Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: b2FJm6+AfhNHLNsrR7RUlifivXFygz6HVKvwxiR0owg=
Subject key identifier: 66:B6:0D:B2:0E:6C:7C:A9:56:79:49:D6:51:41:E8:FA:44:8C:57:8E
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 019A1428F4CD94EF76F2A3F2DC03E4E25E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0DE0
Signing time: Fri 24 Oct 2025 03:00:19 +0000
Manifest this update: Fri 24 Oct 2025 03:00:19 +0000
Manifest next update: Sat 25 Oct 2025 03:00:19 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: 558UjotB/Gcjn5KO55ook8TC1Y/6ZAnJDOV0fZIjusY=)
2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:28:f4:cd:94:ef:76:f2:a3:f2:dc:03:e4:e2:5e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Oct 24 03:00:19 2025 GMT
Not After : Oct 25 03:00:19 2025 GMT
Subject: CN=66b60db20e6c7ca9567949d65141e8fa448c578e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:bf:bb:86:bb:e7:28:39:0d:88:5c:fe:39:
0d:af:a8:b6:0d:77:a1:c8:4f:e8:21:4d:8e:12:ec:
e4:bf:56:f5:2b:8e:ba:af:6d:da:71:12:c4:72:ce:
7a:5d:da:7a:da:dd:b8:b2:17:2b:ab:f5:43:70:26:
b6:a1:6a:27:e7:ea:97:fb:35:61:c5:7d:dc:5b:f8:
91:8a:d5:34:e4:89:be:5e:06:b5:95:b4:27:a6:48:
33:25:07:cd:bb:d1:78:14:9d:89:07:1d:fb:f4:22:
34:ae:f8:0b:06:cf:05:f1:fd:08:cf:67:6a:ca:d8:
f5:3d:71:2e:c1:e4:3f:13:fd:4e:a8:a8:e8:93:bc:
1b:b9:75:c4:fb:87:6e:8d:80:04:44:fa:4d:ec:80:
ca:eb:b6:2e:ba:27:e2:25:b5:13:d4:8e:a1:31:b8:
e4:42:c5:b8:fa:65:46:6c:d5:7c:e7:fe:ad:27:4c:
04:41:8a:ca:4b:8c:27:cf:69:eb:82:2b:63:6a:4d:
7d:93:70:f1:66:fb:58:a9:ae:44:d3:02:bc:ff:34:
99:81:79:ea:71:b8:2b:4f:65:02:df:96:2f:6c:67:
84:26:fe:82:a4:d7:56:6b:83:3c:6e:ae:45:eb:b0:
3e:ba:56:f5:d7:45:b7:8b:1e:50:be:50:4a:f8:fa:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B6:0D:B2:0E:6C:7C:A9:56:79:49:D6:51:41:E8:FA:44:8C:57:8E
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:98:d3:d6:ab:a5:68:28:76:e4:ab:bb:02:f4:98:4f:80:81:
8d:1b:cd:00:19:05:1b:83:c8:b6:ed:55:d9:22:98:28:04:b3:
68:24:9b:d4:fe:1c:49:46:e3:a9:b7:35:c7:97:de:7e:31:e8:
82:0a:90:98:b6:ad:04:69:ef:54:d0:d0:a6:6e:53:cb:5a:f7:
ed:ce:5c:bc:7c:1e:05:ba:34:58:25:03:02:b3:d6:0b:a7:14:
f4:53:fe:f9:e9:d0:6e:2c:9e:63:44:33:38:1b:1e:0d:9b:77:
6f:c2:06:80:a0:75:83:72:1b:d6:71:05:ca:9f:f3:2e:5d:28:
c1:99:dc:e8:f1:14:f3:67:67:10:8f:7b:2c:1e:9f:89:af:ac:
3f:a8:01:02:e1:8f:38:5e:45:ec:3f:7c:73:6c:84:ad:bb:49:
36:f0:76:64:b4:fc:2e:19:2f:eb:f7:8b:ec:d0:db:9f:d8:7c:
91:47:66:be:a4:31:f0:3d:2c:d2:16:c2:b4:77:85:e8:5c:92:
05:a9:bb:f6:d3:7f:35:2f:17:e1:39:ff:ec:45:bc:9a:8c:24:
22:28:5e:82:0f:99:a9:4b:27:22:de:94:3a:7c:7c:87:6e:73:
c7:e3:8f:2e:45:fc:03:7f:ef:b8:2a:9a:85:c1:bb:63:b8:27:
c1:f1:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:14:31 2025 by rpki-client