Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: T+kairx9DHlz88zGqnTgotjVWV6wNM2BWmO93tP03yw=
Subject key identifier: FA:0A:1E:D3:1E:4F:0B:11:AB:8E:5C:CE:D8:4D:52:48:18:B4:B5:53
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 019A27424BCE3C65755AA3F58CC9228D85DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 20:00:47 +0000
Manifest this update: Mon 27 Oct 2025 20:00:47 +0000
Manifest next update: Tue 28 Oct 2025 20:00:47 +0000
Files and hashes: 1: DLMTOoacedomtvAfOo_wUgsg7ZM.roa (hash: CuMafo/kjG1kejlU1ti10/bQ5ADJP+5OLOjwOYxRNqo=)
2: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: EZhrv8mkTmqzpZyWSaWqh++R5saA/bF2pz7Lp8rgqNI=)
3: KySbiR-MGliV0HnEusiYoVPq_Tw.roa (hash: Tom90ESsjuLbQCudFU+oOzUxWbGr9ZgqEwEe4qv+gmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:42:4b:ce:3c:65:75:5a:a3:f5:8c:c9:22:8d:85:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Oct 27 20:00:47 2025 GMT
Not After : Oct 28 20:00:47 2025 GMT
Subject: CN=fa0a1ed31e4f0b11ab8e5cced84d524818b4b553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6b:df:54:a2:f9:95:be:bb:0c:a7:cb:93:98:
5c:7c:ad:17:d4:3c:ec:38:b1:de:80:4e:f0:fc:d2:
57:a2:93:28:ff:3a:d8:52:e3:d1:09:56:f2:04:cd:
29:be:25:f2:e7:98:ad:6f:6b:fb:29:24:3e:f0:b1:
2d:7d:cb:42:5b:24:d6:f0:34:31:65:06:f6:59:c9:
f5:12:75:69:61:79:7d:34:fe:36:53:6c:e2:ed:c6:
ae:a4:90:a6:c9:f9:38:40:0a:93:52:18:10:11:65:
54:d1:df:53:08:aa:55:22:07:44:38:8f:37:bd:a5:
9b:a9:69:5f:a5:24:0e:0a:d2:95:bd:f9:b2:7d:a7:
77:bf:91:29:22:4d:4d:80:83:f7:1a:57:47:d5:77:
e6:f4:66:57:d0:cd:0f:0a:6b:1b:cc:17:0f:a8:33:
92:78:22:78:6c:0d:07:79:57:ef:9d:c0:9f:4b:0c:
8c:cf:6f:ef:ea:41:76:91:10:2f:fb:d9:36:cc:dc:
f1:7c:c9:57:3d:c6:d5:ad:e4:64:e9:92:93:da:ca:
60:48:50:d9:e2:58:4b:71:ce:40:ab:5c:13:0e:78:
19:a7:77:e7:ff:a5:98:04:77:4d:5c:30:ad:09:5a:
d8:9b:ef:e8:56:b4:7f:a7:34:f8:be:da:f4:de:20:
4b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0A:1E:D3:1E:4F:0B:11:AB:8E:5C:CE:D8:4D:52:48:18:B4:B5:53
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b4:b8:c0:c6:53:56:33:90:11:2f:ca:14:e2:49:91:cb:8e:
83:2f:6b:ad:83:36:44:00:54:c9:3d:64:d9:41:6b:dd:4c:29:
06:b2:ab:6e:74:fa:bc:06:1a:7d:df:64:3e:b3:2e:e5:92:27:
fb:ef:b8:bf:13:5c:f5:cb:25:e2:31:a6:e2:b4:2e:c5:76:d9:
44:1b:1a:dc:d6:9e:be:12:62:34:8e:a6:13:1e:e2:1c:f7:b0:
c9:4e:c6:c2:a6:68:16:1d:10:01:72:9d:cb:88:46:72:d6:8b:
3a:70:25:95:c2:cb:21:3f:c9:9d:30:6e:4e:ef:87:20:cd:3e:
de:6c:79:dc:aa:37:05:d5:35:f9:11:e8:c3:51:fd:07:4a:8b:
e9:fe:a8:2f:ed:01:b0:4d:37:bc:51:2f:cb:99:99:fa:63:ff:
b2:2d:51:88:c8:dd:9c:12:3a:1d:85:9a:95:eb:4d:c4:e4:a1:
11:86:77:3d:7b:b8:cb:03:d0:fc:ee:e2:cc:87:ce:7c:bf:2d:
8e:cb:63:06:db:b1:aa:ca:d6:03:c1:62:11:14:5a:88:68:dc:
9e:36:3d:00:83:e0:ce:78:be:68:90:d1:bc:b4:16:8c:ad:c1:
04:f4:d5:fc:97:ec:97:61:25:81:ea:dc:a2:57:54:0b:cc:df:
f2:1e:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:40:53 2025 by rpki-client