Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
File: H_Umh1LLtSS8_ktaSXb_D4XTia8.mft (raw, json)
Hash identifier: olMVnUmP/7Sb2tqbXMMFMMIwuefxU0uRXT7Mhna8ODA=
Subject key identifier: 2A:DC:3E:58:10:DB:7D:7A:DD:28:A1:F2:F1:97:25:34:F4:E7:35:B4
Authority key identifier: 1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
Certificate issuer: /CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
Certificate serial: 019A71B93692BA4A37DB132C41F6AA8348E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
Manifest number: 0B0D
Signing time: Tue 11 Nov 2025 07:02:34 +0000
Manifest this update: Tue 11 Nov 2025 07:02:34 +0000
Manifest next update: Wed 12 Nov 2025 07:02:34 +0000
Files and hashes: 1: 9pQi_NMMFUj3irIeg0-DmdkDCbk.roa (hash: PFd36o1XR8n7Qanm5GG5TpwQ2+VBH8Rn7+qS0Um/8ws=)
2: H_Umh1LLtSS8_ktaSXb_D4XTia8.crl (hash: qoCGLvkTtTyVAluh3AFffh/RBD/tj0ZpsRZ54wKCgDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:36:92:ba:4a:37:db:13:2c:41:f6:aa:83:48:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
Validity
Not Before: Nov 11 07:02:34 2025 GMT
Not After : Nov 12 07:02:34 2025 GMT
Subject: CN=2adc3e5810db7d7add28a1f2f1972534f4e735b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:d7:0d:07:ff:eb:1b:5f:cf:52:f9:15:04:
60:c8:ed:57:1c:f1:23:9b:7a:f0:7d:fc:b7:73:dd:
66:5d:70:eb:58:67:52:26:66:20:f2:a4:42:98:90:
8a:f2:47:66:28:71:ff:15:fa:5d:b5:cd:e4:b2:1e:
41:b9:25:6f:d3:93:f0:01:9b:6b:df:37:56:2a:59:
5a:ab:ed:eb:b6:7e:5c:bd:5f:db:6c:30:44:87:9a:
8c:0d:dd:5f:ac:8f:01:b7:c9:09:4c:cf:dd:9d:c8:
81:cb:14:47:68:ab:a1:ee:e3:64:74:dc:02:17:7f:
73:81:1f:60:5e:4b:39:26:6b:60:3e:d6:c6:92:61:
bc:72:06:a9:54:76:d4:9c:30:48:0b:39:3e:9b:fb:
0b:5b:96:c0:3f:fe:e4:b3:5c:b6:2b:5c:77:2d:7e:
c3:d2:5b:24:7d:d3:4c:30:4e:44:6d:cb:77:8b:80:
c4:bf:61:1c:0c:ef:28:d8:3e:38:db:2b:f8:31:e9:
e8:41:93:fd:e2:0e:09:b5:6f:3c:db:e8:4e:c9:58:
77:31:4e:3c:2b:7c:8b:b5:a8:4c:f0:4d:29:6d:bb:
7a:1a:83:10:be:4e:f3:f1:50:04:16:a1:2c:43:20:
a6:8f:0f:b3:8a:c7:d5:87:49:fb:ae:2f:e0:78:bf:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DC:3E:58:10:DB:7D:7A:DD:28:A1:F2:F1:97:25:34:F4:E7:35:B4
X509v3 Authority Key Identifier:
keyid:1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c2:cf:42:75:a8:6b:5a:d3:62:de:20:c8:19:9c:ed:9c:dd:
36:de:0d:fe:2b:22:11:af:ff:81:67:d7:67:df:94:4b:5a:5f:
29:8f:1a:1d:66:8e:c4:01:f6:f9:ce:90:8e:0b:68:6e:13:ff:
3c:ff:6c:8f:95:26:c9:cc:19:d9:bd:59:27:20:fa:7b:fd:21:
5e:56:4b:35:97:0b:be:75:86:d3:6d:6f:7c:ad:10:70:86:69:
f0:32:73:84:c1:71:19:41:a1:63:06:ad:61:cb:40:59:1a:86:
53:48:93:97:cf:8a:b7:f4:77:b0:5e:0d:f0:2a:2e:19:d8:65:
9f:66:be:a7:29:87:c6:6e:00:eb:e1:89:26:65:17:ea:8e:9a:
e7:86:70:e1:8a:6e:ba:32:d1:3a:78:a2:a2:ab:36:3c:5e:11:
98:25:04:a0:ba:4b:91:34:56:35:6f:9f:6a:05:70:dc:66:74:
1e:51:2b:e5:15:1f:32:24:6d:21:d5:2c:ee:89:3a:80:e6:67:
99:a5:e6:b6:4a:45:76:87:46:ff:20:5a:79:98:a1:b8:6e:f0:
9a:df:8a:ba:ed:50:a0:ee:6a:af:54:53:a3:03:ff:e7:f7:70:
55:3b:a8:ae:4d:99:e9:6d:f2:ff:00:6b:e9:8a:17:27:11:92:
a4:53:a9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:23 2025 by rpki-client