Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: KnMSOLiEbJN3E3ZBHefmmFi3+VoPl6IeEHmRFBcj4DM=
Subject key identifier: 4A:78:0D:96:5C:4F:19:5A:60:33:EB:62:6B:7D:9E:A1:63:26:69:79
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 019A4D066485000E929B6261F0805DF69E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 0590
Signing time: Tue 04 Nov 2025 04:00:55 +0000
Manifest this update: Tue 04 Nov 2025 04:00:55 +0000
Manifest next update: Wed 05 Nov 2025 04:00:55 +0000
Files and hashes: 1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=)
2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: tUi+KhrsWN+Nr1onoolq9urS/GhzJSJj/mpCBXyfyK4=)
3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:64:85:00:0e:92:9b:62:61:f0:80:5d:f6:9e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Nov 4 04:00:55 2025 GMT
Not After : Nov 5 04:00:55 2025 GMT
Subject: CN=4a780d965c4f195a6033eb626b7d9ea163266979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:6d:87:07:6c:41:4d:67:af:e3:38:d5:8a:
ea:3d:c0:fe:b4:ff:3a:80:00:a7:52:8e:6e:d6:77:
60:0c:6b:8d:b1:0d:bb:48:44:82:b8:7a:9a:99:36:
6b:3b:dc:d8:5f:fd:2a:1d:6a:71:5a:8e:bd:77:6d:
e6:7e:30:3a:75:f2:20:81:25:f9:fa:be:dd:6a:7c:
e3:f3:8a:96:27:da:ab:d7:d7:ff:ee:92:d3:74:49:
d0:d3:7a:ff:e3:4c:00:bc:c0:db:9e:e7:3f:07:58:
83:7d:ad:c8:00:39:0c:bd:00:df:57:25:39:30:7a:
b1:96:11:96:1b:e0:d5:8a:eb:1e:37:bb:87:6e:76:
7b:04:b9:3b:92:35:4c:c5:d1:c2:34:cc:17:d1:5e:
4e:eb:81:3b:5c:ff:27:6a:07:d6:79:3d:a6:e4:d3:
a5:5d:d5:30:5b:25:2b:0e:54:dc:04:55:71:d4:a1:
06:e3:74:8f:75:fd:bf:4d:a6:96:62:48:9a:77:c4:
e2:65:c0:e7:17:19:56:cb:3a:3c:68:92:dc:7a:5a:
f1:17:de:22:d3:15:61:93:01:40:5c:13:fd:ed:43:
df:59:82:fe:11:88:3b:84:b0:7c:32:b0:9a:d1:c2:
9a:90:c2:d5:7e:ce:79:13:7b:a0:78:ed:37:a7:d8:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:78:0D:96:5C:4F:19:5A:60:33:EB:62:6B:7D:9E:A1:63:26:69:79
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a7:4f:f3:2e:89:90:53:76:ae:eb:4e:91:8b:4e:aa:36:46:
89:43:39:e3:db:56:b0:37:0c:6d:97:81:bc:b8:fe:89:1d:a6:
14:ee:a2:f1:97:36:53:35:12:30:27:28:93:18:a7:9a:3b:e8:
0f:60:b0:41:dc:fd:b8:4d:70:c3:db:c9:13:4a:2b:8f:c3:01:
c2:77:c1:39:f3:34:f5:31:64:6f:14:98:84:04:5a:db:19:48:
d3:e9:f6:a9:01:88:fb:db:8e:18:7c:e6:dd:36:91:e7:c0:5b:
fe:63:39:32:41:63:4b:ef:9c:91:0c:6f:90:ff:85:22:1e:d0:
17:cf:4d:0e:ce:2f:5f:d9:1c:40:61:31:a6:2c:dc:36:6d:30:
a3:c5:03:99:0a:c3:db:d1:b4:6f:26:00:c8:d5:7c:67:89:10:
7a:ef:2e:61:6a:a1:ab:ad:a4:a7:0c:c5:04:a3:33:d5:74:f5:
30:9d:e9:49:6d:35:8e:dd:9b:68:03:46:88:2b:cf:b5:6f:8c:
1f:c2:ad:7d:42:d8:39:45:16:59:00:22:a4:80:cf:35:08:85:
88:2a:e9:5e:e3:81:6c:96:61:0a:29:14:9e:7d:a9:b1:b4:04:
74:0d:5e:4b:82:91:2f:dc:78:bb:e6:df:e4:c7:35:46:38:1d:
02:ff:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:11 2025 by rpki-client