Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
File: H_HOmuJWMQK_jqcqieBhUu9wWLI.mft (raw, json)
Hash identifier: 8k+f7DVsmolOSoffk+Q+1ZYZAszAZsWuC8oZcPNSBts=
Subject key identifier: 58:DC:DD:07:CC:C1:09:3B:4D:57:C2:DC:C4:D1:3E:9A:C7:17:A4:FE
Authority key identifier: 1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2
Certificate issuer: /CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
Certificate serial: 019A70DC0BE373B2828F06D7A91C962C2E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
Manifest number: 0A6B
Signing time: Tue 11 Nov 2025 03:01:00 +0000
Manifest this update: Tue 11 Nov 2025 03:01:00 +0000
Manifest next update: Wed 12 Nov 2025 03:01:00 +0000
Files and hashes: 1: H_HOmuJWMQK_jqcqieBhUu9wWLI.crl (hash: wykLxtIX8ZL4TU3jjb5dvGHHAcgT476oUf6Bj7FEq3E=)
2: y725qdTMwrOghX8GfkxscKc-PM0.roa (hash: EDVLr0vu1gCBKbpCOMXFSj7zevxafD+c2G6jh65rh+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0b:e3:73:b2:82:8f:06:d7:a9:1c:96:2c:2e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
Validity
Not Before: Nov 11 03:01:00 2025 GMT
Not After : Nov 12 03:01:00 2025 GMT
Subject: CN=58dcdd07ccc1093b4d57c2dcc4d13e9ac717a4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:14:e6:d8:02:37:65:90:f1:af:0e:72:31:
b6:0f:ab:1f:11:a6:3d:af:8a:b3:23:bb:7f:b4:6b:
f8:8f:e0:2d:18:e5:4e:4e:dd:e9:1c:fe:c7:62:37:
c0:79:be:7c:a8:8d:9a:ad:97:46:f8:fd:3f:1b:a9:
8c:a3:64:a0:e0:94:6f:c8:b6:de:e4:d6:0e:91:e8:
27:44:b7:13:a0:a7:be:8c:d5:e7:6f:0b:ab:a2:83:
65:ee:05:01:d8:5d:37:7c:1e:1c:ab:82:eb:61:9e:
a6:6a:9a:41:18:c7:8c:65:f9:a5:02:fe:e8:e5:ff:
2f:1d:bb:41:ad:35:f1:67:bd:7b:0e:3d:4e:b3:20:
41:6d:c2:c7:2c:00:06:bf:4b:6e:46:92:49:4d:33:
87:5a:b3:56:88:9e:87:b5:90:1f:3b:09:ef:32:3d:
eb:60:0b:15:d4:d5:a5:ac:a1:14:2d:a4:ac:12:6f:
c6:91:25:9b:90:47:bf:75:bf:29:ad:b6:25:10:66:
47:8e:e0:94:5e:47:f9:b0:fd:02:6b:57:50:18:bb:
42:ba:e3:14:b3:31:74:2f:ce:ed:1f:cd:8e:58:63:
f2:fa:6e:f2:27:3b:0b:36:7f:eb:c0:12:64:f9:24:
b2:68:ed:c5:2b:90:60:99:ee:68:7a:e7:09:5a:59:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DC:DD:07:CC:C1:09:3B:4D:57:C2:DC:C4:D1:3E:9A:C7:17:A4:FE
X509v3 Authority Key Identifier:
keyid:1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:17:0c:0c:55:02:20:6a:e4:39:23:91:00:fb:d5:d8:f9:35:
55:86:00:5c:a3:5f:04:a5:58:b0:93:6e:4c:c4:c0:12:17:51:
2d:36:ec:08:36:a6:cf:cc:5d:d5:d7:8f:1b:e0:8a:94:1d:e1:
c7:f4:de:70:13:4e:0a:a1:c9:5d:8e:4a:00:e3:a9:8e:fd:31:
b1:cb:77:3a:88:da:b3:87:a8:2f:fa:6f:33:d5:f4:88:c5:fb:
09:4a:b3:15:19:50:c7:74:c5:31:e2:34:8d:d8:ab:d8:2d:8f:
b0:f9:c5:e6:45:79:29:21:ed:52:28:0e:b6:2f:c3:76:a7:b8:
7d:3a:a8:1c:87:e6:68:25:4b:0a:b3:ed:05:47:21:f6:7d:f7:
03:5f:ba:24:53:82:f8:f4:57:1b:f7:0f:fb:9b:f8:84:e2:56:
a9:8a:33:09:f3:e1:9b:8e:31:76:50:5d:05:65:5e:e6:11:e5:
b2:e5:a8:76:10:0f:76:d4:1b:2c:24:ab:b8:4d:c3:7b:7b:1c:
7e:d2:45:19:af:7c:1e:03:ea:02:41:99:27:a2:2f:d4:57:d2:
08:c0:28:92:85:04:28:d4:61:cf:e1:3d:54:57:3c:0c:cf:e9:
51:0c:c3:f1:c2:ca:e1:87:90:46:d0:ef:da:51:0a:f8:4a:8a:
9b:6b:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:48 2025 by rpki-client