Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json)
Hash identifier: yJE+lZUcTZwtj5n9aIZax5Dv5bpb2SAVo0xgkFgZiQg=
Subject key identifier: C9:EB:FC:FA:27:2E:4E:9F:B3:2C:20:A5:CB:BE:14:AD:17:F7:BE:BD
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 019A4F622AA6E7239CF18649932DEBB5DC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:24 +0000
Manifest this update: Tue 04 Nov 2025 15:00:24 +0000
Manifest next update: Wed 05 Nov 2025 15:00:24 +0000
Files and hashes: 1: 1YHm_89mdmO3B6rQNuElV51RHnc.roa (hash: MnfHwqRrOYbX1ON7yZ7M8gI0u2brRrZRizU4+uQlZVo=)
2: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: XKPaQB4PL0fH0LKgVNNCgnenqbeLnlLf2v2M45Wieas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:2a:a6:e7:23:9c:f1:86:49:93:2d:eb:b5:dc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: Nov 4 15:00:24 2025 GMT
Not After : Nov 5 15:00:24 2025 GMT
Subject: CN=c9ebfcfa272e4e9fb32c20a5cbbe14ad17f7bebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:59:94:b6:15:32:0a:26:9a:d1:61:36:cd:
68:ac:53:5b:3d:07:0a:be:41:81:a8:2e:cc:4a:04:
74:d5:c3:33:ba:59:a5:ab:90:ff:f5:71:25:bb:e1:
c2:0f:a1:aa:f5:5d:d6:72:55:2c:dc:83:d9:d0:b0:
c7:61:cb:3f:9f:72:8d:71:24:6d:a0:ce:34:c7:54:
89:06:02:68:a7:52:ae:29:b8:7e:62:61:f2:ed:03:
bc:9b:40:9f:92:f3:8b:4f:7a:dc:1f:81:f4:eb:35:
10:71:72:45:b0:1d:51:69:a6:cc:df:b9:af:2b:e7:
a2:ea:57:57:7f:59:29:7a:69:ae:3d:34:aa:6a:6b:
6a:9f:5f:6b:14:0e:cc:cd:8f:4a:67:da:00:74:0b:
dc:1b:a6:9a:9f:33:c8:f1:e0:ed:05:ff:52:e2:b9:
aa:95:2c:d2:e1:fd:61:1c:94:2a:78:ce:55:67:99:
3a:74:c6:bb:e2:cb:86:97:ab:48:df:bb:bd:ec:4f:
38:0e:e9:61:de:fc:18:8f:75:ce:93:ee:19:6d:c1:
9d:31:dc:cb:ff:23:1e:df:09:8d:bb:9f:a6:22:31:
ad:d0:6b:a0:25:f5:e3:cc:f6:41:ce:78:dc:ea:4f:
06:ed:c4:ea:b6:ab:b8:a5:e0:27:07:62:4f:ff:af:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:FC:FA:27:2E:4E:9F:B3:2C:20:A5:CB:BE:14:AD:17:F7:BE:BD
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6c:8f:38:40:ef:b2:a7:32:29:02:25:5f:2e:0d:b0:d1:48:
c3:bd:16:2e:a9:47:0d:68:24:b1:ea:63:9b:a4:2e:d6:04:88:
a2:e5:54:4b:4c:37:55:1e:49:43:dd:c3:98:bc:64:55:42:c7:
77:dc:10:7f:20:11:7c:c9:f6:35:51:78:04:ce:5b:fb:40:32:
7e:be:2d:aa:40:13:09:1c:a1:9b:f8:e1:cf:ab:05:dc:4c:a6:
35:bc:d5:86:30:68:49:0e:aa:bc:89:90:bf:2b:6e:d7:64:3d:
b8:77:7b:bc:64:56:e0:59:c2:a6:b7:7d:ca:7a:6f:34:67:92:
04:b1:56:ba:0e:1a:db:06:7e:75:f2:2f:d3:ab:e0:ce:00:79:
0d:e3:ca:72:ea:3f:48:82:4a:5a:1c:86:eb:39:e9:01:66:39:
b8:2c:02:05:9c:6f:f5:c0:a2:6f:49:92:00:4c:41:90:15:0c:
52:4e:1a:03:b4:19:6a:4d:41:0e:97:d7:ab:07:98:c9:45:b5:
86:4a:57:7e:5c:b8:29:f6:c0:54:8c:05:1a:eb:92:04:95:04:
76:fe:48:00:e8:e1:f7:c1:46:6a:95:fc:08:8c:ee:24:01:8b:
28:75:8d:73:12:92:b5:40:8d:e0:42:12:c5:d8:7b:8e:d7:74:
8d:c7:7b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:27 2025 by rpki-client