Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier: 7LbNOhsiCPSmmji3VX2WoXbhK3AsOfEcBbVHSYN46kQ=
Subject key identifier: B7:23:4E:5D:24:FC:C1:9C:B3:6D:B9:C0:21:64:EA:CE:A8:D2:6B:99
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial: 019A515077CA921771DEBA3E7F349BBB4F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number: 34
Signing time: Wed 05 Nov 2025 00:00:19 +0000
Manifest this update: Wed 05 Nov 2025 00:00:19 +0000
Manifest next update: Thu 06 Nov 2025 00:00:19 +0000
Files and hashes: 1: GuyH86XUUME_chhdFNwgWR87nWY.roa (hash: AkV+gL0S5u4NFSo7a7yCWxTWlu4itSTOyYkBPLj5o3E=)
2: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: PaEsx+Kkp/iQnEZFzRZxxkMaLV3DAqisaqd4IEqWPHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:77:ca:92:17:71:de:ba:3e:7f:34:9b:bb:4f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Validity
Not Before: Nov 5 00:00:19 2025 GMT
Not After : Nov 6 00:00:19 2025 GMT
Subject: CN=b7234e5d24fcc19cb36db9c02164eacea8d26b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:14:4e:c0:8e:5c:c8:85:e1:72:5b:04:2d:
20:81:23:30:66:2d:7f:db:4f:3d:fe:7c:31:24:c2:
f0:2a:26:51:a3:3b:dd:07:79:06:bd:2f:20:f5:65:
a7:93:45:18:40:67:45:c0:99:d7:5e:3c:bf:52:5a:
4b:02:6e:16:26:dc:6c:e5:9c:60:26:93:9f:74:e6:
58:c5:a0:35:3b:09:ca:ce:73:6f:50:76:cb:16:7a:
b7:d8:5d:2b:4d:89:ad:0f:8b:af:0d:53:ab:bb:3e:
db:df:af:9c:2c:c7:2e:31:64:62:e8:cd:09:fd:ae:
89:2a:f8:a6:39:93:5d:c8:7b:25:be:5c:50:86:0c:
ad:1a:29:71:f2:3e:34:28:46:3d:b3:7e:77:d5:2e:
e2:f7:ae:82:c3:4f:71:c8:ab:3a:34:53:d2:90:b3:
25:49:b7:d5:2b:f9:0b:bd:26:83:23:75:6b:eb:82:
b2:27:f8:f5:21:00:fa:54:e6:7f:db:50:fb:98:f9:
00:af:49:fb:16:f5:1b:b1:e0:f5:b4:6e:04:d8:32:
7a:04:39:9c:98:d2:82:c3:d7:b9:28:08:6a:7b:4f:
5d:07:a8:50:2e:15:76:e1:d0:ce:e7:d6:56:d7:c7:
d0:db:ea:86:53:ab:74:4b:bb:ff:b9:0c:2e:f8:d4:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:23:4E:5D:24:FC:C1:9C:B3:6D:B9:C0:21:64:EA:CE:A8:D2:6B:99
X509v3 Authority Key Identifier:
keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c4:12:41:ef:b2:1a:a0:01:28:66:8d:1f:dd:4f:15:bf:89:
eb:fa:25:31:d6:4b:5c:c1:89:d3:12:59:86:d5:05:96:f6:3b:
da:cb:85:71:72:25:e4:8f:10:f3:21:40:90:f0:04:80:e7:22:
53:a4:a4:d7:d2:98:a9:3d:c0:a8:0d:7f:a2:23:0e:7f:97:56:
91:19:eb:d1:1c:f9:23:d3:a1:34:a8:06:0d:70:08:60:63:9b:
59:e4:1e:33:24:8f:df:a5:75:81:db:9e:16:8e:de:98:38:9e:
27:18:aa:d0:9a:b5:1c:8e:c1:47:d2:b8:53:f6:fd:1e:7b:c2:
39:39:d4:58:e2:30:bb:a8:50:08:4b:99:33:c8:56:d9:b4:69:
b8:f4:9b:41:f5:0a:ff:30:15:1b:2f:1c:58:db:c6:85:ec:6f:
31:c6:d4:4d:d0:65:72:9f:4f:59:c4:30:8d:6e:0e:fa:cd:ab:
ab:84:2d:a0:b1:64:e4:ec:9b:44:9b:20:21:33:12:b9:56:37:
84:b9:03:07:ea:af:f0:36:c8:2e:87:f9:88:f6:10:ea:ab:bf:
b1:3d:53:96:b3:40:82:e8:54:64:a5:97:16:84:df:c2:70:ef:
cb:d0:7e:c5:e8:61:00:b5:c0:67:93:42:82:b2:36:2c:33:b5:
29:89:15:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:04 2025 by rpki-client