Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
File: h-ll54gxqIuo-kGUMqnXusnbOKM.mft (raw, json)
Hash identifier: cmd3z2cLzs08h9wBxE5+fK9cUz1zgu908ukhwLV/BRU=
Subject key identifier: CE:4D:1C:29:C4:94:FD:FA:FD:12:09:C4:BE:60:14:D5:E1:44:AF:D6
Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Certificate serial: 019A725C4008A4BCCB09906702C63A893CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
Manifest number: 07B4
Signing time: Tue 11 Nov 2025 10:00:39 +0000
Manifest this update: Tue 11 Nov 2025 10:00:39 +0000
Manifest next update: Wed 12 Nov 2025 10:00:39 +0000
Files and hashes: 1: P67W-sp0mORZMv4IJYWq4ebl3DI.roa (hash: 1jNCeGYTIsfay6y/1fIn4OYexq/lwmYvxij2ON0v7bU=)
2: h-ll54gxqIuo-kGUMqnXusnbOKM.crl (hash: XcBa5iIvD87ANIlcEB/ebJsoia5lSvFzu+FkRHBPIF4=)
3: tb7b-pMyLuFzVUUaYd4D0tYvrVM.roa (hash: kplquuozq7s5NkeQhsxsJ048qcIZPUbW30XHKIIbIL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:40:08:a4:bc:cb:09:90:67:02:c6:3a:89:3c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Validity
Not Before: Nov 11 10:00:39 2025 GMT
Not After : Nov 12 10:00:39 2025 GMT
Subject: CN=ce4d1c29c494fdfafd1209c4be6014d5e144afd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:d8:38:32:3f:f7:9e:04:cd:fc:6a:ad:e1:
68:1a:85:10:73:f5:a7:17:5c:0a:46:78:6a:fc:90:
21:3f:d5:2e:55:79:e2:46:3c:b0:3a:c0:7f:8b:29:
67:3e:ef:4e:31:4a:e0:3f:1c:38:41:eb:96:14:14:
39:7f:30:62:49:59:77:53:ac:19:3a:ae:63:67:7f:
1a:67:87:9b:c3:6f:d5:b0:54:90:ed:55:82:a4:c0:
4c:4f:80:de:14:29:96:39:67:e8:98:c8:cf:dc:c1:
bf:70:ba:77:b9:b8:b5:84:7a:56:71:d8:7a:e9:d2:
01:42:c6:16:3d:30:26:7d:a2:30:58:ec:13:71:59:
15:fe:e7:f2:0a:b6:47:68:41:6e:b6:01:1f:8a:8e:
d2:29:2c:36:ff:0c:81:87:9f:9e:c9:b9:44:54:b1:
02:dc:ac:3f:77:e1:59:a4:d8:f0:ac:53:13:e3:5e:
cc:ea:36:29:cb:a8:23:ac:79:e6:65:04:f4:7e:3f:
7e:72:b0:4b:87:5b:05:7a:1d:d3:63:ae:8a:2e:6a:
94:29:22:54:99:aa:d8:e7:14:b4:85:4c:54:0b:fe:
aa:17:1e:cc:bc:69:69:c6:b2:30:be:d1:d6:91:e2:
c2:c3:6c:41:e2:4a:fb:3f:cd:57:cc:0f:27:09:f3:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4D:1C:29:C4:94:FD:FA:FD:12:09:C4:BE:60:14:D5:E1:44:AF:D6
X509v3 Authority Key Identifier:
keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:58:d6:43:13:26:35:da:38:6f:b1:20:59:de:42:b4:f9:3f:
e0:77:49:02:b7:d3:30:ac:3f:5a:70:67:bf:b4:57:ec:56:26:
78:fd:ee:ed:10:42:36:a7:92:4a:89:1b:bf:3b:90:1f:b1:fa:
73:a2:64:b8:ea:8c:f0:36:df:98:09:20:3b:d5:83:b9:c1:c9:
f5:fd:27:6b:35:96:07:6c:94:0f:aa:4c:0f:7b:fa:5d:db:71:
1a:cb:95:0c:dd:20:1d:2d:8b:fb:7d:6e:ea:99:59:1f:4e:ba:
1f:f4:ae:60:15:a5:11:64:00:db:97:a8:d6:bb:40:ae:60:cb:
3a:39:57:fe:24:82:3b:fb:62:8f:d9:fd:76:ee:23:ea:01:8b:
9c:c4:0e:ac:8a:eb:60:54:5e:1e:38:3f:e7:9f:d9:f0:fd:dd:
ae:e8:cd:24:91:b3:46:18:e7:0d:d1:22:47:15:15:bf:1b:ca:
ee:5b:7b:46:ec:dd:38:41:4f:e2:c4:18:a8:25:56:aa:e1:5a:
14:e1:ed:87:67:55:92:30:3b:39:15:c2:9f:45:65:14:ce:9c:
da:ee:40:17:9d:b5:e1:96:e8:19:36:9f:43:ad:42:9a:20:fe:
be:aa:03:40:a0:bf:cf:05:f7:6a:6d:d5:53:bd:d8:f8:48:c4:
89:b0:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:03 2025 by rpki-client