Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier: 8OUl3cn/Uj0n3gP5D0b9/76ctcATYXurnbzLNw8JM50=
Subject key identifier: E1:2E:DF:A2:E2:43:F0:78:CE:C2:CA:CF:23:27:A3:45:A9:75:33:FA
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 019A72934E566044F5CA4E09C0FFBE7062FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number: 0968
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: +I77N7xQVNLxLi7TFvlBY85sP3i0e/cMwijlwaOtaDQ=)
2: rNGuPSJft-Vo3aMmE_0SHixDFYs.roa (hash: RB3m8yl02sm8Z1EZzBwUHBfxuJzfyJEgz7CGmiyldWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4e:56:60:44:f5:ca:4e:09:c0:ff:be:70:62:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=e12edfa2e243f078cec2cacf2327a345a97533fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:ae:25:44:4e:54:28:28:df:6a:8c:0f:00:
c3:8f:bc:90:9e:fd:9f:9d:2d:fc:5d:92:51:cd:42:
e7:0c:f8:7e:a9:8d:3d:4a:ba:65:f2:87:d4:1a:4a:
c9:f2:e8:55:f8:06:d7:f6:f9:fe:89:f7:db:83:75:
b9:e2:27:31:6e:0e:b5:85:13:17:d9:9a:09:9e:ca:
1d:10:3a:82:e8:78:7f:38:2f:0f:8d:bb:1e:50:39:
df:a3:64:3f:9e:88:af:aa:65:9e:1a:22:e3:87:71:
43:02:c4:94:c7:b3:01:b6:99:a5:fb:80:f9:e1:ff:
70:f7:e6:b5:a0:7d:c1:18:6c:60:2e:47:c1:a8:b2:
a3:ba:9b:82:b5:88:ac:ae:77:68:56:ec:83:ab:02:
81:42:7b:45:61:a1:0c:a6:75:3e:6d:e9:a2:32:cb:
eb:63:63:94:04:75:95:fd:9f:9f:d3:9e:bc:a4:0b:
f4:33:ed:19:80:c7:41:0f:97:14:8e:34:33:d1:1f:
ea:47:e1:b3:34:91:d0:ab:25:e8:7a:9f:55:6e:68:
10:4b:11:7e:81:dc:b8:cb:c3:e8:c6:d3:6e:34:d3:
aa:c2:37:e8:30:35:47:96:6b:a3:fb:c9:5e:c7:c6:
e9:bc:17:9e:45:8b:f2:d6:07:d0:28:07:ad:a1:16:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2E:DF:A2:E2:43:F0:78:CE:C2:CA:CF:23:27:A3:45:A9:75:33:FA
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6a:0b:ab:a7:c5:2b:ad:fb:3f:02:4c:82:6a:e6:99:8c:4d:
5e:58:ea:34:46:ab:a1:09:46:fb:10:f5:92:40:9e:fb:b9:36:
72:90:98:53:b7:52:2f:16:d3:4b:1e:39:cf:83:be:82:55:cc:
51:fb:93:ce:be:6a:31:0b:76:31:9b:ba:dc:d5:bd:72:f3:a1:
59:08:33:bf:b3:12:4a:ad:52:04:f1:bd:6b:24:89:c6:71:ba:
d1:fe:6f:35:d1:99:78:ea:88:d8:eb:12:4a:31:fc:bd:4d:32:
71:3c:59:d0:71:5c:e6:cb:78:a3:66:36:cb:b4:50:24:84:07:
8d:92:04:74:0e:b1:90:df:26:63:7f:8b:0c:4e:c1:23:7a:40:
a7:e0:68:ee:58:15:14:11:b8:24:2b:f3:1e:18:3a:d5:a2:6f:
e4:ec:f0:9c:15:5c:ae:7e:42:86:ed:ef:dc:f6:16:4a:e4:dd:
0f:12:de:33:18:17:0b:17:64:b8:0e:04:fd:15:d8:e4:d2:a1:
07:e7:8d:03:a4:fd:88:85:40:5c:2b:d8:da:c5:87:d2:3f:fa:
28:ae:66:b8:06:d1:b0:18:3d:0c:d7:b9:4a:fb:31:a5:b2:c8:
09:0b:57:f6:77:e6:fe:23:a5:c9:6d:ac:31:15:f1:c5:61:37:
67:e2:ec:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:47 2025 by rpki-client