Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: bSL4xomSAqLU92jsv7D6crxJ0XpmkTKS9+GE2F6393o=
Subject key identifier: AC:1B:FF:BE:E7:F1:5B:60:25:34:16:06:54:AF:31:4D:24:ED:EB:EB
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 019A51BEC19131BA667542480D6BBA7236A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 06AC
Signing time: Wed 05 Nov 2025 02:00:47 +0000
Manifest this update: Wed 05 Nov 2025 02:00:47 +0000
Manifest next update: Thu 06 Nov 2025 02:00:47 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: dMB2GS9nWV5aiwP1GGLdU1yUMHnYf185KPmUbZ3A3Vc=)
2: neQhSGrd27w6Xn2chZDgwEsCrLI.roa (hash: 1tkSubS/cwYJgj12QwQ+XvFzRT5l/tNW9QOj+Oo5EeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:c1:91:31:ba:66:75:42:48:0d:6b:ba:72:36:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: Nov 5 02:00:47 2025 GMT
Not After : Nov 6 02:00:47 2025 GMT
Subject: CN=ac1bffbee7f15b602534160654af314d24edebeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:15:8e:31:c6:84:31:91:77:9f:02:a9:c2:
30:01:b7:d7:fb:50:6f:27:2f:af:b5:ad:2f:16:0b:
1c:e8:d9:bf:de:d6:a2:b7:c5:3a:35:44:ff:8e:36:
4e:6a:56:68:9a:4c:1a:28:c7:95:39:72:a7:46:90:
ea:0e:1a:b6:c3:96:ac:b0:0c:70:d4:70:01:9b:b3:
9e:49:0f:23:61:ff:8a:3d:18:3a:54:40:66:9b:04:
14:c5:6c:e6:28:13:a5:04:8f:a6:0b:5f:64:ae:62:
3d:f7:79:17:ea:38:2f:79:da:a4:e4:b7:0f:04:a8:
96:ec:a4:d4:25:16:3b:5b:2f:f6:59:6e:77:ed:e3:
05:d4:05:1d:d7:9f:41:83:0f:59:9b:a8:50:7b:76:
38:01:bc:d0:e3:ff:52:36:1b:31:d1:85:fd:b0:45:
53:a7:4d:da:4b:cc:27:f1:d0:9d:8c:2b:90:93:c0:
e3:ce:42:4a:f3:a2:27:b9:db:a6:50:a3:b1:a6:58:
75:96:48:d2:27:83:7d:3a:96:06:c1:ef:ce:62:67:
b8:42:f4:b6:64:de:27:e4:b6:fb:17:8d:ef:89:42:
e1:9a:8e:fc:f5:df:38:11:f4:09:a5:2b:d0:fc:6f:
b5:eb:b2:13:bf:43:33:e7:f7:dd:61:8d:42:e3:39:
54:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1B:FF:BE:E7:F1:5B:60:25:34:16:06:54:AF:31:4D:24:ED:EB:EB
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a4:04:57:83:e1:18:8a:6b:b5:96:50:7f:cb:15:71:cf:08:
99:e2:75:a5:e0:8f:56:68:3a:27:b4:8e:1a:98:b7:6e:5b:96:
4e:ad:1e:08:95:72:79:a4:65:ac:db:22:b2:5a:94:8c:6b:80:
e6:24:39:65:61:f8:ae:68:e2:15:15:a2:dd:ab:67:5b:a9:2e:
d3:7d:ff:4a:aa:c5:68:a9:9f:56:24:64:82:f2:06:f7:6e:9f:
41:3f:2f:3a:6f:bf:ba:ff:dc:fc:9b:df:b3:a6:3d:ca:38:64:
2a:d5:91:30:9d:9f:0a:dc:a0:2b:73:f4:e0:86:e8:e2:ea:e0:
b9:f8:94:c0:53:9f:d5:83:00:1b:22:eb:b2:24:d6:d7:aa:d9:
18:ed:d3:a9:7d:d8:ff:1c:6b:98:c4:21:a9:c4:2e:47:6b:ae:
44:72:22:67:27:5a:0a:97:17:ad:56:35:58:69:2c:90:2d:c8:
10:9b:da:73:55:9d:5c:bd:02:3c:55:28:a6:cf:06:9f:80:cb:
6d:2d:19:e9:d2:ec:a6:56:04:6b:76:db:d5:04:12:9c:d0:41:
57:2b:08:d8:27:1e:99:b8:ad:bf:1a:2d:27:87:ee:d0:b2:8a:
1a:bf:93:8f:37:af:07:42:98:57:e8:53:e5:2e:8b:4c:c1:d1:
3d:3d:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:25 2025 by rpki-client