Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
File: H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json)
Hash identifier: va6/GtjefR61yHCErPnhOllN7nwNWn9rLLfl/37jzaw=
Subject key identifier: 69:F9:D6:D6:86:CE:74:53:9C:E9:15:BD:DB:67:3F:B2:55:52:B2:D5
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Certificate issuer: /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial: 019A72940842694FB5D9819788B0BFA3AA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
Manifest number: 05E6
Signing time: Tue 11 Nov 2025 11:01:35 +0000
Manifest this update: Tue 11 Nov 2025 11:01:35 +0000
Manifest next update: Wed 12 Nov 2025 11:01:35 +0000
Files and hashes: 1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: ecfsEHJM07MgF8M5yqklT8TDsjXgx8ymoP4oYFpukqc=)
2: y-Jj6DyqKWn6BYWapkymjYaL5QU.roa (hash: gn98KweekT80SkX3KfiuOUzbXsngJC/J9zd5eWO66No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:08:42:69:4f:b5:d9:81:97:88:b0:bf:a3:aa:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
Validity
Not Before: Nov 11 11:01:35 2025 GMT
Not After : Nov 12 11:01:35 2025 GMT
Subject: CN=69f9d6d686ce74539ce915bddb673fb25552b2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:b4:52:40:e6:ba:f6:7b:1e:f9:8a:17:f2:
a9:b2:3d:1c:a7:9d:12:50:38:9a:d6:86:ec:7a:32:
80:93:95:9a:62:20:89:58:77:cd:91:97:3e:e5:8a:
2a:dd:03:ec:27:51:06:6f:a0:d0:4b:45:32:99:fc:
6b:49:b7:c1:d3:49:0d:03:17:f8:2f:04:b4:9a:fa:
79:50:19:c2:4f:96:b5:df:31:f0:db:11:bd:e2:35:
e3:de:a2:65:56:a1:16:c5:04:da:7e:b3:f1:d3:54:
98:9f:9b:9b:fa:bc:a4:36:e0:4a:fe:4f:9b:9a:9d:
4c:29:ee:d4:02:fd:ed:52:3f:3a:fb:50:f6:48:ad:
2d:24:1e:d3:3b:42:89:a2:47:36:bc:44:80:c9:21:
3e:79:80:39:9f:bb:b0:6a:f4:ea:f0:cc:23:90:91:
7e:af:4f:dc:e8:bc:ce:2f:1a:ba:d2:95:c3:0c:57:
86:84:a7:70:65:1c:54:4e:e3:6c:ac:1f:55:30:cb:
06:db:2b:b4:af:40:76:0b:27:fb:af:62:2d:f6:24:
50:a3:59:87:82:c7:91:ce:8e:d9:da:0f:a7:b6:80:
87:72:8c:1c:c0:a4:da:5d:e7:51:f0:1a:29:1d:ce:
53:a6:3a:e4:80:3a:6c:71:dd:3e:be:f9:cd:df:a9:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F9:D6:D6:86:CE:74:53:9C:E9:15:BD:DB:67:3F:B2:55:52:B2:D5
X509v3 Authority Key Identifier:
keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:86:21:f9:cf:3f:6b:da:3c:ea:ab:9b:16:7c:5e:11:ad:41:
b1:e3:23:7a:64:fd:8d:25:47:c1:31:2b:46:ed:f9:3d:ff:32:
f5:24:fd:2c:29:26:13:72:70:ea:b2:16:61:80:9b:d9:2c:d2:
d6:95:38:c0:ff:aa:d0:27:5b:c6:cd:a6:38:04:b2:fd:95:75:
a6:80:0f:fc:0a:a6:84:c6:9d:f3:a9:f0:bb:56:36:b2:e4:2c:
35:9f:bf:0f:09:d7:b4:f9:23:bb:db:27:5c:ae:5d:d0:20:37:
64:bd:45:8a:d7:71:bc:a7:96:a0:68:18:8f:ee:8f:69:56:a9:
bb:e9:24:65:6b:80:39:f1:17:0e:93:2d:b8:25:2a:e6:d2:db:
c8:50:d4:2a:36:2e:ca:b5:42:b8:ef:06:90:94:6b:12:08:cc:
2b:c4:1c:1e:68:7f:cd:87:a9:43:93:5b:1f:76:c7:d1:f5:2b:
9a:a3:5b:88:ce:5f:6b:90:28:67:df:b2:e2:0b:88:82:a6:a5:
e0:e2:d7:69:c6:19:de:d3:fe:4d:c9:01:e0:eb:7e:e7:13:94:
75:3d:76:9d:d2:c3:09:0b:28:b9:fb:14:38:21:96:15:67:8d:
37:97:ba:50:c6:26:6f:c9:c7:2d:8a:4d:e1:4d:5a:60:59:4b:
3a:55:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:41 2025 by rpki-client