Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
File: H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json)
Hash identifier: N9YR1Q+Hh5PnXkdtH7vB46CwCJ6gSrtjG5Fzy/wRtlU=
Subject key identifier: 03:EA:3B:C7:B4:4A:CD:83:63:72:16:34:75:C5:68:4E:5A:F6:22:6B
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Certificate issuer: /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial: 019A4DE209D1D85D8C31F67361F137768F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
Manifest number: 0F41
Signing time: Tue 04 Nov 2025 08:00:50 +0000
Manifest this update: Tue 04 Nov 2025 08:00:50 +0000
Manifest next update: Wed 05 Nov 2025 08:00:50 +0000
Files and hashes: 1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: cJQNLv0aTedB+hYW+sL/whqYR00ivPp/L3erX7D0yaI=)
2: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:09:d1:d8:5d:8c:31:f6:73:61:f1:37:76:8f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Validity
Not Before: Nov 4 08:00:50 2025 GMT
Not After : Nov 5 08:00:50 2025 GMT
Subject: CN=03ea3bc7b44acd836372163475c5684e5af6226b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:e7:93:f6:48:21:11:4e:f5:97:54:ce:a3:
da:d7:f6:d4:e4:9d:8b:56:58:8f:64:43:24:51:95:
27:e5:ee:8b:50:c2:ec:b4:d5:6f:26:19:78:84:cb:
a2:01:35:55:6f:79:26:21:f5:9b:c3:8c:e9:b2:a2:
9c:d8:42:31:4f:ef:32:73:59:b3:96:01:01:48:a7:
71:fc:01:25:15:04:09:60:74:d6:bc:56:cb:45:73:
d5:2d:17:d1:6e:2e:37:53:bf:99:91:d0:53:ae:be:
6e:38:0f:55:09:ac:bd:9a:fe:5b:b2:12:cb:b9:04:
da:2f:cc:f5:b0:e4:2c:66:38:3d:5d:c4:bd:77:fa:
65:3d:78:25:a7:e9:c1:ec:05:88:f5:d9:6f:a7:3a:
8f:c8:e6:12:e7:d1:77:78:00:cb:75:90:87:e8:17:
f2:a5:e0:63:e7:a8:33:00:70:9d:e8:83:ef:5c:6f:
25:58:75:e2:46:a5:55:2b:fe:35:1b:ed:0d:58:14:
62:05:9f:92:09:f6:a3:ea:05:3f:ca:d6:5f:2d:79:
fa:09:1a:c6:d5:68:7e:2c:5e:1d:79:26:fc:7c:05:
5c:8d:32:e9:b0:a7:bb:b3:5b:13:17:d2:96:17:79:
d5:92:ad:29:18:3a:16:bc:f2:80:35:42:c4:39:84:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EA:3B:C7:B4:4A:CD:83:63:72:16:34:75:C5:68:4E:5A:F6:22:6B
X509v3 Authority Key Identifier:
keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3c:43:d9:4b:0e:18:8c:28:48:0a:2f:a5:75:aa:63:e4:26:
47:48:d2:79:48:0a:45:1a:6e:2a:9a:73:05:f4:8f:11:34:e6:
9c:4f:8e:fd:d7:3a:fd:34:4a:f7:b4:3c:a0:dd:a2:63:10:8c:
6f:8e:c6:fe:05:8a:f2:ea:d7:4c:e2:0e:89:a3:a5:85:33:9a:
3c:09:d7:e7:f5:40:58:a3:16:8d:04:0b:61:c1:14:0c:d1:5a:
ed:32:bc:9e:d2:38:1a:31:8d:b2:7a:71:e0:d2:7e:cf:44:b3:
f4:43:16:d9:70:6f:79:8d:32:a0:3f:9f:82:a9:09:0f:ab:74:
5e:70:92:a6:02:e9:79:96:e2:cd:a2:54:b4:3c:40:f5:bb:d7:
c4:9b:55:19:09:62:21:94:31:a3:4e:d0:f6:7b:63:48:c8:1e:
e4:53:00:7e:7c:4d:52:71:41:24:b8:e8:be:d2:6f:71:e6:61:
95:e0:73:9d:7b:06:fd:24:a5:79:64:18:fc:c3:83:5a:63:40:
ad:8e:38:e7:da:63:42:b2:3c:ac:66:81:02:9f:5e:04:03:2b:
8a:4a:9b:25:92:15:23:11:e0:a4:44:0d:18:d7:bd:f7:d1:25:
da:dc:9e:c2:28:74:7b:17:ce:50:0c:cb:f3:95:ae:b0:b3:45:
4e:4d:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:32 2025 by rpki-client