Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: PwTpGFcJrZ5XbuQldaHh2AtB6OUiIZkWiVMcFFYhxIQ=
Subject key identifier: 85:0A:14:ED:22:41:6F:45:CE:40:6B:B7:2C:75:CA:C0:44:9A:D0:32
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 019A4F99537D7C0FED61AEC081EE3865E0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 12BA
Signing time: Tue 04 Nov 2025 16:00:39 +0000
Manifest this update: Tue 04 Nov 2025 16:00:39 +0000
Manifest next update: Wed 05 Nov 2025 16:00:39 +0000
Files and hashes: 1: EqmxfEPR61JZ1PILd4aiLsGlGKg.roa (hash: o+GN8e0CITe+H1MxoXkf/yVp/P7VliN/bKmtLSSdiwk=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: 4xR4F0sX/NDpumIgaiw4T6JAHJ9EmhpXK/AnzikG39Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:53:7d:7c:0f:ed:61:ae:c0:81:ee:38:65:e0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Nov 4 16:00:39 2025 GMT
Not After : Nov 5 16:00:39 2025 GMT
Subject: CN=850a14ed22416f45ce406bb72c75cac0449ad032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:82:e6:1a:b0:f4:14:57:21:e6:44:50:a7:
16:72:1e:01:39:11:91:8f:89:56:69:04:83:92:51:
fa:d5:63:04:74:16:3a:06:f2:ba:7f:8e:26:41:a8:
72:03:d2:ac:3b:30:87:6a:ab:38:1a:6e:0f:2d:74:
dc:96:ae:9a:7c:e0:ff:db:ec:0c:e3:53:de:4c:dd:
52:ea:dd:93:dd:d2:a2:2b:fe:ee:74:5f:42:39:af:
1c:3c:13:55:a3:a4:c1:ff:60:78:47:bf:e0:b5:a7:
4d:8b:49:f9:48:3a:fb:06:ce:06:98:36:81:0c:8e:
4c:1e:92:d2:75:e8:17:78:7f:d4:7a:39:f7:fa:31:
1e:e3:0c:bd:bc:4b:4b:ee:bc:6c:ed:ae:2f:26:a5:
9e:01:9c:34:d2:54:8e:f2:cf:f6:c8:6c:eb:e2:06:
42:50:38:86:ee:3b:5a:51:91:1f:68:d6:1c:49:6e:
32:e3:5e:de:30:36:8a:9c:d2:c5:ec:92:55:d6:92:
b9:b6:b6:b1:4c:e8:1d:5b:02:b7:e0:f8:62:0a:b0:
99:d9:64:84:a9:36:2e:b8:0c:34:4b:fb:c1:e5:07:
a5:0e:8c:cf:e2:18:ad:84:9d:83:e1:a1:f0:89:1b:
3c:b0:fe:aa:58:96:e6:d9:03:f3:65:dc:5d:27:67:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:14:ED:22:41:6F:45:CE:40:6B:B7:2C:75:CA:C0:44:9A:D0:32
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:27:62:86:70:a0:b0:3d:ba:cc:c1:ae:3e:ba:74:47:fd:c9:
50:f3:68:50:45:ab:01:94:c1:d7:38:ca:77:65:e6:50:db:74:
0a:d8:3b:96:3d:68:80:2a:92:10:e8:f0:ff:69:3d:c3:91:1a:
de:54:08:09:48:3c:8e:02:19:2c:d7:43:6f:06:7c:2c:d6:97:
ce:ce:d6:02:9d:25:f0:17:c2:a2:2a:71:16:fe:0b:e4:61:91:
44:e7:91:e7:0d:0a:d4:39:96:c5:bb:04:0e:0d:f9:83:2b:23:
42:40:5a:73:1c:2e:e6:46:13:e9:f0:49:5f:20:38:5e:8b:35:
11:ad:99:36:2e:03:ef:f3:ae:b1:cb:a7:09:ff:88:46:0b:20:
40:d0:eb:54:bb:f5:83:04:5e:92:f9:78:12:13:1e:27:c7:44:
02:dd:47:37:8f:24:bf:5d:56:c4:69:a3:c2:ed:b0:9d:6b:21:
14:7d:05:6f:2c:83:57:5d:b9:44:c1:66:4a:64:f9:ab:3f:2b:
b7:19:98:1a:64:db:c2:ca:8f:da:8f:73:4a:b4:1b:b8:da:c4:
28:ae:69:45:15:ed:08:f6:5e:8d:45:d2:d5:5d:a3:62:3f:a5:
d2:04:08:b0:8c:0c:5f:36:44:a3:24:da:d9:17:b8:1d:48:0e:
3c:36:a8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:30 2025 by rpki-client