Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
File: h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft (raw, json)
Hash identifier: fnaSPsllvLFVt4aFVA/+PFWa6+ui0Ks6UDG0VSCliHI=
Subject key identifier: D6:28:23:05:72:2D:2D:F1:EB:48:E7:F5:91:2F:83:59:B9:C9:89:1B
Authority key identifier: 87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
Certificate issuer: /CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Certificate serial: 019A4DE230B34F287133A77F4F342DC4234D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
Manifest number: 142F
Signing time: Tue 04 Nov 2025 08:01:00 +0000
Manifest this update: Tue 04 Nov 2025 08:01:00 +0000
Manifest next update: Wed 05 Nov 2025 08:01:00 +0000
Files and hashes: 1: TBNCAmXPiITjG3rsN7mx1xrR_KY.roa (hash: iXvzmMuxsBGvkR+ftL5TgUS2Lpzgxj9Gu947ZjpDrMU=)
2: h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl (hash: X6nT40Cagm524YSoE/HiAJ4HP5G1pXF6MfCsoKOe3jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:30:b3:4f:28:71:33:a7:7f:4f:34:2d:c4:23:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Validity
Not Before: Nov 4 08:01:00 2025 GMT
Not After : Nov 5 08:01:00 2025 GMT
Subject: CN=d6282305722d2df1eb48e7f5912f8359b9c9891b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:b2:03:53:8c:37:84:ad:d4:ce:94:e2:4e:
79:e3:91:c1:cf:f1:2a:46:d4:17:c2:61:33:8f:52:
8f:13:18:5b:b4:b9:f5:bb:ee:7e:25:36:5e:09:27:
0a:49:bb:23:2f:e5:a6:85:c1:79:96:97:2e:cf:74:
6d:65:9f:1f:21:b3:9b:7c:8f:56:b3:c1:c7:54:ea:
37:dd:ae:42:9b:25:bd:34:b9:01:c5:64:31:f0:1c:
d4:b2:1a:9f:49:8e:4d:f8:ef:4a:74:d4:6a:ff:c0:
1e:1d:56:4e:f8:bc:1f:24:0a:92:0f:2a:b0:51:2d:
32:19:1f:73:c0:e5:04:28:1e:6e:96:f3:a0:28:06:
df:4d:1d:64:5f:28:e9:d7:79:54:78:6c:d3:44:ff:
6c:b9:ac:a9:63:45:97:c1:29:13:49:f4:48:f8:6f:
d4:c8:f9:4a:ce:3d:66:ec:cc:dc:1e:3c:8c:3d:a2:
32:39:a1:f6:81:a3:a3:13:d5:52:67:8d:a2:0d:ed:
3b:7a:21:16:4f:fa:a5:bd:ab:03:c3:46:d8:4a:89:
d6:b3:d0:84:68:87:25:82:ab:0b:a0:17:0c:5e:13:
9c:0c:dd:88:44:02:cf:a6:42:45:35:a1:4a:c5:4c:
0f:b3:87:1c:28:58:35:43:2f:5a:e4:21:f1:ce:b9:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:28:23:05:72:2D:2D:F1:EB:48:E7:F5:91:2F:83:59:B9:C9:89:1B
X509v3 Authority Key Identifier:
keyid:87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:da:64:79:ef:73:bb:0f:19:9c:f6:3b:d8:2d:9c:b3:68:cf:
f0:b9:5a:0a:9d:42:af:4a:d4:65:c4:7a:72:5b:be:2e:11:86:
29:e7:2b:61:b6:29:3e:d4:63:c2:04:5b:52:3d:94:fd:2e:9b:
19:16:af:22:12:e5:0d:dc:ae:7e:58:4d:89:32:57:a7:90:d1:
91:ee:af:e9:21:b6:b5:c5:ef:9a:25:bf:38:fe:36:2e:79:66:
8d:bb:90:18:80:89:c5:0a:04:89:90:11:8c:07:d0:d1:1e:1d:
b1:7f:68:64:0e:c0:d5:02:ce:90:13:69:f7:a6:46:2b:38:29:
49:66:c8:d1:fb:2f:92:4b:0e:93:32:42:92:26:61:49:11:03:
56:63:42:ff:ae:62:d5:26:f0:f8:11:bf:62:85:ee:90:22:43:
a4:fd:27:4b:20:ef:31:12:b0:06:17:79:95:30:a2:60:1f:72:
8f:db:ac:42:7f:47:1f:b9:ab:a4:10:73:d7:b6:fc:07:6a:c3:
03:f8:8b:7e:09:38:73:c8:28:6a:37:41:0e:64:57:76:59:c9:
2b:c4:bc:6c:0c:75:cc:3c:c7:42:6d:e6:6a:a6:3a:d3:fc:aa:
0e:a1:d6:d3:d9:e9:e5:45:5f:58:2a:e3:e7:f8:62:87:6b:70:
15:77:44:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:09 2025 by rpki-client