Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: re1NltDge5aGMr7RFptl8GlTolhFsyWyFjOSx9QC0H8=
Subject key identifier: 05:06:D6:8D:67:9F:B0:BE:DD:CB:72:EA:65:C7:AC:A6:5A:B9:EC:E1
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 019A7180977E0EF1A53C6B4BDA32E871815B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 06EC
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: i02WwEqL0G/0sn3sDV/03f5Tclw1UBpNC445p26jIe0=)
2: NfUK1WerAdsfJiTM68i5Lnvkb2w.roa (hash: ZGezIXFkpMHBb+7ell8DWUCsKtD9DU2fEiI/6174M+w=)
3: x35TZBfjRzydIntP1wj4bzkffVI.roa (hash: m3lAcV9738Nh7P2x7upDgBTiTVZP/HAse993nyHmPOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:97:7e:0e:f1:a5:3c:6b:4b:da:32:e8:71:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=0506d68d679fb0beddcb72ea65c7aca65ab9ece1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:67:30:69:75:c7:59:c4:39:f0:8a:96:69:
09:84:f9:96:18:28:11:7a:96:3e:b3:7c:38:1c:00:
5d:e5:6d:ed:f0:b0:0c:62:22:4c:1c:2f:f4:cf:09:
b7:4d:e6:71:b9:54:de:67:d5:4b:31:09:ea:79:50:
31:80:70:b1:6d:d4:57:ca:c0:01:43:3c:4a:68:4d:
b6:f4:13:9e:42:82:fa:93:64:88:a0:4e:93:60:61:
72:52:df:cd:f8:df:fe:fc:c4:ea:15:3b:65:ef:f5:
86:1e:72:c3:35:62:07:25:e8:bd:0e:10:3c:c5:4f:
1f:51:fa:f7:c9:2e:f8:9f:b8:86:b4:f7:95:7f:14:
83:41:82:09:c5:14:f7:28:4b:fb:5e:ab:bc:07:fd:
38:90:de:c5:62:77:30:3c:68:5c:63:6a:29:24:ee:
c3:a1:8c:c9:12:df:2d:74:65:17:7a:45:f0:cd:18:
16:ab:26:67:78:99:05:ff:68:96:9a:c3:29:31:0d:
ad:b5:59:92:cb:b5:15:79:ad:7e:7a:e5:f9:56:6b:
39:ff:a3:18:88:24:4b:b5:88:c7:ae:f6:f2:18:52:
03:21:7d:ee:57:d0:a5:b6:b3:3c:dd:9e:de:13:67:
2d:e9:78:14:bb:63:19:02:3e:fe:60:4c:68:d4:90:
da:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:D6:8D:67:9F:B0:BE:DD:CB:72:EA:65:C7:AC:A6:5A:B9:EC:E1
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e5:c9:41:44:28:2f:94:ec:5d:69:f5:d5:83:26:ae:0e:a7:
70:24:f1:b4:32:12:b0:21:03:31:95:2e:68:f9:8c:fd:fc:1c:
6b:45:96:02:77:cd:82:7e:af:57:68:51:37:7a:23:6a:0a:d8:
a3:3d:0b:b7:1c:7e:8b:c3:a0:1a:54:ce:76:63:fe:97:86:19:
3b:1d:ae:e0:38:7a:dc:5a:c1:2d:06:f5:89:65:d1:36:f5:42:
ce:6b:93:1e:fe:22:45:d8:36:8d:22:f9:31:3a:c0:50:69:9f:
b6:14:cf:82:75:01:66:bc:fc:23:ce:cc:dd:81:c1:1b:ba:c5:
fe:5a:db:88:19:fc:f1:03:d4:3f:e1:0f:7f:63:44:7c:c3:52:
72:a2:1c:08:3a:75:5f:f6:e3:20:59:4e:2b:3d:bd:d4:f1:97:
99:f1:5e:27:d1:6b:fd:59:fb:0f:ee:4a:74:61:c1:ea:7f:2c:
10:69:01:23:8f:bb:40:ff:27:07:31:0b:1f:db:f6:be:cd:2e:
55:d7:18:57:ce:1b:1d:78:51:de:07:22:c9:1e:bd:17:f1:53:
74:17:5a:d1:dd:e1:04:1b:58:23:e9:ab:4d:97:9f:5c:82:59:
b9:af:38:b5:2a:20:07:4e:96:2f:e6:aa:37:ed:28:af:05:2d:
3a:21:b7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:36 2025 by rpki-client