Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier: h5w36HYX40YvqF+foAyUOnEFagplaDKx3u3DnHWa0wQ=
Subject key identifier: C3:54:2D:75:F4:26:66:4C:03:9F:AC:8B:3A:D2:06:75:61:44:BA:9D
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial: 019A725C3E364A66716B33D2BD9A027692B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number: 0B39
Signing time: Tue 11 Nov 2025 10:00:39 +0000
Manifest this update: Tue 11 Nov 2025 10:00:39 +0000
Manifest next update: Wed 12 Nov 2025 10:00:39 +0000
Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: i1BFL1lpf1AbIqvXiJKoeFGflYumv2OazOSk6+wMqMw=)
2: iHSrTbxet8j5uaWQ6yDr02jRxjY.roa (hash: oCfYmcjvyzUP7DhCDsHSSh72gSgXxnVFLGRLc0v5Xfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3e:36:4a:66:71:6b:33:d2:bd:9a:02:76:92:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Validity
Not Before: Nov 11 10:00:39 2025 GMT
Not After : Nov 12 10:00:39 2025 GMT
Subject: CN=c3542d75f426664c039fac8b3ad206756144ba9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:65:41:33:41:16:53:01:10:91:fd:c2:36:
74:11:0a:87:71:42:a4:58:39:32:43:fb:c9:b0:51:
75:21:28:ab:0a:96:4d:3f:f5:5a:33:c2:21:2c:e8:
aa:09:8b:dd:1b:25:7b:61:3c:0d:74:d3:19:05:af:
59:57:0f:01:71:0b:39:c7:29:b6:1b:68:c6:8f:0e:
0a:ff:43:14:cf:79:69:0e:f3:f3:7c:d5:46:1a:d1:
8a:b4:28:bb:ec:ee:41:18:0a:2c:ed:a2:82:27:79:
52:99:d2:e9:07:b2:5f:4a:db:86:2b:c3:f1:cc:eb:
d8:96:31:01:ce:9d:56:d0:11:15:71:43:fa:35:f4:
96:17:6a:bb:c3:6b:a6:de:ee:22:1d:6c:66:db:96:
4d:7d:1e:ee:bb:e6:94:43:30:4e:51:22:bd:10:20:
bb:05:88:ee:90:19:1b:5d:b4:13:33:32:5b:db:a2:
34:98:cf:0e:4e:99:c9:1a:58:bc:39:4d:7d:3f:66:
1e:5a:eb:57:4f:a1:31:c0:59:18:61:05:74:6e:c4:
ed:b9:a8:56:ab:06:a4:57:d6:e2:54:96:b5:a5:d0:
a7:8e:1a:c8:90:6c:1f:12:04:51:a3:a9:f3:be:68:
8a:06:e6:94:de:3a:1f:fb:dd:d1:64:7f:90:4e:d2:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:54:2D:75:F4:26:66:4C:03:9F:AC:8B:3A:D2:06:75:61:44:BA:9D
X509v3 Authority Key Identifier:
keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c8:5b:22:e9:5c:a9:4f:3d:06:35:f9:c4:8b:c4:3d:05:43:
a2:e8:3c:07:0d:8c:80:44:48:12:46:26:dd:7f:33:e3:1c:d1:
50:64:e3:3e:65:7a:44:5e:78:4f:c0:21:5e:02:06:02:53:56:
24:b2:40:b1:39:16:68:89:3d:fd:46:8b:86:6d:76:82:8d:e9:
11:65:54:4f:22:48:f6:63:fd:44:8d:f7:41:7d:b8:57:37:e6:
4c:96:92:1b:af:25:0c:9d:8d:2f:ac:18:c0:6c:62:a4:fd:bf:
18:a9:55:2a:8f:1c:5d:49:55:8e:39:47:68:90:ee:75:e4:68:
29:5a:9b:e6:78:fa:83:e0:f6:53:82:3c:80:ee:d4:ec:96:25:
4e:ac:66:a3:a7:08:73:f4:ac:ac:02:17:94:60:76:85:55:82:
d0:ba:13:d5:4b:2b:92:e7:5f:03:c7:8c:e7:d6:33:cd:1c:7f:
5f:fb:62:79:2f:bf:95:64:20:f6:a7:e6:71:fe:f3:b1:32:98:
cd:29:97:f3:7f:03:28:f4:75:70:7e:58:01:cd:c6:82:47:10:
27:92:ea:ed:d0:33:44:e6:5c:a8:0e:bc:27:9e:d8:f6:f4:5d:
06:f4:4d:37:10:01:18:a5:28:54:7d:e3:fd:b5:e4:61:22:9c:
a3:02:e2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:47:06 2025 by rpki-client