Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: /b1p/cUXuQoat3F8qJcNq6xqKFD7jaFA9nlLhMxIPUI=
Subject key identifier: 94:4F:1C:92:48:26:D9:AF:4C:DE:5C:C9:41:A4:09:72:E8:81:6F:F2
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 019A52D112AD744B4B23268722B3B1D61553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 14CA
Signing time: Wed 05 Nov 2025 07:00:24 +0000
Manifest this update: Wed 05 Nov 2025 07:00:24 +0000
Manifest next update: Thu 06 Nov 2025 07:00:24 +0000
Files and hashes: 1: FsnHQCl3YIPQ-Kr--FXccxOvsak.roa (hash: 36hDdDotapDvjoXAZEUVlMvaerSFU32EL1uK11igVxs=)
2: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: aRIPCM5tUb+YB1UOKSWpZvQTlnXpAx+rKQLj6vUI/BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:12:ad:74:4b:4b:23:26:87:22:b3:b1:d6:15:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Nov 5 07:00:24 2025 GMT
Not After : Nov 6 07:00:24 2025 GMT
Subject: CN=944f1c924826d9af4cde5cc941a40972e8816ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:4c:77:9f:0d:24:bb:de:83:65:02:e2:b2:
87:a4:f9:90:81:8e:d7:d7:73:5d:d8:80:99:d2:19:
c9:dd:0c:68:5a:28:53:81:02:ac:03:2b:66:00:3e:
e5:0a:d5:f0:f2:05:75:12:7d:76:b9:07:f4:9b:68:
48:c9:16:4f:67:3c:c6:8c:b4:b9:b2:84:92:d7:3a:
ea:51:15:67:dd:fe:99:81:03:fc:fd:d8:32:5d:48:
7c:f9:dc:8a:a6:4b:3a:69:16:fa:95:ff:ca:dd:cd:
6b:3a:60:85:f9:f7:4a:02:f7:29:6d:b2:55:66:90:
41:cf:a4:38:88:96:82:b0:fe:05:f6:92:25:a0:d2:
b3:14:13:dc:ec:18:0a:4c:04:b4:eb:df:4d:b9:5e:
86:75:25:16:50:62:4a:b4:6b:d0:a2:a5:e8:09:ab:
b6:6a:77:5a:1a:7d:67:59:d2:df:d9:07:85:c6:f3:
d6:95:3b:36:d8:a4:96:b1:7f:fa:b7:47:ca:58:2a:
b4:b7:0b:3c:3a:e4:17:6d:89:f6:a8:2e:6d:c1:f8:
8f:7e:0e:0c:67:11:18:03:b8:1f:e4:73:8d:6b:53:
12:56:23:53:3c:8c:0b:b3:6a:8a:fc:7e:09:cd:b5:
46:4a:41:57:6a:06:6a:17:fa:ea:d8:97:88:06:94:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4F:1C:92:48:26:D9:AF:4C:DE:5C:C9:41:A4:09:72:E8:81:6F:F2
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:37:0c:04:1c:e9:f8:5e:f4:ba:1c:62:5e:1b:de:9e:17:74:
c3:14:db:c2:24:a2:43:69:ee:60:69:7e:b9:d6:f3:9a:07:64:
0c:45:57:42:85:f7:95:9b:68:d2:d6:85:5b:d4:5b:32:28:2a:
0f:9c:b5:ad:06:70:80:1a:1b:7d:b8:a0:3b:6c:f8:1a:34:2f:
06:6c:9c:10:1e:cf:dc:fc:ae:38:65:15:9d:15:2c:9f:a5:e9:
5d:bb:da:53:44:21:86:8b:4f:f9:16:2e:75:b3:04:30:e5:8a:
61:ab:d9:c8:1c:40:11:82:7e:33:62:e1:64:48:1d:9c:e2:7e:
35:bb:e0:68:0f:1f:5d:1d:33:cf:a5:48:b3:bd:c6:6b:e6:c1:
c3:b3:c6:d9:f1:0b:06:33:31:3c:31:00:69:ad:8b:65:da:59:
6f:d9:48:7b:c4:51:7a:69:55:55:e4:c6:f2:9f:24:29:bf:f7:
b3:5d:0a:b7:e8:68:71:e5:0f:3d:aa:60:60:1f:24:f0:7e:6a:
53:37:da:c3:47:5f:ae:4b:5a:87:c8:e0:b5:64:e9:57:70:a3:
42:0b:ab:a4:00:10:8b:02:8e:8d:09:37:c0:14:73:90:c7:dd:
07:4f:95:24:86:e7:0d:f1:6a:f4:1c:cf:ee:19:66:1d:05:36:
67:72:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:00 2025 by rpki-client