Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier: uVXnq4iknE3F9cL8ygYoPrr5RAPrZjuNTVR3jyx5ToU=
Subject key identifier: EC:C3:E1:88:AA:66:5D:FD:23:6F:C6:DD:30:B2:ED:18:45:90:0F:BF
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 019A1384DC451C48AC7891B03386BB220D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number: 0605
Signing time: Fri 24 Oct 2025 00:01:05 +0000
Manifest this update: Fri 24 Oct 2025 00:01:05 +0000
Manifest next update: Sat 25 Oct 2025 00:01:05 +0000
Files and hashes: 1: PadXYOgLqVZA9ql5KBGvS89vmRo.roa (hash: nxJ2UXZ8SywJLT0Mr208cedxyBjVOFCCZZniGKgSLRU=)
2: X4DPqtKQyZOWAKBMlN7mRtcd1Ms.roa (hash: kXRcohahU5UXZUtKpTF4pyZvtQAWUIYvj9zgl+Pf9XM=)
3: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: jWVZnvnpRFYxcLVC8BAqpvjDlgDkdhGCBJMCeXw9QpE=)
4: i-NcdzW87JQ4S13PQa8zzViNhxY.roa (hash: 5KklHjluhn1HzYRZR4tDfo9d5WYKAm0X95RTT55u4EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:84:dc:45:1c:48:ac:78:91:b0:33:86:bb:22:0d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Oct 24 00:01:05 2025 GMT
Not After : Oct 25 00:01:05 2025 GMT
Subject: CN=ecc3e188aa665dfd236fc6dd30b2ed1845900fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:aa:2c:93:c7:eb:12:09:cd:aa:e8:80:24:
20:73:f6:a5:b6:5f:5f:f0:eb:63:de:82:1c:1b:10:
66:92:e9:75:d5:c1:47:71:86:ec:e1:b9:9f:10:4c:
bf:5f:77:87:9a:eb:aa:83:1e:fe:2d:d4:c2:2f:3a:
2d:14:56:8e:f8:14:90:7e:07:ee:aa:25:15:a8:63:
ce:13:57:30:88:c1:e1:d1:93:b2:2a:49:fe:29:32:
dd:e6:1a:0a:b5:74:c6:11:5b:bb:9c:4f:bb:bc:8e:
15:d3:86:e2:34:9a:a1:7f:ea:91:27:8a:84:ce:46:
a2:6c:78:de:74:1c:99:7a:1a:de:22:a7:a4:b4:5d:
8f:63:b8:b2:e1:c4:da:2f:9e:e2:23:29:e2:f7:89:
4f:0f:03:f4:55:35:55:15:a0:3c:e0:1d:c0:eb:4b:
01:65:f7:ba:f5:6d:b3:ba:ed:ae:2c:4a:b4:01:0a:
b1:ed:48:24:82:75:13:17:54:8e:d3:cd:f0:c3:e9:
34:57:90:33:d0:bf:af:ae:39:94:c0:2d:e3:4e:32:
7b:8e:a3:c1:3f:fa:96:7f:86:8c:f7:50:f6:ba:de:
4f:0e:8e:65:7d:e1:66:c4:df:12:79:51:fc:6b:15:
53:97:73:8f:6d:67:dc:d9:54:23:2d:79:0b:48:d5:
51:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C3:E1:88:AA:66:5D:FD:23:6F:C6:DD:30:B2:ED:18:45:90:0F:BF
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:14:83:21:aa:31:8c:11:14:d2:d4:31:10:6f:c8:f7:db:64:
f1:e1:aa:ae:73:f3:81:80:75:8c:ab:54:5b:ba:b2:25:99:9b:
c9:98:cb:30:20:84:7e:99:c5:e6:8e:8b:d0:d7:bf:2f:c4:9e:
92:4a:5d:1d:6a:67:c7:e9:eb:25:a2:a5:ee:84:25:ee:a2:d1:
07:4f:7a:f7:bf:3a:b0:2a:e9:56:fc:6f:98:9d:87:dd:5e:44:
85:ab:46:96:04:d2:93:d1:e1:c1:e4:c0:dd:0d:6e:be:fa:bc:
e8:3c:ae:e5:3e:18:31:fc:3d:79:48:77:15:e0:cd:ff:7a:bf:
2d:c7:3f:d3:8e:37:c4:12:89:ec:a0:74:a7:0e:ea:af:bf:1e:
7e:ce:95:3f:6f:db:dd:94:89:82:d1:ae:a9:ef:28:e9:e6:49:
b2:b6:2c:d3:11:6a:c4:53:86:2f:91:e5:3c:6d:fa:b7:ec:c6:
90:b9:62:85:69:9f:80:55:8c:85:68:30:73:fd:23:b4:79:b7:
87:77:91:44:13:af:af:f8:0b:c6:39:bb:7c:1f:a8:31:5c:6a:
33:09:f7:5f:d9:97:2d:00:d6:06:16:8b:fd:47:b1:89:e4:d4:
a5:fe:f8:18:9a:aa:9e:df:a3:fd:79:17:5f:7e:5d:e9:bf:d8:
af:94:ce:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:31:47 2025 by rpki-client