Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: n5KFAEMDEy/wKJAoFvUYqeHp4bkaz9KHLX+8w9lmkpk=
Subject key identifier: FE:4F:75:78:0F:42:68:83:18:29:FD:51:B3:4F:88:D3:47:0D:59:86
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 019A725C44B9E5ED8828AC9E31E23766E713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:00:40 +0000
Manifest this update: Tue 11 Nov 2025 10:00:40 +0000
Manifest next update: Wed 12 Nov 2025 10:00:40 +0000
Files and hashes: 1: NwkZh_DNuB_iBInY9wDbpyHdLgE.roa (hash: 5w+s5Rk1602R4y1zX8F10ZF0iAVWkGEzyROrjF/5dqE=)
2: SeFxeccbo68KLvP3eAvdIgxyzVI.roa (hash: KKPafx1oDtZuIFD9Wnd6TukbFDgA1SpzCeh9Ci09gpw=)
3: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: RvYORD64ta8JHu9vLLKcNOaJSDBC9CA5jtN3EgKDEVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:44:b9:e5:ed:88:28:ac:9e:31:e2:37:66:e7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Nov 11 10:00:40 2025 GMT
Not After : Nov 12 10:00:40 2025 GMT
Subject: CN=fe4f75780f4268831829fd51b34f88d3470d5986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:71:7f:76:fd:ed:1c:e0:c4:0f:cb:27:0b:
20:0e:29:f0:6d:55:95:c4:6c:94:46:d2:b2:f9:dc:
db:35:2a:f9:30:bd:e7:37:f8:b1:96:33:6a:87:f5:
00:87:ab:07:9a:f0:d2:16:7e:3c:24:03:44:13:38:
ea:37:7d:26:26:25:da:2b:7f:c6:1b:99:27:8f:54:
2c:b5:65:62:90:24:be:ae:61:ff:61:1d:ba:74:f5:
d2:76:3a:51:5b:50:5a:23:bd:53:50:ea:01:51:3b:
ae:27:83:89:15:11:06:dd:b7:ba:62:b6:1a:e6:5c:
c7:f1:bc:61:0b:f3:5b:a9:3a:fe:b8:a3:f1:f1:22:
bc:b4:7e:41:31:be:8a:d9:4e:9f:e7:21:6f:4a:66:
d7:c3:5a:8f:2d:23:8d:44:31:68:b3:d5:80:d5:22:
a6:9f:c6:9a:cb:a9:f2:3d:34:d8:2f:a9:7d:37:f0:
19:09:56:2d:9c:42:a5:5e:72:2f:d5:b0:99:74:26:
e3:97:dc:6a:04:de:03:15:e2:1a:9d:27:47:7f:2d:
9b:91:d9:3c:f0:49:16:a6:07:32:a6:3e:19:b7:0d:
81:c1:38:30:f5:a8:a0:b3:d0:ec:7a:54:f8:d4:03:
98:71:57:88:27:f6:63:5c:43:a6:f2:7b:09:19:b2:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:75:78:0F:42:68:83:18:29:FD:51:B3:4F:88:D3:47:0D:59:86
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0b:77:98:c7:f4:ef:32:f4:15:39:32:fa:87:a2:6a:0b:d0:
fc:50:f3:fd:f2:13:1b:4d:c3:58:59:eb:e4:94:35:cc:90:35:
e1:62:ce:d8:ca:d4:84:d3:18:60:9b:2d:23:75:6b:6e:e6:a8:
20:27:51:6f:d8:07:79:a4:0c:be:ed:e2:7d:4a:e3:9c:60:04:
cf:bc:5a:b8:20:f0:c2:20:3d:c4:af:46:b7:f8:ae:1c:50:4b:
3d:26:1f:2c:b1:40:5b:69:4d:b2:38:52:e4:8d:b1:72:42:29:
ac:75:24:5c:e6:b0:75:6d:45:9c:60:89:eb:b5:94:99:f1:99:
ad:38:ca:30:36:4b:4f:66:b1:d0:b7:86:82:dd:d8:50:97:46:
c1:e8:da:64:a9:07:5e:a5:da:ee:37:99:07:94:fc:14:85:05:
9a:b8:b4:45:6e:bd:9f:8a:0a:a9:d7:fb:05:f0:7f:d3:03:7e:
5a:34:e0:e5:ba:ad:f7:f4:da:3c:3f:87:48:e2:dd:19:64:86:
31:ca:93:a8:ff:51:07:b0:d5:04:cd:dc:51:ea:41:92:6d:e9:
de:d7:f9:d0:3a:f7:da:3f:89:2e:13:3c:80:92:3e:2b:c2:c7:
41:a3:dd:37:57:c3:6c:fe:a2:e0:2e:36:84:b5:3f:14:d4:f1:
b9:b2:f6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:44 2025 by rpki-client