Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File: H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier: 5pi/9oBCQjBqehgr/8SX7n3xFH2dWIzydSTW7f4Yo2M=
Subject key identifier: AA:D4:5E:36:1B:1D:25:8B:F3:73:6C:47:9D:A2:A3:D0:C7:20:B4:39
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer: /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial: 019A70DBF47BA8A018309CBC59ACB4F6A628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number: 07DC
Signing time: Tue 11 Nov 2025 03:00:54 +0000
Manifest this update: Tue 11 Nov 2025 03:00:54 +0000
Manifest next update: Wed 12 Nov 2025 03:00:54 +0000
Files and hashes: 1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: mm4Q1eQ5xK01SJ0O1EcJ/sBTkMFEtvGXEfsBATEwWnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f4:7b:a8:a0:18:30:9c:bc:59:ac:b4:f6:a6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
Validity
Not Before: Nov 11 03:00:54 2025 GMT
Not After : Nov 12 03:00:54 2025 GMT
Subject: CN=aad45e361b1d258bf3736c479da2a3d0c720b439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:47:6d:81:72:ef:0d:9f:21:50:6f:1e:8d:
92:fd:62:af:37:fb:50:d9:be:ae:08:b5:ea:15:d3:
89:7c:70:b1:13:f2:2f:84:a1:67:d2:71:eb:77:99:
78:2c:a6:0d:87:ca:75:f3:8e:fd:ab:8a:47:94:81:
37:aa:1d:c8:4d:66:54:ce:04:10:1d:ce:ff:3e:d3:
08:b6:31:05:e6:60:3a:ab:d7:aa:a9:01:2c:2a:02:
1a:bb:34:c0:cf:10:20:6a:88:86:6c:66:c5:05:d6:
82:be:b8:0a:9f:01:11:3e:94:d1:94:b6:dc:34:1b:
9a:90:c4:ff:6e:a2:41:0b:c0:05:f0:01:0b:9f:48:
ee:8a:be:d3:79:8f:4c:57:7c:88:28:37:d6:d0:8e:
49:d7:78:52:4b:a8:c2:9a:c6:31:2a:4d:3c:62:0c:
d5:3c:e7:76:7f:59:0d:97:e5:4e:39:b2:2a:01:54:
e6:f6:d1:17:70:f6:5d:ed:e3:42:e2:eb:a4:1b:3a:
9c:a9:ce:61:aa:97:d7:16:b2:53:48:e9:6c:b6:48:
da:b4:8d:0a:ed:8a:08:af:2f:a2:86:ef:26:9c:31:
47:cd:ce:99:0a:23:8d:92:50:e8:e6:10:4d:7f:57:
03:40:c9:0f:ba:7d:08:4c:26:29:ff:f4:66:1d:c7:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D4:5E:36:1B:1D:25:8B:F3:73:6C:47:9D:A2:A3:D0:C7:20:B4:39
X509v3 Authority Key Identifier:
keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e4:46:b9:5b:83:45:15:09:c8:e0:aa:3e:21:13:3c:0a:f7:
4f:42:20:2c:29:d8:aa:8f:21:41:33:cb:0d:4b:1b:ae:23:8e:
fe:eb:4a:19:55:26:71:6f:ca:75:fd:6b:6c:24:36:64:7c:d7:
80:74:f6:ba:b6:b5:f7:25:d1:34:73:99:5e:d4:ed:ed:03:be:
b1:7b:74:97:a1:03:f1:bc:06:9e:ad:d8:15:13:7f:5c:69:12:
19:f7:36:6f:6d:a8:5b:3f:f7:96:7a:89:0e:d4:8c:89:45:54:
18:24:d9:9b:79:dc:d9:d4:56:f6:ae:ed:a0:23:1f:7d:13:d5:
ef:d5:6d:83:33:fe:41:41:4c:26:74:fb:6d:5d:72:04:de:46:
e9:ae:31:0c:e8:73:2c:1e:0c:1a:41:0c:06:06:6b:5a:3d:fd:
4f:a0:3c:9f:04:1a:e7:b8:a9:26:31:b1:9c:04:b2:e5:50:08:
8b:1d:07:3a:ad:b3:34:73:d4:0b:9b:33:1d:61:e3:8b:34:84:
ac:c3:50:d8:f1:36:7a:65:87:04:2f:27:e7:c0:3d:e3:72:58:
61:be:27:d1:90:9c:ff:74:7b:e9:c3:02:07:c5:63:4b:49:5c:
b9:d8:3b:0c:fa:ee:9b:db:58:ee:73:f0:39:c0:86:19:ae:0f:
e5:aa:a9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:05 2025 by rpki-client