Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier: OWehVgxxBKgCrCi4Jigk0SVRoEL9aIlOKPd8cNhNIN0=
Subject key identifier: DC:9C:8B:1E:B6:83:17:E8:F2:12:05:C4:EE:FB:A5:52:2B:7B:A4:24
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 019A4C6136A09CD6F39172ADA62AEA68B98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number: 0588
Signing time: Tue 04 Nov 2025 01:00:30 +0000
Manifest this update: Tue 04 Nov 2025 01:00:30 +0000
Manifest next update: Wed 05 Nov 2025 01:00:30 +0000
Files and hashes: 1: 2IUVrUcX57wEcebuPBNhbM7rtII.roa (hash: xFARryMWCZ7xJebZzJ48q6NyTNbF+EONupkOj48G4Zc=)
2: 3mgL5kmPTE1KzgmolBjYNrOCQw4.roa (hash: 4p0hGsG00DucWMHppeS8f+vIw114RVg7ok5Btqh+zyQ=)
3: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: t9mjHtNSI0jQRg0hKLjAsp9FoObufuYQTf0s7qwiy/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:36:a0:9c:d6:f3:91:72:ad:a6:2a:ea:68:b9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: Nov 4 01:00:30 2025 GMT
Not After : Nov 5 01:00:30 2025 GMT
Subject: CN=dc9c8b1eb68317e8f21205c4eefba5522b7ba424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:02:b6:14:73:2e:d3:64:20:4b:7b:f3:a4:
b7:60:e3:bd:b3:02:3e:a3:04:6f:7c:8a:1a:ec:5e:
04:89:9d:5b:21:85:4d:77:4d:ac:68:eb:64:58:e4:
af:71:42:ef:de:56:24:dd:d5:12:d3:4c:13:5e:bf:
fb:d8:e5:7c:7e:c3:0b:24:f5:78:6d:62:68:43:53:
b8:5b:1c:85:ff:21:41:4c:e6:68:31:66:f8:f3:16:
b1:a4:46:7d:c2:51:59:6f:0f:a7:59:ed:7d:83:ad:
8d:4d:16:5c:a6:69:5c:98:f4:2e:af:3e:72:55:59:
14:28:58:8d:6e:b7:ef:b1:46:80:fc:82:7e:70:48:
e2:0e:91:7b:b2:83:12:d5:36:40:ec:40:7d:32:3d:
43:3b:49:8a:ed:fe:01:6d:44:2b:64:67:ac:81:48:
58:07:21:47:62:c8:10:0f:d3:8b:70:2f:0c:31:11:
3b:0a:56:95:85:a1:ad:7e:f7:b2:25:1b:7f:17:0b:
8c:86:8b:7d:1b:f5:3a:36:16:8d:5e:11:1d:69:20:
0b:cd:92:d5:96:c3:7c:a3:49:b0:5c:da:6d:29:d9:
df:f6:58:9d:a0:49:a0:a9:59:07:42:73:9f:5d:e1:
8d:a2:7a:43:87:03:bd:30:58:67:21:7e:9b:54:70:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:8B:1E:B6:83:17:E8:F2:12:05:C4:EE:FB:A5:52:2B:7B:A4:24
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:3a:cd:5b:d3:9a:55:08:f8:bb:53:1a:70:9b:16:9f:c9:e5:
08:f2:5a:29:8d:e5:ab:6d:c7:93:79:12:db:c1:87:dd:6d:79:
30:d5:d3:98:6b:e2:2c:57:90:8b:3b:05:89:0f:50:4e:b4:a8:
d6:32:7c:a1:09:7a:56:91:8c:42:53:0a:cb:d0:d9:a7:9f:a6:
3d:e3:8d:b4:b3:ca:94:0f:03:b4:bc:d6:77:2b:8a:9a:c5:a7:
45:a1:05:72:77:6a:45:64:f8:2b:08:f2:dc:6c:46:ae:c4:67:
8e:5a:01:3e:f9:32:bd:25:c9:d6:1d:15:52:d6:10:cc:78:e9:
97:57:36:eb:18:4f:a1:02:c6:83:8b:84:3d:82:fd:08:36:5e:
1b:63:76:a3:d2:d7:a6:c7:cb:af:b0:c9:a5:87:24:a2:42:3b:
ee:19:f1:0c:84:aa:fd:95:56:d8:c5:85:2b:18:0d:71:ac:70:
38:66:f6:5c:49:ed:77:da:b6:01:c7:21:aa:33:6c:91:2a:13:
55:45:ea:34:f2:53:fc:0f:e9:a5:d7:7f:58:0c:c8:5c:4d:82:
7f:c9:42:e5:53:3b:66:e6:83:ef:97:cc:21:7c:ad:2e:e0:67:
28:93:b9:3c:a1:25:64:7e:73:a0:64:5b:42:bd:02:0c:4f:b4:
f9:21:7c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:17:45 2025 by rpki-client