Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
File: Has2Xsw1BFitorCUnuZ--djG9Nw.mft (raw, json)
Hash identifier: KsV3uWZtvzbE5Mgn0vrROu9pEBec3mYadQO2T6oE1W8=
Subject key identifier: 9F:07:29:83:9D:BC:F8:29:5B:83:8E:69:49:74:C7:4E:3A:82:48:E3
Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
Certificate issuer: /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Certificate serial: 019A53761D2A55C68441CD9331D7ED834D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
Manifest number: 17
Signing time: Wed 05 Nov 2025 10:00:40 +0000
Manifest this update: Wed 05 Nov 2025 10:00:40 +0000
Manifest next update: Thu 06 Nov 2025 10:00:40 +0000
Files and hashes: 1: Has2Xsw1BFitorCUnuZ--djG9Nw.crl (hash: 13hELYWJGHEfbf+z2aa6iCs5fjts7M01jTLWr7B5Dng=)
2: jC-Q6ZUmfg331ebhgya9xds7Pis.roa (hash: kNQyj294qYsc9TLOzDaCHE1k96M030WeGgkAk10rnao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:1d:2a:55:c6:84:41:cd:93:31:d7:ed:83:4d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Validity
Not Before: Nov 5 10:00:40 2025 GMT
Not After : Nov 6 10:00:40 2025 GMT
Subject: CN=9f0729839dbcf8295b838e694974c74e3a8248e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:32:fb:d0:59:f9:d9:86:77:bb:ef:9f:68:
ed:ca:b2:06:bb:7c:e4:ef:aa:98:2d:8a:44:89:f9:
05:61:08:1c:ab:6e:36:78:20:26:5e:fb:45:ea:fe:
9e:31:3d:78:64:de:6e:b7:ee:53:a0:30:e7:94:81:
f7:ba:b4:72:45:24:b6:c5:64:33:57:3c:dd:70:e7:
75:5f:b6:0b:95:75:7d:02:01:d5:33:25:b3:e2:c2:
d0:0c:6b:81:cb:19:73:5c:b8:db:76:1a:a5:65:22:
62:7c:48:18:88:c1:bb:58:7b:f1:9e:7f:1c:db:7b:
c7:f1:10:88:77:6f:8c:16:0f:ce:03:34:06:7b:c9:
95:b4:71:a1:c8:a7:50:22:bf:02:7d:76:89:e2:f0:
39:35:df:ca:36:fc:fa:f1:23:9c:62:0c:a6:8d:29:
fe:2b:24:54:0d:7a:60:4d:a9:f9:90:09:2d:21:d8:
99:38:48:20:a9:1a:f8:b1:94:b7:73:13:9e:f9:86:
ca:ba:6c:cb:d8:e5:77:09:31:91:89:ed:0d:bb:28:
59:38:d5:23:44:ba:93:c8:44:e5:d2:1c:17:89:39:
15:2a:ab:3a:97:71:1f:58:d2:5c:38:d7:0c:58:98:
ac:bd:cc:23:ab:ce:df:98:b5:18:aa:b4:e5:32:a5:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:07:29:83:9D:BC:F8:29:5B:83:8E:69:49:74:C7:4E:3A:82:48:E3
X509v3 Authority Key Identifier:
keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ed:83:a8:a1:08:b7:53:ee:e7:97:f7:21:47:29:2d:9a:6d:
08:64:58:3b:bb:fb:ea:3f:93:bf:05:ea:2f:ad:9f:b4:a4:58:
84:0c:d0:96:9a:ed:07:5e:02:16:ec:62:30:7b:51:67:d2:d2:
ed:13:88:55:93:0c:c2:3c:6a:de:ec:03:7b:bc:ab:98:56:55:
1d:b4:ce:aa:ec:9d:a5:3f:0f:ad:b9:b5:75:c6:51:37:b2:03:
55:35:0b:05:fb:5d:5b:55:6e:ef:25:05:f4:d4:7f:a0:51:49:
a8:ff:cf:2e:96:8a:c8:a8:92:15:29:e5:0c:84:62:6c:1d:5c:
98:b6:a9:a0:a9:a1:97:fe:a7:27:a7:96:90:00:46:c4:31:0e:
2f:1f:6c:42:0b:b2:ba:b1:86:01:c9:90:dd:49:1e:79:39:ee:
b2:ed:58:af:c3:fb:49:77:5e:d9:fc:ec:13:b5:08:80:11:b7:
75:46:08:bd:f1:c3:cc:bf:c3:2b:25:cd:99:24:a3:03:7a:d8:
ad:8f:42:51:db:d2:6f:8b:79:80:d0:c1:8b:88:d6:d2:7d:b8:
a7:e2:52:90:44:f0:6d:f0:a0:6b:ce:44:02:e5:9c:a2:af:a1:
68:55:41:c8:c6:69:df:e9:36:db:44:0a:6f:4a:26:b2:04:50:
e5:87:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:49:39 2025 by rpki-client