Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File: h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier: 9/E3+sAHlzly9OEOv4C/kkxaAx5whzwQlED9HckpikI=
Subject key identifier: 9C:C9:AB:A4:1A:B4:BD:08:15:42:D0:87:BA:C7:36:80:49:C3:55:0F
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 019A52D14303B54A65EC56C3AD6DBA036F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number: 0A97
Signing time: Wed 05 Nov 2025 07:00:37 +0000
Manifest this update: Wed 05 Nov 2025 07:00:37 +0000
Manifest next update: Thu 06 Nov 2025 07:00:37 +0000
Files and hashes: 1: M5PtAUB6C0YQZ-t3ZklapHkEf_k.roa (hash: HXU2DQvPMIqoZLirjVORFRzXbGSClbgxExOEkxTMUAM=)
2: go-J-JwBrpAVGCsK-19AMahhYuM.roa (hash: +GNiaHGQJG90H7ohhR5iHSqVdKCjsbU2hGuORBme6Qs=)
3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: CxvB12wQHVnSnim/PFbYnscx08aZfAKmdm+hN6sEPYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:43:03:b5:4a:65:ec:56:c3:ad:6d:ba:03:6f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: Nov 5 07:00:37 2025 GMT
Not After : Nov 6 07:00:37 2025 GMT
Subject: CN=9cc9aba41ab4bd081542d087bac7368049c3550f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:30:fb:bc:4e:13:01:1e:ea:f4:da:4c:ef:
3f:be:02:d8:95:c3:e7:7c:b3:cf:b9:42:93:77:2e:
68:f9:55:f8:93:d7:6d:0e:34:d6:35:fa:6a:c1:0c:
10:a9:ba:7d:99:d0:92:80:5c:59:08:cf:7f:3e:17:
21:aa:e3:89:47:af:a4:e3:e3:68:f3:36:e7:ec:18:
2c:de:45:1e:25:44:81:a7:3a:57:06:12:5e:73:ae:
ca:7c:43:36:9f:84:aa:28:d7:5f:14:2f:94:0e:ab:
6b:a5:ff:3d:61:e7:6a:de:0f:5a:91:fb:aa:2d:71:
b5:96:80:26:90:67:de:97:59:fe:7b:de:05:2c:0b:
db:f2:e9:3f:43:84:50:b6:92:46:97:24:7d:33:e6:
ff:c7:54:b9:9c:62:e7:d5:43:a6:c3:78:9c:16:ff:
e4:5a:f9:fc:a4:99:15:6b:59:47:ec:ca:d7:9a:a0:
bc:eb:e2:29:da:6c:4d:4e:05:98:b0:74:54:a7:2c:
4c:71:fa:2f:23:ac:f1:1f:25:49:fe:d8:ad:4c:27:
9c:61:d1:a0:cc:62:93:19:1b:0f:71:6d:08:76:10:
ef:71:93:7c:99:1a:9a:f6:ff:be:4c:2a:d6:62:44:
24:c6:bd:15:49:47:a4:b2:30:b0:a1:65:b4:f0:ec:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C9:AB:A4:1A:B4:BD:08:15:42:D0:87:BA:C7:36:80:49:C3:55:0F
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:47:25:76:2f:b5:44:cc:70:bd:ec:f4:46:bf:a0:b2:db:85:
47:f5:3f:5e:1f:cb:8c:c3:88:7d:0b:81:b0:87:c1:58:a5:e4:
ac:4f:c1:cc:47:20:76:86:88:31:67:b1:fc:c2:25:a4:58:9d:
47:5b:0b:72:2c:9e:d5:a4:32:d2:87:45:0d:0e:d6:35:54:e8:
da:6e:99:e7:0c:97:03:29:9a:e4:15:64:5c:b6:fa:16:ea:b4:
8d:54:f6:e0:4b:47:89:68:6c:ff:6f:5d:ab:ea:06:98:48:87:
c9:5f:e7:cf:47:f1:26:a4:e2:77:91:da:73:bb:82:dc:ae:75:
7c:f6:41:c0:3b:fb:4c:77:85:b6:fe:1d:b9:32:77:39:97:34:
c1:17:3d:3f:b3:ca:38:2b:ae:23:c5:9e:12:91:86:42:4d:a3:
43:43:43:25:b8:01:25:03:ba:41:b9:fc:f1:25:09:75:47:60:
78:ce:7c:d6:7c:9d:e9:2d:72:79:a7:08:18:96:d9:a3:2b:d4:
b9:11:9f:64:b7:39:f5:7a:5d:3e:fa:16:2d:2c:59:56:a2:3b:
5e:79:b6:37:13:ef:c3:f0:4c:16:56:4d:bf:30:3f:c3:7a:87:
24:ea:9b:53:56:65:cc:b8:54:58:b3:77:0a:df:17:61:7a:69:
2e:2f:66:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:38:35 2025 by rpki-client