Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: hr6e3vwMyY1uU6EbxThsetCh24cHxM1R7384fsty440=
Subject key identifier: B7:96:45:09:DE:7D:F1:D2:9C:68:5B:D3:51:F0:B9:B1:8F:EC:D0:51
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 019A03A3ABD2050D4DD35FB953BA2A2CFAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 0E72
Signing time: Mon 20 Oct 2025 22:00:49 +0000
Manifest this update: Mon 20 Oct 2025 22:00:49 +0000
Manifest next update: Tue 21 Oct 2025 22:00:49 +0000
Files and hashes: 1: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: GIttBESc5+JDXt//BqQpDVGnAITHEuONOkzTJCazKGs=)
2: QYI6qk9Zfa_51Q10YSN1VCMFzDo.roa (hash: vLhteTYzXMoTEM2IXWi4847wtewoAK//TnkULC4i1CU=)
3: giTh8Ebv-slnkkaTofMNpLbZvzM.roa (hash: bO2clbkcE8o6+abtqVuqTC73svDuw3XhC1F4AhqNJOA=)
4: pj_r37O8ymvyjuC6uSrXOKsAL0o.roa (hash: wt8kJLWKI7jt1DkUmOJ01bIYni4fTUbSQrDjjyaL96c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:ab:d2:05:0d:4d:d3:5f:b9:53:ba:2a:2c:fa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Oct 20 22:00:49 2025 GMT
Not After : Oct 21 22:00:49 2025 GMT
Subject: CN=b7964509de7df1d29c685bd351f0b9b18fecd051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2c:7c:a8:40:8a:ec:4b:4c:f3:81:3c:2a:cd:
ce:7a:f3:59:f5:08:7a:49:00:8b:9c:ce:72:8a:ae:
65:1e:73:04:f3:b3:9a:23:cb:cd:e7:61:b4:d4:b4:
72:7b:75:41:4b:48:bb:b3:e6:8f:a2:80:9d:bd:7f:
c4:10:ac:fc:73:53:a7:62:73:ab:ff:ee:3b:06:21:
5e:ca:c2:d4:1c:47:92:2e:f1:e2:fb:54:24:bb:39:
46:14:98:36:2a:75:9f:24:f8:08:5f:1f:c8:f0:c8:
4b:64:06:c8:e0:77:59:29:07:5f:a2:86:11:41:92:
a7:69:d3:e6:59:02:71:79:b9:c3:ce:6d:6b:4e:fa:
ca:ac:d6:b7:11:8a:53:22:e2:ec:c0:d6:46:7e:26:
1a:34:27:59:62:e4:d1:90:8d:90:aa:67:63:b9:2b:
a6:b3:53:19:fb:bc:c6:79:91:a7:48:a4:e7:8d:d6:
1b:31:aa:20:aa:46:87:20:a3:16:68:31:83:8a:8f:
67:19:9c:27:b0:c2:13:65:f1:6d:57:09:d2:a1:96:
c9:eb:5a:0d:c1:3c:33:e2:25:f1:83:41:a3:50:27:
71:9d:c8:60:19:57:88:a1:43:00:57:02:45:a4:77:
ba:b3:96:9f:b5:1b:03:46:2e:5d:b3:60:29:90:1c:
ad:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:96:45:09:DE:7D:F1:D2:9C:68:5B:D3:51:F0:B9:B1:8F:EC:D0:51
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:48:fc:f4:1c:32:6f:a3:64:1e:43:9f:6b:8b:20:74:dd:0f:
c1:2e:49:05:70:cb:3c:db:52:b2:2d:31:c4:9c:59:df:11:19:
87:02:e8:2b:80:e6:c4:44:3e:e2:db:ab:85:a9:d4:a2:c0:c3:
6e:ae:31:1c:e9:2d:00:32:61:8a:97:21:29:61:e9:ce:65:63:
5e:bd:13:39:b6:b8:d9:16:d5:4f:73:63:c5:ea:6d:b2:4b:59:
51:78:ce:cc:9b:9b:ad:09:ec:77:50:8f:de:ab:29:ed:13:fc:
e8:fe:b7:90:fe:f1:7f:20:20:d5:49:28:a5:96:fe:e6:e9:40:
d3:e5:49:fc:58:d0:e8:a0:cd:e3:4d:f8:94:9d:15:8f:1b:d7:
ea:3e:12:b6:3c:6c:a4:39:aa:3c:e6:95:95:1c:46:d9:c1:3d:
4b:23:75:12:38:74:1e:3f:43:60:53:15:2b:a3:2d:82:4e:9b:
17:48:90:25:d2:c7:c6:84:2a:e1:78:4c:c9:e9:b7:ff:19:ab:
1b:7a:bd:a1:b7:87:27:f7:32:9c:c7:a9:a4:62:34:69:8d:a0:
90:25:79:58:f9:a1:e2:7c:d8:24:fb:a9:8b:89:b1:35:6a:10:
e5:89:88:9f:b3:84:90:78:b9:f2:ae:98:07:0f:38:ed:44:d2:
4a:5a:ac:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:52:14 2025 by rpki-client