Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: y6JT+59uY3zN3CYRDXwKJyqzrz6uvHfL3GQGwW8Vgck=
Subject key identifier: EA:B0:49:AA:98:E8:CF:D5:E4:91:80:55:7B:FF:3D:48:B8:C9:90:4A
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 019A2109608EF2E071582B84D30FDECCE93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 12A1
Signing time: Sun 26 Oct 2025 15:00:53 +0000
Manifest this update: Sun 26 Oct 2025 15:00:53 +0000
Manifest next update: Mon 27 Oct 2025 15:00:53 +0000
Files and hashes: 1: EgrdXaLN-vc8C2zZS8RN3DywvDo.roa (hash: hzm54PDUPW3onP/qtSLZRsQOvKv3wuQ4riGx7IRQcQA=)
2: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: KFTOdQ6TUW/llvYh59txVub7NwDhTCYiGixXzxucVtI=)
3: rAaiXMvO9i5snovqluPbyo_QCN0.roa (hash: pt3vDzVbNzSpy4PSZ8+XX3gpZBn6uEG/ZRILx9TbDQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:60:8e:f2:e0:71:58:2b:84:d3:0f:de:cc:e9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Oct 26 15:00:53 2025 GMT
Not After : Oct 27 15:00:53 2025 GMT
Subject: CN=eab049aa98e8cfd5e49180557bff3d48b8c9904a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:e0:05:98:da:0d:89:78:bb:e7:0b:27:e8:
92:00:0b:07:85:ee:de:eb:b0:7d:a1:91:be:05:5b:
04:d1:62:d0:5d:61:a8:f8:5f:0c:94:0f:35:ef:05:
fa:c5:55:ef:9a:ef:11:61:bd:f0:e9:cc:16:a2:d6:
3e:64:57:95:9a:01:14:a4:c8:51:f6:cd:a4:42:af:
4f:fd:04:1f:a4:d6:38:9a:ac:91:8a:b4:41:00:8d:
9b:96:bb:cf:ad:4e:40:91:49:fb:f7:07:7a:ce:78:
89:2f:e3:b6:88:ae:9e:ae:34:62:42:1b:9a:20:12:
81:43:c9:d3:1e:d7:43:f9:4e:f1:33:88:7b:90:1f:
79:c4:f5:15:0e:08:31:54:65:58:dd:90:43:57:57:
c5:a0:e3:c7:b6:83:34:12:5d:7c:c4:07:24:be:5e:
68:ba:cb:5e:52:dc:a8:ce:64:d2:55:84:34:27:a2:
08:27:7b:5f:94:04:1c:cd:5b:5e:0e:2c:2d:f5:ae:
51:69:58:fd:61:0d:03:a5:46:e9:f0:cc:68:da:d2:
62:e5:7a:95:8a:5c:a9:f5:5d:cd:78:f4:79:ba:37:
21:ca:40:6d:e2:be:c1:f3:c0:f8:7f:33:f4:e2:35:
a9:6a:80:94:54:69:6b:9b:28:ea:c0:aa:1a:bd:5a:
2a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B0:49:AA:98:E8:CF:D5:E4:91:80:55:7B:FF:3D:48:B8:C9:90:4A
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7e:b9:04:0a:43:b9:78:3e:2d:a4:21:58:93:b6:57:be:71:
63:1e:02:58:8f:32:80:56:18:09:31:74:3f:22:2c:59:e6:5d:
ee:9e:d2:11:65:86:94:5e:75:ce:21:a9:ef:35:dc:a3:1b:e8:
89:16:aa:65:a7:a2:4f:6b:cc:91:00:52:69:28:c7:5b:f1:40:
50:13:9d:87:54:34:f4:0b:91:92:dd:51:0d:f8:71:db:67:c2:
57:85:15:61:8c:fc:86:1c:61:46:af:6e:b5:f5:86:35:ab:42:
ed:0e:c2:67:fa:0c:ce:6d:ea:ad:84:ff:9c:9b:32:90:ee:52:
5f:0e:fc:ec:06:69:4c:11:90:dc:40:36:b9:a1:a0:3c:18:f8:
a4:0b:78:c6:0d:80:cf:a5:10:68:f0:ca:fb:91:e8:8d:b1:81:
b8:78:07:ff:2d:1d:68:04:da:b4:bf:e3:36:0c:f0:39:f3:32:
5d:54:9d:2c:65:1f:87:7a:30:27:cc:45:c0:6a:f0:54:75:2d:
8a:47:fa:17:ed:2b:aa:47:c2:d2:ad:15:0e:69:c5:20:73:b4:
8f:c4:a5:d3:41:1a:de:8c:06:ea:d9:ad:f7:4a:d3:f7:3b:ca:
a9:e7:5a:73:ec:d5:bf:72:bf:69:34:0b:77:71:97:eb:22:b5:
f1:ec:0c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 19:04:05 2025 by rpki-client