Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: 6J/UF5p34O7kKU0AtentHXdxVYX9eGb5LYHITyGX/lk=
Subject key identifier: BA:C0:CA:17:39:9A:98:44:27:10:BE:A7:05:3E:E0:83:59:A2:25:B8
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 019A50750EA244D23AE8DD91EC7A6BB10E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 1476
Signing time: Tue 04 Nov 2025 20:00:39 +0000
Manifest this update: Tue 04 Nov 2025 20:00:39 +0000
Manifest next update: Wed 05 Nov 2025 20:00:39 +0000
Files and hashes: 1: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: L655liFHO9jCyV4lgHTXDhHrKrfT9K1ZxDbkiPsjvDs=)
2: pd4NfQq1m5q0gJRIY8-JV63L0Ug.roa (hash: 2jDsm0ha9EaVCILusmCVnInYpOVbfVEOKEtxwwvPFb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:0e:a2:44:d2:3a:e8:dd:91:ec:7a:6b:b1:0e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Nov 4 20:00:39 2025 GMT
Not After : Nov 5 20:00:39 2025 GMT
Subject: CN=bac0ca17399a98442710bea7053ee08359a225b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:53:c8:4b:6b:86:94:d8:cf:5a:8f:c8:02:
a1:14:0e:3d:33:2a:5e:f1:2f:fc:48:f7:bf:44:51:
cd:ae:f5:4e:bb:c5:96:45:3d:fa:dd:99:8f:c5:64:
7b:4b:33:02:d8:34:31:b7:86:d4:d2:76:6b:01:29:
4d:63:3a:5b:29:5f:e1:47:08:31:7b:9a:29:13:d5:
4e:b9:6c:51:a9:01:82:cf:85:7e:96:10:1a:95:fb:
05:28:38:e5:d3:88:4f:49:f7:d3:6a:58:07:25:70:
4c:28:b7:2a:51:04:11:c5:37:8f:9f:17:67:cc:fc:
00:07:a5:f0:d7:a9:5d:75:f3:84:b2:43:9a:89:79:
1f:23:0d:c6:eb:25:c0:87:18:64:bf:14:f8:ec:dc:
b6:24:11:33:5f:d6:e3:8c:be:69:fe:3f:7c:02:c8:
be:88:42:13:2a:70:87:c5:db:43:9a:4c:c9:dd:f3:
6b:fd:92:09:80:44:19:20:1e:9c:23:96:66:af:f5:
5a:74:ef:e2:a6:27:93:9e:0b:5a:b4:e9:3b:95:05:
d5:6a:4f:53:38:77:dc:4e:d8:4d:f5:8f:91:f6:e4:
a6:22:40:c3:8c:59:3e:ac:12:4c:bb:8c:08:7a:6d:
28:76:9c:d9:0b:1c:fe:f5:0f:8f:b2:9a:e6:b2:1b:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C0:CA:17:39:9A:98:44:27:10:BE:A7:05:3E:E0:83:59:A2:25:B8
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:eb:85:f9:80:8b:31:a7:6c:24:2c:75:5f:e1:ad:0b:11:fc:
ec:79:84:d3:0b:42:1c:6d:83:fb:6c:e1:0c:dd:6c:f1:9d:a7:
a7:71:04:2b:70:f2:4f:db:88:cc:3c:b3:dc:ff:c2:0a:dc:f1:
48:f0:6a:6b:b1:b7:15:bf:1f:80:5c:dc:59:01:41:7a:5a:09:
f4:77:e6:28:e0:69:69:32:2c:18:b5:8c:e3:35:22:7f:95:0b:
66:cf:b5:1e:cd:95:00:c3:26:c8:6e:86:07:27:b6:14:a5:a1:
d4:bc:d2:f4:43:8c:56:5c:5a:36:41:f8:71:e8:90:27:0a:e4:
31:8f:18:f8:d8:ae:6b:d4:4f:b2:9a:f9:ed:93:09:78:ed:ca:
32:22:c4:3b:8b:47:45:ca:86:d3:33:c6:94:f0:cb:32:f4:dd:
1e:08:a7:73:dc:0c:55:b5:44:65:ce:7c:3c:ee:1a:c7:64:82:
3a:aa:1b:b5:95:17:74:d8:dc:48:ee:67:86:b0:34:44:f0:38:
70:8e:54:7a:d8:d0:64:09:a9:c7:4c:e9:ec:95:46:7d:f5:8f:
08:a5:d7:d6:cd:15:6a:e3:99:f2:e7:2b:61:7b:60:78:8f:3b:
25:4b:d9:02:ca:07:e9:e6:ef:69:1b:8b:01:87:c3:06:8d:31:
ca:6c:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:42:27 2025 by rpki-client