Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: c4IueD+CxDE+Qsbgk/zxYF5x5Dy4MZpNU6KlZeYKtoA=
Subject key identifier: 79:5D:39:8B:D1:DE:58:D7:B8:A4:89:EF:E9:B0:26:DD:10:4A:AA:0A
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 019A4E868BD21683345C4902251E320C8B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:31 +0000
Manifest this update: Tue 04 Nov 2025 11:00:31 +0000
Manifest next update: Wed 05 Nov 2025 11:00:31 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: vcByb3h5nJl6BFQIODPQLVECmGwueCokhucLu5Nfhmw=)
2: HUVkGsdlCFOUct2ob4-4pOtlsOM.roa (hash: IfkJT/mKBfcu6BevAktc/69QyZFWwDwWSgoOqzPD22M=)
3: dDCoImKQNrHXyasH5BqbAo27W3o.roa (hash: f48SfVN/nMYwPQ7yDQlyTF9yoojdYsN08X4hTrgTFDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:8b:d2:16:83:34:5c:49:02:25:1e:32:0c:8b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Nov 4 11:00:31 2025 GMT
Not After : Nov 5 11:00:31 2025 GMT
Subject: CN=795d398bd1de58d7b8a489efe9b026dd104aaa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:f2:11:59:f4:dd:2b:be:55:6b:85:9d:5f:
db:8f:80:f4:81:30:26:09:ba:67:eb:02:bc:f3:bb:
d6:72:f6:5f:36:32:8e:a2:e1:0d:f1:bb:db:bb:19:
26:c1:70:09:ba:7c:e0:75:3e:4a:04:ee:8c:5f:1e:
cd:4a:b8:89:4f:86:c6:e1:70:ba:bf:94:c5:78:cb:
b6:91:06:4f:bd:1e:13:db:3b:05:5f:f9:75:7f:4c:
82:a8:3a:93:be:40:f8:47:dd:61:ed:9c:7d:59:32:
a0:47:fb:3e:a9:67:cf:2d:30:64:4e:c9:ee:dd:99:
f1:2f:e1:c2:79:82:b4:ee:4c:74:19:87:cf:2b:02:
fa:24:50:30:f0:23:1c:82:73:2d:2b:bc:3e:d6:dd:
dd:88:e3:f7:11:96:1d:13:01:d5:cf:cc:01:87:7f:
52:4c:13:2c:93:3b:f8:21:f3:00:2a:b2:ff:52:fe:
b2:d5:53:1b:c3:db:fa:b9:df:4f:f5:cf:55:0e:66:
a7:5e:ab:a6:4b:9f:cc:9f:91:20:7c:56:ba:8e:6d:
28:f9:f8:81:39:5a:be:92:3a:20:6b:69:32:ff:9f:
c6:e5:af:56:5e:6e:1a:07:c0:1d:41:df:de:ff:9a:
59:88:a3:c1:89:8c:d2:1f:5b:74:0d:0e:7b:1f:70:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5D:39:8B:D1:DE:58:D7:B8:A4:89:EF:E9:B0:26:DD:10:4A:AA:0A
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:93:a4:51:2b:e4:e0:b2:8c:b5:d8:c1:a7:14:b4:15:f9:75:
91:77:07:15:a4:38:7e:a6:04:98:30:22:a8:b4:4a:60:1d:08:
e5:5f:da:54:cc:24:27:2f:6f:96:f7:7e:7f:5d:80:43:a9:8a:
88:cf:87:48:2f:21:b7:75:e5:f2:8c:59:ef:9d:12:7c:c7:e1:
5f:86:91:5d:d0:fc:c2:6e:0d:40:2c:39:f8:e2:80:01:dd:80:
e8:1e:2d:9e:ba:5d:62:df:9c:b2:82:00:00:8f:00:59:c0:7b:
4e:2f:01:10:33:44:23:43:c5:40:69:b9:7b:1f:43:fc:4f:66:
19:43:d9:21:42:12:07:b9:3c:cc:d7:4a:b2:7f:27:c4:4b:7f:
0e:9a:cb:30:dd:5b:88:97:bb:d7:90:02:a1:df:fc:cd:97:0f:
1a:0c:25:7b:52:d3:10:10:38:87:15:cd:c2:6f:49:86:82:a1:
ec:ed:65:a0:37:fc:df:40:93:b2:d7:85:be:4d:8b:0b:c4:e3:
2e:4d:e1:c8:63:56:85:75:c5:6d:f6:01:ac:df:a1:00:ff:3e:
bb:4e:70:b6:49:42:dc:25:1e:7d:d1:15:1f:e3:ec:5a:e9:6d:
68:9e:cc:07:57:fd:ce:52:8d:07:a6:ae:7d:f5:dc:7d:f6:a7:
80:af:9a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:23:32 2025 by rpki-client