28:b0:b4:d2:c9:07:25:8d:
b3:cb:68:88:69:0f:be:43:68:75:07:f0:39:bc:d6:
3c:af:bd:f2:ae:f3:e8:65:aa:00:6f:f3:b2:24:6e:
93:c1:c2:bb:6f:9b:86:b1:3b:1e:47:9f:30:89:46:
8f:86:10:1a:6d:fa:76:f2:f9:98:13:2e:10:4c:3d:
31:be:72:91:51:a0:c6:58:3f:4a:e3:80:c7:5b:74:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F7:E5:62:9B:DC:C4:63:86:66:88:CA:C0:9B:34:5E:B8:06:A7:35
X509v3 Authority Key Identifier:
keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e9:a6:ac:8f:1b:18:9c:ea:5e:6d:34:5b:8c:55:91:20:92:
85:f4:d0:d2:cd:14:67:a0:1e:0e:03:fd:c3:c3:ed:de:8c:1e:
14:c6:59:d9:54:5f:23:a5:8a:f0:81:5b:84:1f:f3:8c:d0:d3:
cc:8f:dc:3a:18:ac:b2:3a:47:65:4f:e0:39:76:06:32:ad:24:
fd:cb:75:02:44:0d:52:dc:45:9a:25:39:58:a3:ca:b9:4d:e8:
73:9e:05:20:f4:7f:87:e7:9b:4a:3d:b6:76:67:d6:1f:62:a3:
69:dc:d9:5d:f3:d1:6e:a2:7a:d2:47:c6:52:fe:dd:7c:75:8b:
72:60:74:9a:21:2c:d3:0b:ac:76:b6:4d:62:b6:1b:60:07:19:
ab:a6:17:cc:20:88:64:ee:8b:3f:e8:7f:55:9c:77:1f:69:56:
9d:01:06:4f:00:7b:40:46:a5:26:9a:9a:16:d3:2d:ff:bb:34:
98:c1:9a:cf:b4:2f:20:55:e4:30:af:1f:26:31:9e:2e:f4:e8:
09:04:94:da:4e:8e:a4:77:f1:db:37:bf:7b:6c:f9:1e:d9:f5:
de:d6:d2:09:96:2e:85:f9:f2:1b:4d:89:14:8b:a8:a7:13:36:
33:05:b8:e7:fd:c1:2f:be:dc:7f:2b:34:52:ae:bb:de:8f:8a:
69:f8:48:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:14 2025 by rpki-client