Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json)
Hash identifier: bbDpjurS9xert9zLgTfVjhK3XBn/Ec2VjnE5krbjV2U=
Subject key identifier: F1:6D:36:C8:93:F9:3A:B0:D1:6A:6B:B6:65:6A:6C:36:5F:FE:13:D8
Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Certificate issuer: /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Certificate serial: 019A54BF5327D02685FA4B6F35F284B8CEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
Manifest number: 068F
Signing time: Wed 05 Nov 2025 16:00:16 +0000
Manifest this update: Wed 05 Nov 2025 16:00:16 +0000
Manifest next update: Thu 06 Nov 2025 16:00:16 +0000
Files and hashes: 1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: hV3JmI+mKWyeF6d/LGCqJhISNafoAIcID3lHGPpxWMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:53:27:d0:26:85:fa:4b:6f:35:f2:84:b8:ce:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Validity
Not Before: Nov 5 16:00:16 2025 GMT
Not After : Nov 6 16:00:16 2025 GMT
Subject: CN=f16d36c893f93ab0d16a6bb6656a6c365ffe13d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:da:cb:76:c8:b1:d3:9e:8b:9a:6d:0f:83:
53:f2:ed:54:bb:05:e2:1a:90:07:6f:41:1f:d8:9c:
43:8e:39:4d:12:92:e2:d9:2a:a5:6e:b3:b1:59:c3:
f3:86:d1:ae:20:07:fc:99:7b:75:a1:6d:c6:e2:24:
43:1d:df:89:d1:8d:17:38:7d:8a:9e:45:94:b3:b6:
67:bc:67:77:9a:80:87:73:66:e6:c1:92:a1:97:43:
6a:b2:3c:dc:ff:02:64:0c:9a:c8:83:8d:29:cd:d2:
b7:1e:ed:47:58:c4:17:07:4b:1f:f1:56:92:87:b8:
12:5b:51:a6:02:0b:7d:ef:96:f7:17:74:a3:4a:e5:
d8:ef:8a:be:64:6c:61:dd:63:e8:68:a2:41:b7:ae:
81:93:56:a5:98:c6:d2:9c:e2:b6:ff:c7:00:7e:40:
f8:b8:a7:a5:32:81:95:76:9a:d8:40:0d:40:ec:3a:
3e:d9:5c:50:55:61:60:96:94:04:dc:47:16:50:51:
2a:03:dc:1e:39:13:45:9f:bf:e7:28:f4:5d:01:3f:
7c:db:ac:ea:04:7f:b6:c6:15:93:2d:80:0e:33:5b:
9c:99:4d:2c:0e:de:83:08:5c:3d:66:72:d6:f6:81:
80:f4:39:fd:70:5b:61:41:76:b3:be:3b:e4:8f:ad:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6D:36:C8:93:F9:3A:B0:D1:6A:6B:B6:65:6A:6C:36:5F:FE:13:D8
X509v3 Authority Key Identifier:
keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f9:74:74:e4:3d:b2:8b:5d:aa:88:35:94:05:3e:df:3c:2a:
04:e3:77:a0:d0:ff:38:a2:b0:ce:10:6c:61:22:a4:d2:12:e0:
17:dc:57:79:c0:10:e5:a3:52:63:73:1e:02:25:c3:60:6a:ca:
30:3c:b6:1b:6d:26:56:2d:99:e8:9f:cd:0e:d2:27:4c:c1:63:
a5:ad:f6:bc:22:03:80:b9:27:c5:a4:33:e5:45:04:93:15:ac:
fa:5c:a6:13:9c:df:22:60:20:47:0e:42:da:ca:b1:91:be:00:
c1:ff:50:38:73:a1:44:5d:fc:e0:b9:21:0f:81:61:7f:6c:ba:
67:f5:3d:94:ab:77:42:d6:ce:1c:b8:7f:ed:94:33:97:b0:bb:
30:cc:62:02:76:22:67:60:80:5c:e6:83:ba:64:ff:0b:b0:d4:
d5:6d:28:50:26:31:4a:7b:6e:ad:74:ad:03:2c:3d:61:73:f0:
2e:fc:c4:99:fc:23:48:e5:39:dd:25:55:eb:c0:1f:3a:f7:55:
f6:15:90:70:c4:b1:92:eb:2c:e3:38:55:d7:18:aa:e2:d9:12:
16:7f:7e:fb:52:9e:90:5f:79:fe:48:a2:83:9c:ec:b8:36:4c:
23:a5:ec:29:45:c6:36:76:6c:3d:f8:f0:7e:c5:b7:a3:16:87:
ec:1b:d6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:41:25 2025 by rpki-client