Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: K07sZvlzHu0A/mdl2TsIPlYDHKgeFlBCX2nkdMaBrvQ=
Subject key identifier: 16:F4:C0:23:96:80:7D:61:51:45:4A:30:7D:10:89:A1:74:3D:DF:85
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 019A4EF5EA787739BCF1D586E4C1E2C8812E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: gRWoPqr/zVar1G+GRVjavjbiGEV/PEM3VbbcLK2Rt8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ea:78:77:39:bc:f1:d5:86:e4:c1:e2:c8:81:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=16f4c02396807d6151454a307d1089a1743ddf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:dc:7b:90:00:0e:cc:21:b8:22:f6:f1:c5:
37:5e:6e:5f:d2:db:e7:80:f5:d1:c0:88:87:23:cf:
11:68:53:f0:06:95:63:54:d5:19:fc:ac:82:8c:17:
5b:7d:c2:88:3c:a3:42:9c:f2:15:0f:ab:cb:55:8a:
2f:6f:4c:e3:cf:d7:b5:d2:e2:ba:86:b7:18:94:60:
5d:46:bb:eb:e0:58:e1:0d:34:ea:e0:24:0f:97:4b:
1b:cd:7b:bc:03:6b:3d:ce:a7:4d:9a:d8:f4:30:16:
93:35:ef:b3:9e:06:63:a7:75:02:4e:e1:31:9a:02:
8b:94:0d:6f:ef:80:23:eb:01:1e:6f:b4:12:58:b1:
d9:12:c8:62:7e:b9:f3:f4:6b:3d:1f:9e:41:94:31:
e5:28:a8:2a:8f:7d:27:72:71:c4:31:37:8b:9f:0d:
7b:98:26:a0:e5:2c:ce:a6:64:ef:28:ea:60:04:9b:
63:5b:bf:c8:6d:42:9a:40:13:81:03:60:05:76:e4:
59:de:3e:87:5e:27:a1:d4:21:86:65:b8:78:e4:b0:
ad:8d:99:32:94:8d:1a:91:f4:9d:a5:97:d2:36:b6:
f9:01:0e:7a:a6:76:fd:74:86:74:65:cb:f1:70:7f:
79:fe:7e:74:f0:09:d5:b8:24:0c:7a:6f:46:c2:67:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:C0:23:96:80:7D:61:51:45:4A:30:7D:10:89:A1:74:3D:DF:85
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:00:b2:a1:fc:18:0b:c7:b2:67:f8:15:03:1b:21:fc:47:c1:
7d:44:d8:a4:6f:8d:45:1a:05:36:3d:92:57:51:46:6b:9e:a7:
60:0e:e5:a1:f1:d7:9b:86:f4:1e:7b:38:2c:2e:a9:1f:a2:e4:
9d:b5:cc:4b:8a:f8:b2:26:e5:82:77:a4:5a:ee:0a:5b:ea:b6:
d0:d1:2f:5c:7f:5f:25:07:1b:22:4a:ef:c3:cf:b4:c6:13:c4:
55:ad:b9:f1:73:88:62:6f:fc:75:ed:6a:97:19:20:9c:87:38:
80:c6:d5:5f:69:71:43:10:48:61:80:83:af:fd:ee:6c:d1:3f:
4a:41:7c:fa:a1:41:db:c9:a4:8d:1e:99:03:df:18:c3:6a:ff:
29:2e:a6:dd:ae:9b:82:17:67:66:66:1b:6e:5c:f0:6d:63:6d:
90:c4:56:5a:3d:5e:b3:02:0a:50:64:7b:c9:b8:40:3e:4b:3d:
e4:81:a7:53:ec:03:48:4e:19:76:a1:62:60:d9:e7:e7:39:aa:
e1:24:f5:47:57:7f:36:bf:33:69:b9:c5:9e:cc:b5:72:17:ba:
31:a2:d9:8a:f6:53:c4:0b:6f:3a:99:53:5c:dc:fc:8e:a2:e2:
c4:2d:cb:04:c0:1d:e8:9b:dd:61:98:f5:bf:81:4d:38:ec:33:
a3:34:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:42 2025 by rpki-client