Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier: VuMYFsqqT7I6SF0yyw5BZhniYdgPsZ/WDDm+JOCEb74=
Subject key identifier: B0:17:C2:5F:02:32:20:FB:C9:F8:BF:57:86:74:14:F2:19:02:0B:9C
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial: 019A13172AFD79AB411EAB96C22DD829D39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number: 0DE2
Signing time: Thu 23 Oct 2025 22:01:16 +0000
Manifest this update: Thu 23 Oct 2025 22:01:16 +0000
Manifest next update: Fri 24 Oct 2025 22:01:16 +0000
Files and hashes: 1: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: Nm1XVC/66xs5UDIz5Wmy8yUqaD5gAMnS9ZNqHD/kVbQ=)
2: hrRjboaEddMTvU1wn6u0WdMEQ5k.roa (hash: R2w89TKLu5CTfHL7zBMhtJ8zldIghHv3KwB06EytEuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:17:2a:fd:79:ab:41:1e:ab:96:c2:2d:d8:29:d3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Validity
Not Before: Oct 23 22:01:16 2025 GMT
Not After : Oct 24 22:01:16 2025 GMT
Subject: CN=b017c25f023220fbc9f8bf57867414f219020b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:e4:da:ff:3b:0e:55:33:a2:dd:8f:a5:3f:
4d:7d:16:1f:15:30:7b:76:5a:fa:a4:60:a6:ff:3e:
67:76:2f:65:7c:32:c9:86:a9:19:72:88:f3:90:e6:
3b:59:a9:34:24:6f:3e:b8:37:97:07:30:21:e7:69:
d1:60:17:21:f6:28:d3:54:8a:1b:bd:cb:8f:b3:4f:
46:d6:5c:06:e9:59:de:ab:48:2a:ca:76:7d:88:2a:
04:94:6e:0d:09:93:1a:93:7a:0f:71:9a:7f:9f:0d:
63:05:71:16:1b:3b:4d:d9:18:c1:c0:d3:1b:72:c3:
c2:ee:ae:50:e7:be:b0:a7:84:ae:b1:b4:c8:a9:b4:
2d:f7:16:02:74:10:22:03:2f:ac:bf:29:f5:8d:3b:
7c:94:93:49:e4:f7:2a:93:32:9d:50:4b:13:27:d7:
59:96:a2:98:7b:96:6e:e4:0c:2f:7a:ce:5a:42:bf:
2d:be:05:97:f0:dc:df:fc:aa:56:de:44:95:b9:c8:
47:d7:fe:14:47:40:5e:cf:17:69:eb:58:ea:ee:84:
3d:95:44:66:21:d9:03:ae:27:ef:32:14:c0:42:75:
9b:60:61:eb:fb:71:44:b5:35:6c:a2:33:7d:84:7b:
88:fa:99:c3:99:62:17:ce:87:a4:ab:a8:e9:00:6d:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:17:C2:5F:02:32:20:FB:C9:F8:BF:57:86:74:14:F2:19:02:0B:9C
X509v3 Authority Key Identifier:
keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c9:5b:04:a8:73:4d:97:87:10:7d:5d:6e:61:ea:b6:d3:a5:
07:0e:e7:7d:1d:43:5b:b6:cf:c3:8d:ce:49:35:7d:c9:0e:ba:
8a:e7:57:7a:0b:4d:e7:44:36:9c:8a:54:db:0f:2b:4b:be:3e:
f0:b0:2a:33:e2:ec:2f:b7:cf:52:1b:c8:26:c5:f5:43:b6:09:
f2:c6:c6:d8:81:9a:04:a9:42:5d:a8:ac:24:3a:e5:47:11:9a:
e5:44:b3:bd:a0:86:b2:28:ec:3b:f5:cc:e9:f1:8c:c9:28:85:
89:6a:3e:9e:c2:59:d5:24:33:48:0f:fd:47:4e:ea:92:77:31:
ab:89:0d:3b:f5:8d:37:57:ba:b0:c0:11:8c:c7:17:ff:14:80:
75:0b:42:67:59:0d:61:ac:aa:92:4e:b3:4d:aa:ff:4f:e9:72:
38:41:c4:c8:f0:33:79:70:4f:e5:14:54:41:f6:46:a1:d8:2b:
2d:d7:cb:b9:75:83:1c:bb:64:d8:0a:c2:2e:2f:a9:e4:f4:04:
a9:97:7e:5b:06:05:63:cd:92:09:f4:2a:e7:a6:f4:7c:d3:50:
b0:c5:d7:ef:1f:29:70:3a:e0:fb:d7:a7:96:c5:0b:ae:79:ca:
e9:06:44:62:3e:14:48:e2:7d:38:a4:be:70:c9:bf:57:7b:64:
86:81:aa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:09:56 2025 by rpki-client