Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: 6fRCGDVEvqNJaGbw1mDdHsYIdjgCgbQFvUpLkn/+HRA=
Subject key identifier: 5C:7C:B9:FE:1A:80:4C:7D:AD:7A:58:6A:D7:43:AF:F2:E8:1D:E4:8A
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019A21AE0761C51166BBEF038DB799A7C136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 117F
Signing time: Sun 26 Oct 2025 18:00:44 +0000
Manifest this update: Sun 26 Oct 2025 18:00:44 +0000
Manifest next update: Mon 27 Oct 2025 18:00:44 +0000
Files and hashes: 1: 7q0WrWMejy7wbR787YAaoWGbJFQ.roa (hash: wvukoKMYamTKrvVMIAVFKbPLx57mG8Vi2Twko2h+BGA=)
2: 9N4nOv3tg3sEbPyzZf0it1Hq25E.roa (hash: IJnSS5a9u+7nIpL38LijT/DvQkKhhTmKcLRcnn9ZFq4=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: HZobFinZS6DIXACOxpGfUmv/3M7ItFdjYdEa8fs+VKo=)
4: HFw-x8czfBceHHrxWFsisFaU53k.roa (hash: cYh9OngZxsihRjHnYd3zU3o4mbQkOgFi9+M2bbApN3k=)
5: X8AY7TE63_MLYw5qzgUDNFtz5p0.roa (hash: X2a5upeXUq+OfzrT3NEfhOg+ntOWBbajp/Ueexg9I2s=)
6: lZMuhPvtZ2azCXBKPog94p3v2Xw.roa (hash: xEuRWjb3WfY9qNirTUGj3ZWp2yVhhUygTy4CswJMg3c=)
7: uIXD9TM7mcGL2h8D_v3d0KyzT9E.roa (hash: N8tk1k3ctTBw3mBa+DDHR+60L2fh+aJO68VY7R3S2T4=)
8: vlexF02dkqJLD0WdrTxwGKUdE4I.roa (hash: cuDkI790X0jMiu+jzLtuqyGyt6ox4BybHkrBEnZriww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ae:07:61:c5:11:66:bb:ef:03:8d:b7:99:a7:c1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Oct 26 18:00:44 2025 GMT
Not After : Oct 27 18:00:44 2025 GMT
Subject: CN=5c7cb9fe1a804c7dad7a586ad743aff2e81de48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:78:0b:a8:88:46:d1:2e:e7:60:0e:f7:9c:f4:
b8:65:a8:87:76:a8:51:66:01:43:6c:4d:2f:0e:d9:
45:76:a5:09:67:95:84:e5:41:51:50:12:2a:6e:7e:
83:be:7d:8e:d7:3e:37:1e:10:27:68:cb:83:07:b4:
df:04:a1:4d:4c:d7:1a:3a:05:ab:7d:8c:7b:5f:e2:
52:73:73:2b:a1:50:f7:62:59:d9:b9:98:a4:c6:46:
83:64:cf:3b:a7:69:c9:25:96:e2:dc:b9:1e:76:6d:
0a:d2:3e:fc:d3:9f:a1:80:0b:48:9e:54:d6:89:bf:
c7:f0:71:96:1a:1a:96:5f:d8:62:fe:ae:1e:1c:d3:
0e:fe:dd:04:15:a3:c7:5a:85:6c:34:50:54:bc:29:
bf:2d:e2:9a:65:4e:1c:82:d2:00:87:e1:7f:4f:d3:
13:2b:67:9e:e9:17:4f:e1:eb:f6:f4:86:c5:cb:77:
eb:9d:a4:f2:55:81:b5:36:d4:3f:d9:f5:62:a5:ec:
b3:71:43:32:95:0d:fc:33:36:13:6e:3b:2f:92:99:
79:40:fc:05:7c:b4:b5:ad:8d:00:14:63:89:a9:41:
a6:89:d1:47:06:b5:dc:2d:48:db:28:e5:2c:d8:17:
6e:0b:8c:5f:af:89:8e:2d:d6:8f:01:97:75:c0:78:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7C:B9:FE:1A:80:4C:7D:AD:7A:58:6A:D7:43:AF:F2:E8:1D:E4:8A
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c4:b4:d4:2f:48:0d:e3:69:21:54:a9:e4:36:5f:c9:8c:ef:
7d:6d:f7:ee:f0:d9:fb:d4:6c:a9:a6:d1:29:b6:eb:cc:f0:d7:
ad:7f:b7:b2:03:7e:5c:24:9f:97:19:1f:eb:5d:74:bf:c3:a5:
16:0e:1c:fa:33:b4:1c:65:cc:a9:77:7f:70:3f:53:c2:35:a8:
d4:3b:ee:a6:e3:8f:2e:fc:47:24:74:48:6d:1e:3d:f6:9b:6b:
cd:d0:1c:9f:8d:6f:2e:f4:82:b8:a3:ad:5f:bd:70:52:30:a7:
cd:8c:0d:ae:90:81:37:c2:aa:00:22:2a:46:1f:13:44:85:f7:
46:2f:9a:a4:74:75:65:21:7f:bc:71:44:25:20:f7:1a:0b:09:
65:c4:7c:bc:2b:1d:7a:fe:cb:56:8d:d8:77:06:3e:99:f1:43:
92:5a:ab:9c:80:30:ca:ea:04:a2:8a:6f:4f:c3:4b:5b:cd:8b:
e6:fc:1c:88:77:11:f2:dc:6a:e3:5a:cc:df:26:03:b3:cb:ce:
c1:08:d0:25:da:f9:77:99:00:ac:14:a0:ee:a5:89:fb:7a:a9:
0a:7d:8e:03:7d:3f:af:43:33:ff:9c:f2:3a:67:03:12:08:0c:
8c:fd:91:54:80:5a:43:f6:c2:72:49:9e:1f:46:14:6d:68:1d:
37:70:02:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:22:06 2025 by rpki-client