Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
File: H0qus-K3pD3wHzHVGiDvIlXOr-M.mft (raw, json)
Hash identifier: RlX82yPVkdZo5fQeVHx7rYqo+daKvInJnid1oqfUdDA=
Subject key identifier: 49:21:AD:11:C9:2A:2C:69:0F:37:79:6A:EE:D4:5E:2D:B7:DC:D1:77
Authority key identifier: 1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3
Certificate issuer: /CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3
Certificate serial: 019A71B8B1A94536F2BE9AF08FBB2EAA2292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
Manifest number: 05C0
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: H0qus-K3pD3wHzHVGiDvIlXOr-M.crl (hash: Q7C+pNo0B0NWHhw7RDlADADSJjNistWPevP7vkoxR5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b1:a9:45:36:f2:be:9a:f0:8f:bb:2e:aa:22:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=4921ad11c92a2c690f37796aeed45e2db7dcd177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:0b:1b:93:25:1c:27:1c:8f:04:2b:d9:9d:
9c:09:3b:1b:f2:9a:09:f6:4f:bb:9a:25:5b:23:78:
9f:8e:dd:d7:dd:83:46:86:a7:03:eb:0d:39:8b:0f:
b2:83:4b:96:b9:82:1d:e4:11:47:84:aa:76:06:8e:
03:cd:1c:49:fd:36:97:26:60:d7:40:90:34:e7:76:
45:c7:c7:28:ec:6e:8e:e8:9f:7a:52:ea:43:14:e7:
6f:84:5f:c2:a0:e2:7d:f9:d3:e5:06:bd:aa:d3:d9:
67:df:fe:6c:75:1e:43:fa:a5:20:5b:f2:a1:91:47:
e2:05:07:3e:2f:35:11:67:0f:11:ea:76:db:a4:41:
17:7a:fd:f0:b1:8d:3c:21:fd:a2:cc:ce:d3:b6:e5:
de:73:f2:aa:99:d4:63:eb:32:75:6e:d8:c5:0e:35:
47:a4:4e:2c:2a:71:13:05:77:19:07:c3:59:67:d8:
57:ca:2d:27:f0:f9:49:5b:26:1a:32:67:3b:95:37:
48:68:3c:26:c1:b8:64:1b:b0:30:05:8f:f8:a3:de:
81:43:fc:11:0c:fb:64:c1:06:e1:e6:5c:d4:d6:cc:
06:a2:33:c6:b1:0e:27:12:1f:ce:86:22:f5:a4:28:
9a:5d:eb:8b:cb:af:bd:46:4f:4f:1b:60:0f:e3:18:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:21:AD:11:C9:2A:2C:69:0F:37:79:6A:EE:D4:5E:2D:B7:DC:D1:77
X509v3 Authority Key Identifier:
keyid:1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:83:ff:a9:b6:dd:c7:bc:72:11:db:3a:9b:da:be:c5:3b:9b:
44:ba:4b:7e:ee:d1:22:d9:66:d8:c3:52:8f:df:92:0c:5c:61:
64:c8:3d:93:93:6c:11:bb:1b:67:8d:47:f6:4f:1b:dd:a9:37:
92:34:a5:4b:ab:a3:2c:70:cb:22:fe:04:eb:38:5e:6a:e5:f1:
0c:22:3f:a2:10:f7:90:5f:0c:c4:7b:d6:d0:ad:16:d4:b7:68:
9a:aa:02:18:53:30:8c:9a:74:f1:cf:8e:7d:3e:45:a3:4c:52:
18:6a:b3:9f:7b:bd:cc:1b:d6:6f:20:02:1d:3b:11:d1:c3:ab:
96:a1:fb:fc:90:a5:74:e7:2c:23:e1:41:79:f6:07:25:67:65:
7c:1c:80:ab:a7:70:09:95:b8:e2:bc:66:81:9c:6d:4b:8b:cb:
33:12:a8:43:86:d9:e2:b2:e7:c0:77:5a:6b:80:f0:ec:73:53:
c5:e6:b6:46:83:39:51:27:77:b0:56:f0:5e:99:f6:ed:64:85:
ee:af:ef:2a:d4:33:bf:da:53:ff:02:87:c8:af:81:11:db:e2:
b8:9b:32:39:df:dd:8c:6c:94:1b:54:4f:dd:61:21:1b:ff:e0:
7b:36:01:cf:f0:8e:bd:f6:59:18:cc:b8:e9:15:c5:42:e2:9c:
55:bb:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:49 2025 by rpki-client