Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: zjejE66xHGUqeJC88wfi9ydFssBI8CpnJ9oHBMGH+nA=
Subject key identifier: 4E:5C:CF:99:A6:09:3A:6C:42:AA:54:B7:BB:C0:6A:59:4F:5A:58:E8
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 019A22F75A5831A20257E852811F7217C3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 02C1
Signing time: Mon 27 Oct 2025 00:00:27 +0000
Manifest this update: Mon 27 Oct 2025 00:00:27 +0000
Manifest next update: Tue 28 Oct 2025 00:00:27 +0000
Files and hashes: 1: f87u7kBdxRsndUbHafpkZkro0IU.roa (hash: zdIYsmtX/Gy6oFoVgbZrLwhX3d3gff2hTbpByuS7zVc=)
2: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: ibvDItIcG0ZNrn+tpTPIlYugKAiEtml5OBbKjJF6oMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:5a:58:31:a2:02:57:e8:52:81:1f:72:17:c3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Oct 27 00:00:27 2025 GMT
Not After : Oct 28 00:00:27 2025 GMT
Subject: CN=4e5ccf99a6093a6c42aa54b7bbc06a594f5a58e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e3:3b:f9:2a:08:2f:ce:d6:f0:e3:b7:a1:26:
44:cc:51:d8:d2:66:ae:03:81:89:94:9e:8c:c8:ad:
d3:da:22:7f:d2:84:8b:7b:36:0a:d0:2d:43:38:8b:
f6:c9:ea:8e:9c:ea:c6:95:de:c0:50:e8:f8:fa:08:
7b:2c:e6:b1:78:c5:ae:dc:ca:2c:7b:05:ca:7b:f2:
15:92:8d:07:32:f7:5a:70:c9:77:72:26:4d:80:e7:
53:c5:77:71:57:2c:42:80:d5:94:63:ee:4c:1c:ef:
3c:78:cf:9e:bd:ff:7f:82:eb:04:aa:be:e8:ed:01:
19:13:ca:cd:03:4c:a5:c3:b1:45:44:c7:9a:99:eb:
12:3e:19:cd:8f:ba:7a:f5:9e:06:33:cc:86:19:00:
44:26:0f:fd:f5:05:67:20:a3:ec:d8:11:ff:40:95:
fc:a9:bb:74:d0:a9:a6:41:5e:2a:28:44:fd:8b:a2:
3f:ea:3c:f7:02:c2:0a:a7:f6:8d:54:3b:66:f7:0a:
49:cb:70:10:9b:bc:46:4f:52:cf:6c:cf:fd:67:57:
4f:4d:ef:6d:22:7d:7b:89:98:0c:c7:33:79:f0:e8:
37:5e:33:5b:f0:1c:3d:12:f0:50:6b:9a:25:07:58:
61:d4:f5:bc:26:67:2e:56:ca:1e:dc:6f:30:40:a4:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5C:CF:99:A6:09:3A:6C:42:AA:54:B7:BB:C0:6A:59:4F:5A:58:E8
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a6:a5:45:c9:50:1a:d5:82:83:24:08:15:2d:53:47:cb:13:
71:23:62:10:7e:7b:2a:1f:56:fc:29:8c:e6:da:30:d8:08:91:
4a:89:82:fe:a5:66:ac:b9:8a:c4:49:dd:90:f9:e3:61:05:30:
25:3e:b2:b7:e4:92:9f:7a:0a:e1:3c:46:04:14:7c:59:65:f7:
93:f5:e8:96:ff:03:3b:11:8f:96:58:dc:23:be:90:36:83:f1:
05:88:08:61:29:21:88:33:a8:6a:4b:4f:cf:bc:7d:ef:0c:ad:
88:bd:df:f5:f6:c1:f9:c3:52:c1:a9:19:02:7c:21:2a:57:5c:
ad:42:9b:55:56:fc:a4:29:c2:a5:33:fc:53:76:65:25:02:12:
c0:74:e0:14:20:67:04:aa:73:0c:e4:cb:34:d9:1b:0b:6d:5c:
22:86:c0:f6:e0:d3:df:87:ff:cf:f7:56:41:97:3e:c4:ac:87:
df:ef:28:03:e1:5a:dd:24:70:63:36:53:21:2f:7d:7f:b2:09:
23:09:02:89:bd:80:95:9b:e7:ed:1a:ca:4a:5b:90:07:ed:4f:
be:81:e3:e8:d0:55:34:00:b1:ab:2d:31:41:1e:5c:1c:5a:75:
c8:63:dd:d7:5f:66:29:3f:03:ed:ed:44:89:a4:16:90:a7:bb:
c3:c1:2d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:57:22 2025 by rpki-client