Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier: SWApuxMTsZ7MY0E21lHzANajzc4ml+xSz9X4taHHYaE=
Subject key identifier: 7E:A7:E2:33:28:AB:CC:5E:A6:93:05:49:77:E6:3A:BB:0F:AB:91:3B
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 019A503E04EDC66E587ACCB9DC0E6FD4F522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number: 058A
Signing time: Tue 04 Nov 2025 19:00:32 +0000
Manifest this update: Tue 04 Nov 2025 19:00:32 +0000
Manifest next update: Wed 05 Nov 2025 19:00:32 +0000
Files and hashes: 1: 2IUVrUcX57wEcebuPBNhbM7rtII.roa (hash: xFARryMWCZ7xJebZzJ48q6NyTNbF+EONupkOj48G4Zc=)
2: 3mgL5kmPTE1KzgmolBjYNrOCQw4.roa (hash: 4p0hGsG00DucWMHppeS8f+vIw114RVg7ok5Btqh+zyQ=)
3: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: KZ7hNARNO0TyDiIA1kb/Ip4ghW/DNet+x10OUUgxh4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:04:ed:c6:6e:58:7a:cc:b9:dc:0e:6f:d4:f5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: Nov 4 19:00:32 2025 GMT
Not After : Nov 5 19:00:32 2025 GMT
Subject: CN=7ea7e23328abcc5ea693054977e63abb0fab913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:fd:cf:02:fd:3a:88:55:85:2b:17:ad:79:
2d:35:e5:f2:e7:14:45:f4:61:8b:49:46:37:0a:54:
c3:bc:10:9b:28:6f:f7:71:6a:8e:b6:be:2e:89:45:
19:b6:b4:7f:3b:52:41:c1:ad:61:3b:b3:70:c3:ab:
10:dd:17:9a:f6:2d:9e:87:1a:38:39:09:c4:55:6c:
d7:94:a4:27:43:64:4b:ec:1a:df:0e:ab:77:f3:0a:
b6:d8:43:a4:a3:ba:f2:19:0c:c2:a5:19:1e:32:e6:
c7:61:8b:60:73:e1:c4:de:a7:4d:c7:8a:03:97:cd:
71:7f:2e:a7:2d:fa:59:57:7d:51:11:52:a1:b9:8e:
65:5b:5f:65:50:e2:a7:f0:25:d9:83:6f:d4:cd:9b:
c8:fb:d7:87:6d:12:51:6b:cb:0f:0b:a1:83:a5:d3:
a4:b6:48:ab:63:5c:5e:29:87:1e:01:99:ff:62:b7:
68:81:2d:ac:2a:fa:cb:a1:fd:e6:d2:a7:46:9b:04:
d5:b2:c0:d0:70:6e:24:ed:87:52:8b:0d:83:fe:c0:
c3:9a:f5:1d:fd:d2:31:b7:ab:55:72:da:e2:a1:33:
90:8c:44:ce:4a:57:94:6e:79:78:45:42:26:84:38:
2e:3e:fb:68:15:d3:96:0a:1d:2d:8f:e5:91:84:bd:
9c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A7:E2:33:28:AB:CC:5E:A6:93:05:49:77:E6:3A:BB:0F:AB:91:3B
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bb:16:d5:72:4d:d8:9a:3f:38:b2:0e:fa:e5:75:c1:87:72:
7c:a9:25:67:65:4d:5f:ae:75:78:a9:92:dc:a9:b7:dc:55:b7:
75:9b:95:7f:1c:21:f5:5a:19:a1:1a:5d:51:46:ed:c3:d1:82:
cf:24:a6:43:40:4d:cf:9e:1b:25:e0:c4:8c:45:2b:11:6c:63:
fa:7d:4c:6c:80:ce:42:0d:c8:0a:e9:8a:77:a2:47:56:87:44:
6e:d9:62:d9:3c:45:28:05:d2:2d:20:b4:0c:12:73:19:13:33:
60:33:67:a3:bc:1b:3d:4e:6d:84:b5:07:6d:d6:cb:85:f1:33:
99:68:83:28:ae:22:60:31:1b:e6:be:d2:c6:62:20:39:5f:ba:
f7:8a:b5:50:44:75:4b:6f:4c:14:c2:af:43:02:c1:85:6b:e1:
ac:d1:ed:1e:39:0d:e7:9f:fa:d4:60:15:55:89:ae:02:3d:82:
69:e3:06:65:bb:4c:30:ff:ce:db:6b:81:a1:43:02:a4:4a:db:
17:ff:14:a5:ab:4d:84:63:2d:57:6a:00:3d:41:41:d1:00:61:
9d:11:76:33:58:aa:1f:93:17:57:36:66:f9:fe:d7:64:19:fc:
75:68:1a:39:bf:bc:70:b8:f7:b2:5c:f2:83:a6:98:fc:3d:1c:
09:5d:2e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:07 2025 by rpki-client