Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
File: h30YEASPQ3IFBuTBgg9v4I_3ym4.mft (raw, json)
Hash identifier: iu4uATDpczTSC971b1rFyOHH1kuC8E62W80X8RbpWE0=
Subject key identifier: 06:C1:0C:8F:B7:E3:56:6F:2B:76:03:E0:FB:F1:84:FF:CD:77:A5:D2
Authority key identifier: 87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
Certificate issuer: /CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Certificate serial: 019A71B87A9F325AE88919CE980FE4804C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
Manifest number: 0CB9
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: BUF7f1UtiJtn_Bvl19qd2EwX0QQ.roa (hash: aqc2Xj2T1ZitA4dQvOlzNWa0gg3kBqNbkLQxtT41W0I=)
2: h30YEASPQ3IFBuTBgg9v4I_3ym4.crl (hash: BgKVwpkw0i0zPHw1niueXWXLNuuI8YD739Ho0qmvGvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7a:9f:32:5a:e8:89:19:ce:98:0f:e4:80:4c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=06c10c8fb7e3566f2b7603e0fbf184ffcd77a5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:bd:c1:92:d8:99:52:71:af:08:98:13:8d:
9f:66:01:ed:24:05:b5:16:b9:ca:32:a1:cc:12:e1:
5b:09:7c:5f:79:1c:31:fa:e2:8e:86:60:97:fa:39:
3e:f5:74:6e:e2:88:67:90:eb:f8:94:89:5c:27:7d:
f2:06:66:23:46:3e:b9:db:ba:bf:34:f3:ba:64:c3:
38:2f:d4:ef:47:68:19:1b:00:61:89:6a:85:05:f6:
57:77:f4:9e:77:35:5e:4d:10:1f:01:f8:ec:40:4e:
c3:6d:f1:93:1b:f9:c7:89:14:84:1c:50:0e:87:d8:
1d:7e:41:b9:c7:22:72:71:52:2b:ed:f9:ff:0a:70:
8c:a9:e4:cb:c3:81:7b:58:53:2a:ae:e6:15:60:14:
96:b7:cb:ab:51:59:89:87:60:96:a8:cb:0f:35:c5:
da:5f:ea:6f:9c:1c:bb:ca:c2:df:03:57:c3:ed:43:
af:e9:00:dd:bd:41:fd:6e:9b:84:a5:09:ef:01:a3:
e5:03:db:e2:01:5b:b2:dc:90:e0:de:e0:d4:ae:88:
cb:89:b9:2b:64:99:c0:d4:0f:bd:2c:3d:93:43:7b:
46:46:70:a7:0c:92:56:f8:61:d0:6a:d6:11:3a:06:
91:be:80:74:6a:03:fb:c5:4b:53:e0:b8:e6:4d:a6:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C1:0C:8F:B7:E3:56:6F:2B:76:03:E0:FB:F1:84:FF:CD:77:A5:D2
X509v3 Authority Key Identifier:
keyid:87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:42:a9:cd:30:e1:e1:69:c6:92:f1:87:f1:40:4a:ba:77:dc:
a6:4d:40:51:ff:e1:e1:ff:0e:1f:24:09:e1:b1:fd:a6:95:5a:
d3:5c:ea:2f:05:d9:46:72:dc:c6:74:ff:06:80:e3:28:96:51:
3e:3f:7c:2d:a1:23:83:9e:37:5f:1f:32:93:9b:83:4c:3e:f4:
c9:84:f9:4e:96:c1:34:51:c4:c1:50:34:14:c4:53:05:c2:f7:
2f:e5:c5:f7:9c:8f:86:1a:48:1c:07:fa:34:4b:f5:04:89:04:
d2:32:8f:31:3d:89:cc:23:06:15:13:22:71:93:82:fa:b2:2d:
34:d1:f0:50:c8:b5:6b:3b:56:58:19:f8:bc:ea:c4:22:be:a0:
f6:bb:31:fc:5a:43:19:65:d5:f8:1f:a8:28:eb:6f:80:36:3e:
dd:02:c7:1c:6e:d1:e6:0b:42:22:03:af:96:82:01:fc:c2:98:
07:bb:ed:23:ba:79:83:41:6c:4a:e9:3d:ef:77:ec:41:17:12:
5c:83:bb:8a:6e:29:10:cc:74:16:f4:af:98:96:2c:70:20:fe:
b2:18:0e:15:0b:37:96:9c:15:7c:4c:b7:e7:48:31:8a:6c:08:
84:5c:e9:68:a6:4b:34:36:b9:4e:41:5d:48:f3:e8:07:a1:a6:
a1:f7:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:32 2025 by rpki-client