Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
File: H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft (raw, json)
Hash identifier: xaAqS1X8rdIGZxFvSjF4sfxPMM/Nt5Y8wyiRkb3cGqo=
Subject key identifier: 9D:80:37:F9:35:D9:39:79:70:4E:0E:5B:B1:84:0E:5C:C4:41:5D:3B
Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Certificate issuer: /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Certificate serial: 019A7225A8C2C4CE7B64F02862BC2BE678C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
Manifest number: 0D10
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl (hash: k61NpM2GMAo1gfOi06ykkL9kIW5wVq6KUqH/UhYnF+4=)
2: mxOxKrBmnmPClr9Kc96iEdW6XUE.roa (hash: UbZRUNNa6gB9j1h+WjL/FTz+dVPKNCXmn8kcP5ajisc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a8:c2:c4:ce:7b:64:f0:28:62:bc:2b:e6:78:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=9d8037f935d93979704e0e5bb1840e5cc4415d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:8a:93:42:dd:00:94:db:e2:7d:7f:b7:cc:
e1:35:32:f2:84:5e:d9:88:63:05:38:cf:a3:4c:f3:
e0:85:f1:b9:53:09:8d:d1:6f:13:b8:00:08:0f:1c:
b2:f4:32:c5:7e:73:ef:28:39:08:ef:bc:bd:0c:e7:
1d:7d:fb:28:40:6c:12:75:2f:1b:44:7c:31:10:fb:
e3:95:23:7f:8c:ae:17:29:84:e0:52:12:99:1d:16:
b9:74:58:3e:75:91:10:9d:0d:31:94:a1:7b:46:a1:
2d:18:b2:6d:3b:85:62:cb:e0:d7:ba:0c:bd:9b:69:
6e:a2:02:0a:6f:9d:0e:f7:3f:3b:c9:b3:6e:8f:91:
54:b0:75:22:36:df:50:d1:02:68:94:16:df:14:f0:
e6:b2:85:a4:da:0d:57:7c:84:ee:59:5b:70:e7:56:
7c:c9:92:a2:41:bd:17:e7:c0:f4:7d:52:3e:2e:c9:
d3:a8:26:d6:ef:ed:3f:53:a4:ad:bc:90:8b:a1:02:
62:76:56:94:a4:7b:b9:7b:f3:ff:7d:5d:9d:60:1f:
11:85:86:8e:83:de:0f:01:30:fc:7e:6e:f9:59:19:
21:f0:b5:cc:06:ad:35:3d:59:13:8b:66:3b:57:ee:
d9:7c:b7:bd:b5:92:cb:da:1c:c4:7d:94:69:b2:15:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:80:37:F9:35:D9:39:79:70:4E:0E:5B:B1:84:0E:5C:C4:41:5D:3B
X509v3 Authority Key Identifier:
keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:21:59:a0:b0:84:40:02:6b:a4:5b:ab:91:51:5c:4f:bc:d1:
d1:fa:2b:d5:8e:19:e0:fb:a6:c8:23:8f:1b:ce:9e:68:f8:5d:
34:e9:d6:a8:19:7e:f9:c9:ab:9d:25:64:a0:60:83:34:67:2f:
1d:66:2a:bd:b6:db:05:49:ae:7e:20:17:37:ee:36:09:bf:66:
5d:83:20:ac:2f:b8:ec:7e:1a:6e:2e:6a:04:2b:94:96:11:68:
71:18:43:87:1b:65:a0:b6:10:5c:bf:f2:22:17:bc:01:9b:8d:
30:9a:03:93:ec:b0:98:fb:57:95:bd:50:a3:e7:d4:f1:a3:f2:
30:e9:09:e0:15:10:9c:dc:04:64:1a:98:b4:c5:35:b7:c0:65:
b3:f7:56:e6:8d:83:d6:89:5f:81:7b:aa:c7:e7:3f:fc:1e:3e:
25:34:90:b2:e4:e0:b5:5d:a8:44:59:4b:e0:0b:56:6b:26:12:
3f:c7:23:86:9c:11:5c:7f:42:b4:f9:52:3b:a0:2a:c8:3c:fa:
52:8c:22:ee:af:10:b8:0b:18:0f:42:f1:4f:2e:56:ef:47:5b:
b6:e6:b8:ed:0b:b7:33:8f:10:53:b6:54:5d:bc:36:ea:1b:28:
f1:8f:71:40:5a:03:10:51:9c:66:59:b8:e0:35:46:b1:2f:ca:
fd:69:89:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:33 2025 by rpki-client