Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: fuZWsh059ynWYfo6fphdYDLuKQHEeILpjb1JilDAOTs=
Subject key identifier: BB:E9:8B:FD:28:21:D4:C3:48:97:AA:C4:4E:E9:88:6B:47:4C:94:32
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 019A19BD32A0D9B4C5AF7D88E7C366FF028B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 05:00:20 +0000
Manifest this update: Sat 25 Oct 2025 05:00:20 +0000
Manifest next update: Sun 26 Oct 2025 05:00:20 +0000
Files and hashes: 1: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (hash: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=)
2: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: ooboaBTT83KjwyeJNfJ/F1nRDustrwehlgMa5g4d5rs=)
3: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (hash: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:32:a0:d9:b4:c5:af:7d:88:e7:c3:66:ff:02:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Oct 25 05:00:20 2025 GMT
Not After : Oct 26 05:00:20 2025 GMT
Subject: CN=bbe98bfd2821d4c34897aac44ee9886b474c9432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:4b:10:7c:60:48:93:81:40:8e:9d:a9:53:
9a:80:68:27:e9:6a:11:10:1a:6b:0c:51:d0:73:f3:
e6:e9:1f:e5:08:7d:5f:7a:3d:25:28:2a:c3:11:19:
2f:bd:96:4b:49:0e:dd:4f:f9:fe:00:dc:73:1b:19:
05:0d:07:3c:1f:29:84:f6:ca:68:30:03:96:8e:a8:
13:1e:7f:95:43:8b:3c:19:c6:26:5b:92:75:0d:87:
df:ad:3d:2d:ce:e7:7c:c5:53:49:e8:19:f9:e6:e4:
27:9f:d1:20:74:a8:62:1c:6b:8c:7b:87:71:95:2c:
23:3a:fe:42:e8:f9:ad:ce:73:a4:47:95:2a:35:50:
30:23:35:63:9f:5c:58:fe:d3:be:fd:6e:ba:58:66:
80:9b:67:0d:d1:c2:d6:b0:c9:6f:96:a9:f6:3d:a1:
29:95:7c:21:1c:44:8d:93:b8:80:32:98:da:cc:21:
d8:d5:73:73:31:30:22:ef:c9:61:a5:c1:b3:c5:26:
80:e0:21:a7:9e:7f:76:25:e4:b6:ff:a5:89:cb:78:
fb:a2:b0:2b:48:56:aa:fd:64:95:5a:4e:b3:d6:ea:
97:3d:8b:1b:72:f3:1b:7e:1b:e0:9d:9a:e2:fc:65:
78:a2:fd:67:4c:9a:00:5a:bb:05:58:1b:04:eb:90:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E9:8B:FD:28:21:D4:C3:48:97:AA:C4:4E:E9:88:6B:47:4C:94:32
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b6:87:ce:92:84:95:bb:64:18:b2:49:aa:34:3c:47:9b:e9:
c7:27:53:55:28:ad:d3:7a:71:1c:c2:5d:72:68:47:7d:b8:25:
e8:c4:ce:df:33:7f:95:65:6d:0a:cb:40:2b:29:aa:a6:be:77:
b4:69:6f:2d:ba:2c:5e:dc:bf:3d:80:a8:00:88:ac:e4:78:09:
2c:46:f9:ff:3a:7c:bc:26:1c:32:17:c1:38:fc:03:54:f5:18:
77:eb:a3:02:d5:0e:81:0b:7b:1a:5b:b8:77:9a:4a:80:7a:3f:
fb:d1:56:a6:92:52:71:0d:49:e2:4f:6f:65:f9:32:ac:f4:d3:
86:0a:eb:2c:d7:0a:c9:48:ee:3a:73:62:2b:ba:2e:5c:38:c9:
dc:27:ae:3c:ab:f0:c0:23:f0:56:c5:9b:a0:dd:84:ad:08:78:
06:5b:53:65:e2:bb:a2:3a:fc:a2:24:1c:f5:1e:cc:aa:db:37:
ae:6f:3e:30:00:82:10:b0:75:05:3d:15:5f:bc:fc:b1:ac:96:
fb:82:3d:a2:c1:06:53:48:22:3f:d5:a2:51:c1:d7:dc:12:2b:
06:b2:0c:4a:32:06:8d:06:60:71:7f:f1:98:fe:76:e4:31:79:
1c:94:ce:63:65:37:13:b7:b6:c6:c8:ed:f0:03:f1:09:c0:d7:
94:72:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:33:20 2025 by rpki-client