Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
File: r_HNv5fWyiB-XciFq8_2ccwVyRA.mft (raw, json)
Hash identifier: lx7EP4f9aojlesz6QzlQrTO6yiJQluZvqEebGmahOvw=
Subject key identifier: 4B:B6:FF:22:74:69:58:03:8A:57:8F:EC:8A:FB:53:03:75:93:89:13
Authority key identifier: AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
Certificate issuer: /CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Certificate serial: 019A4EF49D9C06F6B58869A893CDF3CC608C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
Manifest number: 0C02
Signing time: Tue 04 Nov 2025 13:00:45 +0000
Manifest this update: Tue 04 Nov 2025 13:00:45 +0000
Manifest next update: Wed 05 Nov 2025 13:00:45 +0000
Files and hashes: 1: r_HNv5fWyiB-XciFq8_2ccwVyRA.crl (hash: 7RD6DeIbXjeXbJN6qVcFuXfSozDp8T3FlTIB661n9gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9d:9c:06:f6:b5:88:69:a8:93:cd:f3:cc:60:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Validity
Not Before: Nov 4 13:00:45 2025 GMT
Not After : Nov 5 13:00:45 2025 GMT
Subject: CN=4bb6ff22746958038a578fec8afb530375938913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:a7:46:67:e6:f3:20:e4:be:e2:62:0f:9e:
ae:a1:fb:2e:7c:fd:6f:4f:5b:37:6e:d3:a5:6d:5d:
10:18:43:68:cf:b2:d0:a0:06:08:32:df:df:7c:2f:
6e:9e:48:67:72:a9:59:72:8a:dd:13:be:9d:19:ed:
93:6c:e9:ba:9f:8d:a3:2f:58:a4:ba:71:06:32:1f:
5a:06:fc:86:c8:64:20:15:4d:a2:8a:b9:af:dc:f4:
3d:0e:5f:26:50:f9:9b:fa:35:4e:56:c9:82:d2:87:
52:ba:46:32:a6:11:a1:94:e8:bb:a0:89:42:9c:0e:
99:7b:48:15:76:4e:f1:de:8f:ef:a7:c9:26:76:b8:
82:f2:7c:9e:0e:71:94:71:ca:2c:c2:d0:ce:1c:2d:
99:67:d4:14:2e:a2:c1:a2:29:26:fc:25:f6:0f:be:
fa:29:b3:fb:15:27:f5:8a:e8:71:bc:ba:f3:89:01:
34:97:98:60:0b:d8:fc:12:6e:d1:3c:92:e2:58:50:
7a:1e:09:68:bf:54:a9:ed:16:09:41:d2:9b:01:d7:
28:54:ea:0f:4f:5b:d9:d2:74:40:b9:79:4c:71:16:
e0:c7:01:6a:7d:a0:b0:4f:bc:0b:c1:90:66:aa:4e:
2f:1e:8e:e7:ac:2f:00:f5:45:d8:07:c6:2d:47:70:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:FF:22:74:69:58:03:8A:57:8F:EC:8A:FB:53:03:75:93:89:13
X509v3 Authority Key Identifier:
keyid:AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e6:50:56:71:0b:56:9e:b1:04:7d:8b:2a:b3:7e:a1:50:61:
84:0e:a4:e9:f0:06:b9:73:68:62:09:b8:8a:12:04:b1:51:4d:
3b:35:86:a6:e9:c6:21:d1:d1:86:67:1e:03:67:7c:a7:cc:ef:
68:2a:92:9f:e5:cd:14:8e:f0:4e:9b:bc:6f:df:99:01:69:3b:
60:4e:73:3d:5d:45:bd:ab:7f:74:ec:42:30:62:c5:b2:da:0f:
ec:9d:05:40:d9:15:a2:37:5d:89:8f:27:56:5b:b8:45:8f:cd:
c8:86:10:6c:10:c9:a2:f2:1f:49:48:e6:43:92:97:60:de:72:
72:cf:62:c2:9e:4c:9a:6c:3b:ae:b2:4b:c5:60:71:a6:3e:49:
b0:33:46:17:38:82:4a:ee:fa:02:2f:37:f3:e9:f9:0c:92:87:
89:d2:b0:09:54:68:81:51:a1:76:c9:f8:df:f7:42:55:1c:40:
00:ec:ef:90:c0:74:fd:d9:44:2a:dc:c9:46:46:eb:0f:27:8e:
e4:ec:74:de:ee:bd:5c:02:3a:ab:88:71:e5:b7:20:ae:02:07:
f1:9a:b0:b6:65:35:89:0d:97:e8:e5:d3:7a:bb:4f:b7:4b:59:
64:b8:d4:b1:e3:81:a5:7f:d2:61:8e:d4:c3:91:8c:3e:bd:e2:
bd:64:52:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:07 2025 by rpki-client