Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: FXV1k0l1/jCg3M+TEYzatD8gpq1wkePNyOSYt2tJozQ=
Subject key identifier: 72:CA:53:4B:31:09:5A:B1:77:CE:80:F9:5F:85:84:00:A4:0D:0F:E4
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 019A714991BD6A51C6958A49BA829D57DCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 16B2
Signing time: Tue 11 Nov 2025 05:00:38 +0000
Manifest this update: Tue 11 Nov 2025 05:00:38 +0000
Manifest next update: Wed 12 Nov 2025 05:00:38 +0000
Files and hashes: 1: GYb1F3991igV-Xs-ZoTKTm-Vg7M.roa (hash: oDfsrWpPRTbFkqWOBaawHb+IseXIbMKYHakcvEvzdXQ=)
2: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: QiXnlw6mU0RrJNKNBoTYsmYBmTrt5oqj8OpXGa8SMEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:91:bd:6a:51:c6:95:8a:49:ba:82:9d:57:dc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Nov 11 05:00:38 2025 GMT
Not After : Nov 12 05:00:38 2025 GMT
Subject: CN=72ca534b31095ab177ce80f95f858400a40d0fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:f5:d8:9b:f9:a6:6e:13:3b:77:63:3f:66:
d5:66:c3:64:ec:1e:1d:f3:6e:bb:76:5d:96:07:d0:
16:fe:55:3b:83:74:58:6d:ec:a8:e2:f2:5f:fb:2e:
d2:e9:69:d0:a3:65:c4:53:1c:09:05:60:66:1e:7c:
c2:e6:88:81:28:cc:9c:37:19:72:da:b2:55:fa:18:
61:cf:16:4f:73:48:6f:db:29:79:fc:9a:e0:2e:b1:
af:90:a6:bc:c6:4f:e5:23:84:07:4b:cb:10:b3:52:
f9:49:3c:10:ea:7f:d6:87:20:01:81:01:26:70:81:
22:24:84:48:88:2d:ba:39:1e:d4:c3:71:4b:bb:d9:
9d:20:73:c3:6a:91:f9:b2:60:b3:37:f1:7a:84:4c:
6b:19:0f:0a:87:8c:d5:3a:d6:d2:fa:d9:ca:03:93:
db:0c:2f:a6:e6:e3:15:a7:7c:87:0a:ee:06:84:8f:
49:1e:1c:7f:3f:89:50:b1:68:72:7e:0e:86:8b:b7:
87:5c:b9:b1:a1:2a:c3:24:87:ac:3c:dd:d1:e6:41:
99:7d:97:5f:12:4e:5a:cf:d0:65:a6:c8:2e:a6:58:
bf:cc:5c:84:21:e2:72:b3:d5:0b:8c:8a:65:06:8c:
8d:b3:d2:c6:3e:f6:20:9c:dc:95:ec:ef:8a:6b:f5:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CA:53:4B:31:09:5A:B1:77:CE:80:F9:5F:85:84:00:A4:0D:0F:E4
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:a8:88:fa:d2:d6:42:d5:2d:d6:42:86:68:f7:74:42:a2:
4e:6a:33:08:df:8d:a5:6f:a4:d4:f5:e1:85:a5:bf:69:fb:83:
74:58:ad:10:bd:d0:a2:4d:ed:7f:3c:7e:f2:79:a2:64:e3:bc:
c4:b6:7f:49:ed:74:31:74:a6:7e:d4:64:94:cf:ec:0c:ef:88:
d4:ec:68:0d:ab:cf:5d:f8:69:6d:5f:ae:ee:a7:9c:a0:ee:8b:
e4:fd:df:ab:07:a4:1c:e1:6c:a6:62:39:48:43:64:7a:dc:36:
46:74:2b:ef:e1:17:60:3c:04:ae:1b:83:d4:9e:24:d1:46:cd:
1d:78:a2:24:f4:21:d1:a1:60:76:c4:8e:c5:dc:e6:e5:18:b3:
3c:c4:ac:b1:cc:37:eb:c6:0c:3c:de:a3:80:46:ec:30:88:71:
37:27:fe:f3:8d:36:0c:63:27:18:32:e4:4b:bf:94:f5:95:f9:
3e:15:64:a9:16:7a:93:05:49:9c:bd:16:4b:66:66:45:69:e9:
78:27:f3:45:68:e5:dc:24:ba:33:40:2e:2a:a8:73:a5:28:94:
3b:e3:84:44:62:3c:60:7b:bd:91:2f:4c:86:dc:ad:03:2b:97:
5c:ab:1b:65:01:1d:8e:40:3a:e6:56:3d:6e:d3:84:35:94:24:
4b:f0:0c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:47 2025 by rpki-client