Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
File: sH-v24bTjze_DCbT8nMf3vaxTko.mft (raw, json)
Hash identifier: GO1HR7sJWSzVO59hVmbUwUy4uNE+KI0HYCh8UZ/ubZ8=
Subject key identifier: AB:81:30:E9:CF:CE:08:6C:29:98:48:BD:B0:77:2D:AE:E2:61:FB:00
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 019A71B7BFA7A5A4E3071D58123424F67AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
Manifest number: 087C
Signing time: Tue 11 Nov 2025 07:00:58 +0000
Manifest this update: Tue 11 Nov 2025 07:00:58 +0000
Manifest next update: Wed 12 Nov 2025 07:00:58 +0000
Files and hashes: 1: N75Q0uiaGqKgGJ2k7yeqIONc8k0.roa (hash: Q63lKGUZoNUeD8FAv4eG2ZAxCKPCbVbyxrGYOjEepus=)
2: sH-v24bTjze_DCbT8nMf3vaxTko.crl (hash: 6/Iqo26IduApwBh0+cMQaze7tC64n5GziSgGCxbTsuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bf:a7:a5:a4:e3:07:1d:58:12:34:24:f6:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Nov 11 07:00:58 2025 GMT
Not After : Nov 12 07:00:58 2025 GMT
Subject: CN=ab8130e9cfce086c299848bdb0772daee261fb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:68:5d:e8:61:47:44:1d:19:e4:44:e2:34:71:
96:43:3f:00:de:24:c7:cd:70:8f:fb:35:bd:49:75:
6e:51:f6:94:5d:3a:44:f9:61:cf:92:87:b5:2e:3c:
28:1c:15:6c:69:12:c9:50:76:85:bc:32:1f:b8:b7:
7a:79:08:c9:bc:05:8c:8f:9b:3d:aa:97:24:58:f5:
39:b8:4d:03:f3:81:ee:04:b1:a7:1b:5c:19:8f:b6:
dc:42:2e:58:b4:64:e2:6c:30:93:75:30:7c:24:6b:
9a:76:07:d7:25:c3:e3:82:06:d8:04:f6:2a:42:b2:
17:a1:b1:12:06:5e:94:ae:fd:e4:52:3d:bb:dc:2c:
0f:09:2c:9b:69:de:bb:11:1c:0f:a5:a8:4d:a7:d6:
e4:ff:50:2a:98:7e:d9:3a:45:72:d2:36:8a:83:d6:
e7:04:2c:81:c3:14:e6:53:2e:01:fb:42:66:40:c2:
c6:e6:dd:1a:e7:9b:ec:96:8c:75:ec:40:ef:d0:b2:
35:3d:15:56:d2:fe:c2:bd:c1:bb:06:c8:90:26:e3:
00:db:85:75:fc:3e:fe:68:07:00:95:06:ee:75:23:
12:be:00:e2:43:f8:3d:12:f7:e2:7e:01:76:ee:cc:
a1:70:65:c5:79:9f:52:4e:05:3a:f3:61:8e:43:17:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:81:30:E9:CF:CE:08:6C:29:98:48:BD:B0:77:2D:AE:E2:61:FB:00
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4d:db:c0:bb:91:f5:03:33:99:9b:d6:9d:d7:30:ef:5e:6d:
bb:75:3d:d6:dd:b8:a4:84:62:58:47:4e:f3:4c:0e:10:bb:31:
0a:8a:cf:c4:44:02:24:1f:9d:98:51:95:7c:a7:f5:31:13:c2:
30:c2:a8:56:6d:38:89:98:20:67:ff:e2:3e:ef:91:e4:bd:22:
59:23:a2:25:5c:bc:4f:e6:5e:df:6f:ab:bf:93:80:10:14:d9:
71:c8:97:7b:31:ea:11:a6:fc:bd:b2:2c:9d:3f:1d:31:1c:c3:
82:aa:39:15:6b:cc:eb:f8:a5:1d:00:52:74:c2:75:d0:c0:99:
b0:89:f0:b6:18:ce:44:8e:c0:3b:f3:8f:26:68:ab:0b:80:5a:
a9:d0:e1:02:53:73:23:14:a1:68:9c:c9:66:b7:19:0f:4a:58:
55:f5:1f:3c:89:ad:f0:1d:37:d1:7e:5e:d7:ae:8f:02:73:9c:
7a:91:bc:d6:40:e7:ea:61:94:a5:c5:d4:57:42:90:9e:b5:2d:
d5:06:26:a9:d4:74:f8:07:9b:e9:7a:3e:af:ba:3d:d3:a2:ed:
62:08:d3:12:6f:a5:86:9b:59:84:e8:03:10:e2:ad:f6:9d:1a:
32:88:d5:a6:e6:c6:ee:1f:3f:45:0b:38:1c:99:f0:ff:d3:7e:
14:4e:da:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:54 2025 by rpki-client