Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: RQmy16ZmdiPufF2isZcW+079reDuW6geIJ9CKE3TlhI=
Subject key identifier: F9:AF:B2:60:D2:10:6B:59:61:9A:17:18:B1:40:DD:4A:7A:73:DD:43
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 019A70DC81227BCD97C801DCBEC286272321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 03:01:30 +0000
Manifest this update: Tue 11 Nov 2025 03:01:30 +0000
Manifest next update: Wed 12 Nov 2025 03:01:30 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: 1Rq+geJhdazb+QVwLTBz2vzHcwvWlxtLhpcVtXnEvGg=)
2: JExy0vnBpyXtQRXrczW-rXsvlvc.roa (hash: uayvEFxY8m7ytIfb/FnA/i1VKT8AyOarqBsheJam/Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:81:22:7b:cd:97:c8:01:dc:be:c2:86:27:23:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Nov 11 03:01:30 2025 GMT
Not After : Nov 12 03:01:30 2025 GMT
Subject: CN=f9afb260d2106b59619a1718b140dd4a7a73dd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:f5:eb:2f:5b:3c:64:01:e9:ad:ce:c8:23:
61:6c:e7:0b:78:cb:ea:cb:90:8e:c4:f1:6d:24:18:
47:5e:97:e4:06:b9:aa:7a:2d:46:53:93:6a:3f:88:
f8:58:45:80:37:a8:98:d9:a7:40:9f:55:3b:50:53:
98:41:21:de:83:3b:4e:d1:30:a8:61:38:47:c0:21:
f2:05:5f:6f:ce:16:9b:ec:ef:98:7a:96:d2:e7:00:
8c:3b:a4:87:1b:8c:62:09:1a:ad:11:17:13:8d:53:
47:46:9e:1c:e4:c2:09:3a:f0:d1:f8:b6:73:ea:f3:
a4:09:b6:03:bd:f4:5c:e6:0f:f3:9d:d4:60:3a:7a:
71:5c:fe:ad:41:45:d7:b9:96:19:e8:41:47:40:cb:
3e:69:a0:14:ac:1a:46:99:ce:c3:fa:cd:c9:22:b5:
11:b5:de:67:d8:69:c1:38:3e:d1:9b:52:89:c5:15:
cb:39:1a:01:3a:7d:82:23:53:cc:8a:46:ce:73:b2:
59:b6:f4:d2:7b:bc:2b:2b:50:08:0b:ca:e1:61:61:
7b:29:c8:93:11:89:22:2a:ea:1a:eb:16:71:26:80:
20:65:c0:da:53:7e:6e:da:db:29:51:40:65:3c:c6:
93:11:ba:a2:f0:7c:40:79:a8:76:9a:71:4e:b1:3e:
9a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AF:B2:60:D2:10:6B:59:61:9A:17:18:B1:40:DD:4A:7A:73:DD:43
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:94:48:38:8c:82:d8:12:04:da:ee:35:b5:7d:2b:78:eb:61:
c1:c8:a5:bd:83:57:20:06:b8:e0:d5:ee:8f:0b:98:ef:4e:b6:
e3:57:cd:15:22:a9:1a:28:09:0a:03:e7:91:55:e7:75:35:2c:
0e:ab:23:7f:29:70:86:c0:d3:e8:de:ac:c9:a7:9b:bb:d5:af:
90:a3:dc:cb:cf:ac:f2:c6:19:45:39:75:fd:e3:7f:bb:8b:be:
3b:6b:d4:92:5d:53:d5:bd:32:20:c7:c4:25:8d:a3:2b:f9:ae:
47:cb:9d:fb:95:e0:6f:a2:6f:f9:4b:90:4c:c5:b1:bb:ed:18:
e9:e7:51:43:61:43:23:69:ac:b9:5c:7b:0f:35:82:07:71:5d:
bd:23:ec:be:b8:1f:a4:fd:37:3d:63:75:f4:e3:5b:fd:24:cb:
70:a0:1e:30:0e:20:44:6a:55:06:49:6a:43:ca:7d:79:ba:00:
21:87:fe:54:82:ac:ee:31:60:dd:ae:cc:ff:84:a3:32:b2:aa:
e8:c4:98:0c:65:2a:03:c1:a4:e1:c3:05:88:42:f7:9a:bb:e5:
25:98:b6:cb:8c:01:57:e4:0d:c1:12:a4:75:de:1d:41:96:f1:
8b:ec:58:85:28:03:9c:e8:f3:60:9d:96:1e:9e:7c:21:a2:64:
dc:a5:20:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:08 2025 by rpki-client