Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json)
Hash identifier: tA1lDNNH5Q1V1UtWJGtOJn8gS8kSPNOGtqj0gr+P1zs=
Subject key identifier: 71:F5:0E:9D:39:C8:90:43:C0:F3:5A:75:15:2F:C5:9F:D8:10:88:CA
Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Certificate serial: 019A4F98EBE27A28BC0BD85027BFF5E7B983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
Manifest number: 0620
Signing time: Tue 04 Nov 2025 16:00:12 +0000
Manifest this update: Tue 04 Nov 2025 16:00:12 +0000
Manifest next update: Wed 05 Nov 2025 16:00:12 +0000
Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: cTP75XMn573SeRsDz1enqgBwlcn8fYekJ9THbkK+PTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:eb:e2:7a:28:bc:0b:d8:50:27:bf:f5:e7:b9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Validity
Not Before: Nov 4 16:00:12 2025 GMT
Not After : Nov 5 16:00:12 2025 GMT
Subject: CN=71f50e9d39c89043c0f35a75152fc59fd81088ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:01:94:04:55:f1:5a:92:a5:9e:dc:42:f4:
73:c6:2d:d8:2b:0f:1b:0b:87:51:8d:70:36:52:cf:
06:cd:de:71:08:b2:36:8c:cf:1c:ba:45:2c:8e:81:
2c:ca:87:0a:d9:39:00:08:f7:3d:19:03:9d:48:e1:
2f:de:d9:3c:0e:14:67:01:07:b8:93:0a:2b:57:c9:
1a:7b:d9:ce:05:d9:ad:e5:cc:cc:0a:86:d4:b6:fe:
a2:1b:45:44:7a:44:4a:bd:36:1c:1d:68:b4:4f:9c:
42:02:7d:a4:90:68:5e:6a:75:4c:0a:bc:1d:2e:73:
8a:ec:71:33:58:2f:0a:a6:e7:dd:ae:65:9f:e7:12:
c7:2c:6f:23:82:c3:e8:36:ad:72:2a:83:e1:07:70:
94:df:78:34:d0:c8:70:dc:9f:92:58:88:eb:f2:fc:
a8:99:21:1d:ca:8d:8d:5f:5c:18:38:8d:31:d8:07:
08:30:48:8a:d2:d4:17:bd:8a:32:2e:4d:17:85:15:
49:29:4d:2a:47:cf:fc:a1:a2:b6:aa:39:c3:d0:5f:
e6:bc:6c:b7:be:b5:d5:cc:27:b8:dd:9c:0d:74:2b:
e6:1c:58:12:7f:af:15:9a:15:72:92:4b:95:77:64:
83:7f:0d:ed:5b:0c:81:a5:f1:0d:54:eb:ea:a7:3b:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F5:0E:9D:39:C8:90:43:C0:F3:5A:75:15:2F:C5:9F:D8:10:88:CA
X509v3 Authority Key Identifier:
keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:98:b9:43:fa:ab:8a:56:eb:fc:a8:14:29:36:e3:82:b0:11:
79:ab:ef:2d:92:5c:dd:ea:71:ed:c8:c0:91:a5:68:be:a8:29:
8f:56:8a:de:f3:da:67:6f:b8:75:4a:9b:c2:18:b9:da:9a:64:
4b:71:c9:e8:78:bd:6f:0d:8d:2a:af:90:29:80:36:81:b3:9b:
6a:ea:81:02:d9:3f:bf:a0:14:ab:99:19:98:7c:d2:aa:09:1d:
80:08:ee:53:5d:14:3c:ac:e0:f9:31:01:36:16:84:6a:5f:1b:
4d:f7:a7:09:c7:52:1b:00:b0:f4:49:7e:24:f4:ea:2d:93:a1:
91:da:a9:56:3f:c7:15:72:1e:f6:5f:94:69:a5:c4:d2:ab:2e:
84:b4:81:d2:b9:19:71:df:75:55:5e:c4:fc:1c:44:f9:6c:eb:
ef:3b:fc:35:a6:d0:59:72:24:d3:1f:17:c2:12:58:92:6e:c0:
f0:e9:fe:6f:d7:8e:44:b0:f0:80:2d:e2:d0:79:e2:06:47:9b:
e6:0e:59:eb:d5:15:39:3c:80:94:48:60:b4:07:ab:41:65:1a:
46:bc:45:91:c2:4f:bd:90:2f:b4:d7:e7:00:30:e0:bd:2c:40:
8c:c4:8a:47:96:aa:4e:fa:61:c3:6e:b0:60:18:10:a2:43:80:
17:f9:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:22:45 2025 by rpki-client