Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
File: H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json)
Hash identifier: Rod61TYcdmaPYV9TCeW/QVlBsBhX0SzFX5yExC5Wzyg=
Subject key identifier: 4C:3D:CB:16:26:B9:AD:B4:FC:A0:49:EE:E8:5A:7E:A0:31:B6:3B:BC
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial: 019A37C8E9AAEE26355B2F308E32F8D13A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
Manifest number: 0758
Signing time: Fri 31 Oct 2025 01:01:45 +0000
Manifest this update: Fri 31 Oct 2025 01:01:45 +0000
Manifest next update: Sat 01 Nov 2025 01:01:45 +0000
Files and hashes: 1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: oLPpmfy8UYEOcAklJT5bJQYRsrOkQMPjib0F1fVRaLI=)
2: HcCGVf1c2Ti9Q8GpR181zKxoK-4.roa (hash: epMyekEuNY8Rw5EQGjHEPi8q6cf4LUx00XdGU4u6gyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:37:c8:e9:aa:ee:26:35:5b:2f:30:8e:32:f8:d1:3a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
Validity
Not Before: Oct 31 01:01:45 2025 GMT
Not After : Nov 1 01:01:45 2025 GMT
Subject: CN=4c3dcb1626b9adb4fca049eee85a7ea031b63bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:2b:b8:8f:a0:c6:72:9e:f3:cf:1e:bd:7a:
0e:5c:31:4a:81:8c:f2:33:48:04:61:21:67:66:0a:
5d:70:43:6f:b4:11:94:32:7c:d8:fb:92:ca:c8:da:
9f:c5:00:8c:63:ae:01:3e:88:76:62:13:9c:f9:d5:
de:9f:40:05:9c:24:72:3a:05:f7:0c:db:71:8b:60:
a4:db:3a:f6:99:fd:2e:ab:c3:3c:e2:80:e2:12:a7:
63:96:59:39:70:c1:f6:73:29:e1:70:d0:7a:ef:6e:
92:e1:1a:ed:46:19:ae:72:bb:c8:6b:84:9d:11:18:
99:a4:d4:1a:0a:ec:f2:73:08:c9:54:fb:03:76:0c:
43:41:33:da:5a:64:20:df:8d:ac:31:ae:8b:57:d3:
9c:a5:b5:db:3c:bd:17:16:48:c1:c7:f9:ff:19:84:
95:9a:d6:9a:f5:9e:ae:80:f3:54:78:f3:a6:28:93:
b1:db:de:a1:e2:ab:a7:4d:c1:dd:69:d7:4a:17:c9:
33:58:3b:51:e4:64:f4:8e:5f:18:b3:1f:57:60:d6:
3f:b4:f7:d0:25:9e:4d:3f:c2:13:e2:ab:c4:45:0a:
65:b6:09:09:24:84:69:55:5b:77:b1:9c:02:a7:a0:
70:d2:12:eb:9c:c3:e4:f9:ed:c5:68:c5:c5:96:f6:
f5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3D:CB:16:26:B9:AD:B4:FC:A0:49:EE:E8:5A:7E:A0:31:B6:3B:BC
X509v3 Authority Key Identifier:
keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:df:50:c5:f5:d0:6f:66:bb:37:38:f1:7c:73:c5:38:f7:94:
41:bc:58:b2:e7:be:08:37:d2:bf:a5:51:7e:26:c6:96:a6:4b:
2d:05:b4:07:d7:6f:80:be:e3:fc:89:88:9b:21:ff:65:82:f0:
49:55:40:13:57:e9:8a:09:dc:13:5f:01:58:7e:9b:a2:94:a7:
af:c2:b2:66:43:4a:ce:d0:67:2b:89:5e:ad:40:b7:b3:4f:93:
f9:61:f0:6e:ff:cd:a8:7a:76:f4:78:9f:bd:8f:bd:94:7a:72:
c3:e4:94:0f:77:98:83:fa:dd:ad:ec:7e:87:a0:ba:59:e0:32:
3c:ef:bc:97:1a:67:3b:0a:bf:25:f5:aa:13:56:0d:54:2d:19:
93:c4:66:75:63:39:c7:9b:fd:f3:dd:c6:c6:84:37:2e:be:c1:
e0:44:f0:2b:db:54:34:f9:af:a9:b3:7e:81:5a:06:34:8b:00:
61:86:9a:b7:61:a5:e6:97:c1:3e:ab:89:d8:9f:ef:3e:f8:92:
dc:74:43:7e:45:90:7d:90:b7:f6:56:98:e8:35:c4:03:97:41:
ac:74:13:41:99:17:70:02:82:07:d9:c9:76:41:ea:52:55:23:
54:d3:9e:22:c2:f4:3f:54:94:14:86:ba:7a:8c:d2:04:bf:2e:
8b:db:76:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 08:27:24 2025 by rpki-client