Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File: H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier: ARewFx0WWBYooIuaulNRHiTij9ZxP904LFVVApqahg4=
Subject key identifier: 6D:DA:69:53:99:03:95:FA:E9:DE:90:05:00:93:10:95:10:A3:19:F1
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer: /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial: 019A22C08236C6BF42E758479C7DCAA62D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number: 0FB0
Signing time: Sun 26 Oct 2025 23:00:32 +0000
Manifest this update: Sun 26 Oct 2025 23:00:32 +0000
Manifest next update: Mon 27 Oct 2025 23:00:32 +0000
Files and hashes: 1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: OYyT6wVD2HI0qdHZKdSBfLkXa7uqr1A6cdLbF86OgSs=)
2: vNstzceOXGplN-vBnPrAujnN1Ks.roa (hash: A1jnUd+2zoPrt/m5wPvY6xxOOy1gAscK2t40BFmGG10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:82:36:c6:bf:42:e7:58:47:9c:7d:ca:a6:2d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Validity
Not Before: Oct 26 23:00:32 2025 GMT
Not After : Oct 27 23:00:32 2025 GMT
Subject: CN=6dda6953990395fae9de90050093109510a319f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:a7:1a:1d:42:03:3d:a2:6d:4f:57:76:61:
71:ac:7e:9d:c5:bf:19:03:9d:13:cc:c5:5b:f1:7b:
6e:84:75:c1:8f:5a:8b:45:33:d6:be:11:f5:2f:3c:
1b:3a:30:6d:8b:b7:6c:3a:eb:77:bc:35:8f:37:a3:
2f:5e:ef:89:be:e6:34:6b:ad:e1:08:62:80:11:e6:
c3:ac:c6:2f:55:b3:b6:b1:42:83:88:9e:6f:36:f8:
30:a5:a2:1c:e1:28:19:2a:b5:fb:bd:59:e6:92:60:
17:8b:4c:2e:46:ce:ec:fe:de:53:e3:dc:76:9a:a8:
15:32:be:97:6f:ee:4e:5b:b0:ac:25:2e:6f:fd:7c:
69:e5:df:6e:d1:29:52:55:3f:b9:d9:56:a7:54:30:
97:dd:5d:88:29:87:fc:f1:e0:dc:c2:96:3e:8a:e3:
fd:3b:5f:48:31:d5:45:88:ee:19:34:29:85:5a:28:
cc:e7:48:f0:ab:a6:22:75:c5:f5:23:b1:4e:ab:5e:
64:38:d1:e7:f7:b1:d2:71:09:b3:9f:59:db:48:f6:
ee:07:83:7e:40:81:a2:1f:75:d8:15:37:5a:dd:8d:
05:76:7d:95:d9:17:35:74:f5:bc:c6:86:fa:4a:7b:
b8:5b:04:df:95:5e:32:2f:4c:bf:07:f5:db:e2:96:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DA:69:53:99:03:95:FA:E9:DE:90:05:00:93:10:95:10:A3:19:F1
X509v3 Authority Key Identifier:
keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:25:9d:b7:e4:36:31:54:04:16:c0:7f:0c:68:e5:a2:90:35:
89:2d:0f:3c:c5:4c:ac:7d:9f:fe:e1:36:20:00:bf:6e:9f:ef:
a8:56:8b:07:8a:b4:7a:8a:55:b9:34:0e:1c:c6:82:6d:8d:38:
98:15:a0:e9:7f:af:cb:0f:d0:09:91:fb:78:a2:51:e1:d0:43:
15:cd:38:9d:0d:af:6a:0f:75:67:50:90:75:98:e4:56:dc:b8:
24:d7:c9:1d:23:ec:75:ab:6e:4e:d6:1f:82:06:74:02:98:a1:
7c:f7:a9:d5:95:fc:5a:5c:3a:0e:9c:aa:57:46:9c:06:c2:d0:
ae:43:72:51:42:10:65:a8:0e:25:3b:af:ac:4b:a8:2a:37:c2:
93:b2:89:80:11:fe:7b:3f:65:bf:ca:d3:80:e9:67:b5:1c:64:
5f:b4:f2:91:27:bc:75:e9:e2:d9:7b:5b:3c:5d:ba:8e:06:a3:
bd:aa:ff:12:43:40:8e:e8:8d:77:97:0e:67:32:51:f8:2f:5e:
9b:8d:12:c8:6e:07:91:94:bb:63:16:d7:d6:7c:49:7d:39:30:
87:b6:f2:58:13:38:5d:98:bd:f1:5a:95:c2:ed:fb:2b:e7:d6:
5d:5e:0d:94:6c:e4:df:2c:29:b3:e9:1d:27:8a:64:04:ca:58:
40:f0:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:48:19 2025 by rpki-client