Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: s8/IatTJgCMMf+cQQPEYtiqJyzREa+YbASch8YCNU4E=
Subject key identifier: 23:CE:89:B0:92:30:85:19:F2:C0:A8:D3:EB:43:23:CB:AA:93:CB:C2
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 019A1F8849A74F1470B422B50F3453FCBC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 08:00:16 +0000
Manifest this update: Sun 26 Oct 2025 08:00:16 +0000
Manifest next update: Mon 27 Oct 2025 08:00:16 +0000
Files and hashes: 1: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: Fk29TIYmSSe7AjK2SM1QvLP2TgF5TtlJ+BJfkqNuJqs=)
2: PGC2gjbo2htZQJwYOmeelo5Z83Y.roa (hash: JFulXR+ljWTJG0RiuMIfac488bMeOxp9OF6JRC9SK3k=)
3: kTvVn_B76BHAkt21A667VWLx85c.roa (hash: RlO7Fkyzwvg6DOaLdLA5nagDWX7X86stBqbWJQSamrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:49:a7:4f:14:70:b4:22:b5:0f:34:53:fc:bc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Oct 26 08:00:16 2025 GMT
Not After : Oct 27 08:00:16 2025 GMT
Subject: CN=23ce89b092308519f2c0a8d3eb4323cbaa93cbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:31:bf:01:a9:41:b6:e3:27:36:46:43:3c:
5a:9a:4f:2f:20:55:81:73:9c:67:87:8e:a9:a3:1f:
1e:4f:e6:5c:c6:d1:04:83:a3:70:6d:32:36:33:2e:
9c:07:4b:78:c4:5f:dd:5d:0e:59:88:a0:c7:07:28:
6e:e9:40:77:aa:7b:ed:70:3d:a0:fb:eb:a6:4d:ac:
e6:64:e6:fe:f8:67:21:f2:85:33:99:57:6c:67:d9:
9e:71:11:ef:b2:fc:a6:9e:5a:e8:1b:61:5e:dc:68:
87:a8:91:f9:e3:6e:ed:3b:d2:59:4f:cd:3f:49:cd:
c5:ff:1b:1f:8e:96:d5:43:8d:36:cc:03:b8:c8:14:
e8:29:ce:6f:1e:8c:6b:60:ef:65:5b:b3:86:78:90:
75:99:f7:c1:d7:b9:9a:45:d8:43:ab:1d:cf:f9:48:
3d:90:b0:4e:57:6f:60:bf:fc:7f:c9:0b:70:9e:66:
86:20:ea:8e:94:48:f1:48:6e:3f:38:45:ca:b3:22:
34:ef:12:be:79:a2:37:33:bf:07:4e:c2:e4:57:36:
9f:b1:ca:fd:36:92:07:51:0b:1a:b3:20:cb:55:dd:
50:23:5c:d4:f3:76:e0:e0:2d:e2:e2:bb:1a:6d:aa:
bb:7b:73:4b:fc:e8:fc:54:d6:9b:3a:02:f8:84:dc:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CE:89:B0:92:30:85:19:F2:C0:A8:D3:EB:43:23:CB:AA:93:CB:C2
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e9:d5:86:53:06:e8:b2:a7:1d:d4:d3:83:f9:ea:7e:93:cb:
d3:34:ad:6c:72:7f:11:78:7c:38:8f:7b:86:67:37:e2:6d:39:
58:e5:80:07:5c:4c:a7:0b:a7:b5:77:49:b1:72:38:6e:bc:3f:
ca:d6:9c:24:14:78:72:44:5c:ad:30:15:84:09:ed:f9:ad:b9:
97:7d:b6:5a:d1:56:db:5c:da:ea:df:85:a4:d6:d6:18:ea:9e:
bf:cc:d0:20:aa:4d:6a:bf:1c:0d:92:b2:93:c9:5b:6c:d7:67:
8a:a4:d7:ff:8b:87:97:fd:e9:34:ac:58:dd:b7:39:bc:d5:30:
08:a1:40:b3:9b:5d:d7:7d:4d:5d:6e:bb:33:16:08:08:cb:37:
1d:04:f0:84:00:57:f7:62:6b:77:04:72:e3:37:83:69:55:3e:
2a:f4:2a:a2:74:30:9b:63:b2:61:3e:83:99:65:64:a2:a5:85:
8e:e8:78:fa:dc:bc:1e:4a:66:d9:b6:8f:90:c0:4f:40:8b:85:
81:0e:58:7d:4a:94:a5:2d:6a:dd:db:4c:8b:05:6c:a7:0a:76:
58:10:fc:6e:f9:28:c6:2c:a6:0a:e5:66:a5:51:45:6a:be:2f:
76:d3:1e:69:20:a0:77:2f:3a:04:7b:c6:a5:9d:26:d8:9f:0e:
56:03:be:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:36:32 2025 by rpki-client