Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: x4ZTA+QjOpwQKfDEp6j+HM0ew9aqgX2xN3LBWP1rYgE=
Subject key identifier: FF:25:B8:E9:F1:37:C2:69:E3:66:68:B3:FF:5F:D0:B7:63:E5:43:76
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 019A1DD0ADC0A23B1C1F25D2A910A483EFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 09ED
Signing time: Sun 26 Oct 2025 00:00:06 +0000
Manifest this update: Sun 26 Oct 2025 00:00:06 +0000
Manifest next update: Mon 27 Oct 2025 00:00:06 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: c1mzMicpddY5Ob75+ZDeZhM6yh35rHzklDZLpMuZ7CA=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:d0:ad:c0:a2:3b:1c:1f:25:d2:a9:10:a4:83:ef:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Oct 26 00:00:06 2025 GMT
Not After : Oct 27 00:00:06 2025 GMT
Subject: CN=ff25b8e9f137c269e36668b3ff5fd0b763e54376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9c:99:98:c7:b7:3c:9f:16:ab:6f:da:37:b5:
45:53:ba:ae:9a:3e:e2:bb:53:eb:7b:46:55:89:92:
8f:1c:e0:b2:e7:6c:0c:de:42:9a:cc:06:c0:1a:c0:
56:1b:61:fa:28:79:1e:e2:1a:95:d5:db:21:51:a0:
5b:d7:0d:e9:3a:6d:90:7d:b4:73:72:c7:5a:e4:ec:
b1:22:ed:59:ec:21:f6:e7:27:64:63:f5:49:1d:fa:
ca:62:41:8d:73:f8:59:ce:e7:d8:69:e0:c1:0b:29:
73:ac:c5:a1:8d:c0:71:af:c8:ec:ef:92:94:a3:bb:
a0:f9:27:6f:1d:2f:a9:b9:c5:f4:dd:0a:fa:c1:ba:
80:64:6e:7d:0c:c9:b0:4d:b7:61:af:8a:db:24:b5:
c9:30:9b:f0:a8:8a:b3:dc:16:17:6a:e4:c6:f9:da:
2f:3a:e0:60:66:05:3f:e5:68:1d:80:7f:28:a6:76:
3d:31:cd:6e:c3:82:ae:7e:e3:7b:ba:49:8c:28:fe:
66:66:08:cf:fa:12:79:e9:87:61:67:93:83:74:2a:
d5:f5:d4:d4:ea:20:84:4d:0f:2a:ba:39:4b:97:20:
33:2d:8c:0e:af:c4:64:6a:6a:8c:66:34:8c:be:3b:
13:8d:c8:ef:f7:07:54:27:8e:f1:7c:ab:46:a6:70:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:25:B8:E9:F1:37:C2:69:E3:66:68:B3:FF:5F:D0:B7:63:E5:43:76
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d1:fb:e5:ad:33:96:bd:a8:b3:c1:9d:64:ef:3c:79:70:95:
ea:e1:70:91:24:8d:9a:6a:7d:bf:f6:ab:f3:eb:9a:2b:91:1b:
02:fb:49:d8:7d:2b:e4:50:11:d0:2c:d5:b1:30:07:6e:d7:82:
10:5a:29:60:01:91:13:2f:f9:af:f4:a4:1d:ed:20:0b:03:3c:
d2:8d:ac:99:72:67:76:07:47:c7:f7:e5:4a:2f:b2:41:65:a8:
2c:af:ef:c5:7e:93:d3:60:b8:c7:85:4c:a1:21:20:19:20:6b:
91:3a:51:ad:58:09:39:d8:04:79:24:02:d0:a5:67:6f:be:1f:
bf:95:b2:7a:9e:87:6e:c6:24:3b:db:8c:94:72:f9:38:e2:9c:
9a:15:82:99:40:b2:a5:d3:9f:d0:66:95:8f:22:89:87:64:bc:
09:df:45:1a:85:68:8d:77:09:a9:21:5b:7d:3b:61:07:70:28:
69:6f:97:57:94:88:4c:80:0b:b2:43:be:bd:08:25:26:9a:29:
fe:f8:f7:8a:cf:45:e9:df:59:d3:d8:3c:ba:0a:54:93:2b:5d:
af:81:5b:a2:06:22:bd:12:6d:8d:0c:76:cd:81:96:bd:53:7d:
53:3f:c4:1c:44:87:47:77:1c:16:0e:1d:4c:7d:85:47:28:92:
8f:d1:0a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:42:56 2025 by rpki-client