Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
File: H8jtRm3i5spZZNHu0PJA3dJR3kg.mft (raw, json)
Hash identifier: dtnjTz7EzSzDlwAmEX3VhGNpZNfFliur5dNSZzDc3E0=
Subject key identifier: 39:B3:8F:84:03:82:F9:0E:93:BC:5F:EB:DB:C6:9E:97:7F:B9:D0:30
Authority key identifier: 1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
Certificate issuer: /CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Certificate serial: 019A725CF6846E7C9C7BDB74231FB1B07E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
Manifest number: 1676
Signing time: Tue 11 Nov 2025 10:01:26 +0000
Manifest this update: Tue 11 Nov 2025 10:01:26 +0000
Manifest next update: Wed 12 Nov 2025 10:01:26 +0000
Files and hashes: 1: H8jtRm3i5spZZNHu0PJA3dJR3kg.crl (hash: ZUdZVIYdw/CBwu7vDp7gZqunZhdx11/7tnD66Dom6s4=)
2: nevmretTwrxwqsKKQjHFsjVUEY0.roa (hash: fWFJu1Hs2S96Xtm1+v7RRTX9W7ZYHV7fdQSuyQbPzQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f6:84:6e:7c:9c:7b:db:74:23:1f:b1:b0:7e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Validity
Not Before: Nov 11 10:01:26 2025 GMT
Not After : Nov 12 10:01:26 2025 GMT
Subject: CN=39b38f840382f90e93bc5febdbc69e977fb9d030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ae:7d:8d:d1:d9:30:d8:4e:28:08:f3:97:34:
a7:4d:77:b1:15:7d:3c:ad:a7:88:6b:20:56:d0:49:
2b:66:ba:e3:9a:68:20:67:cf:a7:89:e4:ad:28:db:
0e:e0:07:74:83:b8:66:c2:00:eb:ad:80:13:a4:55:
62:ec:ac:98:bd:07:ac:33:82:2e:c9:7b:34:fa:a3:
f7:b1:1b:e9:f5:6c:43:4a:ac:71:c4:96:5d:2a:0f:
38:f5:b1:9c:92:40:dc:f1:d1:67:32:c3:2e:c8:98:
8c:3b:8b:b9:b5:82:f9:06:16:0d:da:1a:b4:9e:da:
89:da:30:d6:c7:1c:15:27:6c:07:d0:4b:84:12:2a:
7e:b8:1b:b6:1b:99:5a:19:89:ab:70:37:95:d7:18:
0c:f6:04:b5:b6:95:36:f0:10:a7:61:0d:10:ba:6b:
3b:b2:7e:3f:9d:bf:1d:dc:90:db:ec:4c:0b:ca:ce:
63:74:2f:64:29:05:7a:f1:44:0f:8a:51:1e:d5:4e:
34:2c:5d:21:64:5c:1b:2d:94:06:9f:fa:1c:c5:fb:
ab:d5:cf:b1:56:7a:51:a8:64:cb:f6:a5:fd:a0:cc:
db:56:17:93:87:f2:d6:22:3b:de:e9:e2:b5:3c:9b:
39:71:4d:a1:a9:59:99:32:8f:40:2c:ca:5e:62:3f:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B3:8F:84:03:82:F9:0E:93:BC:5F:EB:DB:C6:9E:97:7F:B9:D0:30
X509v3 Authority Key Identifier:
keyid:1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5d:a2:78:d5:c3:b0:74:e1:0e:93:19:ae:8d:4a:10:3b:81:
69:71:22:0f:08:30:ea:ab:2f:25:f9:4a:6a:dc:3a:e2:c4:82:
e1:81:44:41:dd:8c:af:5e:10:41:f4:89:a4:6c:a4:5b:81:6d:
e8:7a:06:d3:ec:43:27:ce:38:59:4d:09:a6:6a:68:01:01:ec:
d9:fb:a4:c9:d7:0f:07:ae:36:0f:fb:77:a8:99:8a:bd:21:4d:
af:63:34:35:b5:3b:f6:d3:3f:85:ad:65:99:c1:36:77:da:e2:
07:9e:e4:7a:8a:de:dd:a1:5e:4e:f2:ee:1f:d2:62:3b:81:cb:
ee:4c:78:f9:4f:dc:9b:8a:81:59:d7:75:1a:fb:4a:1a:63:ec:
5a:4a:15:ad:8d:02:40:70:f5:c2:b3:b2:a1:ab:46:ba:97:ed:
a2:96:d6:d2:b1:27:15:a3:98:07:74:20:d8:a1:e3:4b:bd:3b:
28:3c:8a:d3:04:36:ca:3e:a8:61:bb:59:e1:e4:52:13:87:93:
d6:1d:69:0f:50:87:07:c6:eb:99:46:66:8a:c2:38:ac:6e:ab:
11:f9:74:d7:08:6b:6d:a2:d7:90:16:47:8d:3c:8b:94:5b:fe:
8b:f9:fa:c3:6a:19:ac:4e:6c:80:db:6f:91:80:60:52:93:fe:
b1:7f:f5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:39 2025 by rpki-client