Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: q0o8CR7rIDn2jOKd8W5lRs2LexQRUePX4fnykNXzlEU=
Subject key identifier: B7:17:C8:31:F9:E7:42:37:3B:C9:A0:83:C1:23:68:21:2B:47:71:24
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 019A4EF44DC50C21C66FB2969EF6F888EEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 1081
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: TwlfNDSczGUl34rteJgSuHXTO94.roa (hash: gBwK3ZQY+snmvfWIA0VgAvr4/MBSK9FpiTLSXZrUgpg=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: RRkry1t40PEV/Cm0aR3yiLouoFv4mggMPcsCQgTEOcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4d:c5:0c:21:c6:6f:b2:96:9e:f6:f8:88:ee:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=b717c831f9e742373bc9a083c12368212b477124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:85:a7:46:e4:d2:4d:64:bc:12:5e:f9:2b:
57:e2:8f:93:61:ae:ea:41:c1:2e:f6:7d:32:ae:a9:
aa:a8:57:e3:35:c6:08:53:55:55:01:49:9a:02:4d:
cb:31:03:33:86:50:d3:fd:2b:17:43:4a:32:81:64:
35:29:1f:e3:41:32:3d:52:d4:5e:83:bc:dd:b5:12:
d0:99:40:be:b2:35:49:76:93:9c:6b:4e:e3:d9:c5:
e0:ea:83:51:ad:11:0b:d9:2e:f5:fe:4b:f7:82:2d:
d6:b0:15:f0:77:59:95:ff:b4:22:85:2a:98:59:08:
a1:05:08:7c:7d:46:a7:ca:b2:56:59:bb:8a:06:ae:
85:ce:5d:b8:ee:70:4d:d0:ba:30:79:e1:36:7a:53:
1e:42:3a:e9:8a:a3:60:46:74:a3:8e:df:dc:57:d3:
82:19:56:eb:c8:a7:2b:46:ad:25:26:0d:c5:cb:6e:
20:36:b9:94:a7:5d:f5:a7:6c:b1:df:b5:d9:fb:69:
5f:8d:79:82:ec:e0:a7:83:3b:eb:bc:eb:2f:1a:bb:
f6:12:17:f4:25:54:c6:20:b5:2b:1c:dc:a6:e0:43:
14:5f:ca:7e:60:3f:f0:0a:5f:0d:04:26:05:9e:e9:
0d:1b:00:dc:0b:9a:37:a0:20:1f:72:fa:ec:ad:03:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:17:C8:31:F9:E7:42:37:3B:C9:A0:83:C1:23:68:21:2B:47:71:24
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:16:9e:06:bd:ae:37:51:a3:80:1f:66:50:98:4f:01:ab:7a:
ba:c2:fd:ca:9f:18:75:f6:a6:53:4d:47:0e:b1:55:63:81:58:
b6:95:05:69:c2:63:1a:da:90:cf:87:13:ed:e1:41:83:2d:7e:
95:3e:40:05:b1:ae:9c:44:f0:f0:e8:4d:72:11:cb:48:1d:78:
3f:3e:63:68:12:2f:c5:08:b6:38:d2:eb:2b:ef:6b:86:35:e5:
31:d5:0f:fe:2a:1d:72:8c:ee:38:d1:0a:b4:ff:5e:f9:2b:5c:
f3:bc:5c:57:21:d9:00:c0:66:ce:e7:8c:8d:fb:db:74:1d:71:
f8:45:4a:14:dc:cb:ed:5b:56:17:97:3d:da:0c:67:dd:3d:41:
07:f6:10:04:f4:b9:cd:e6:b3:4e:75:fe:48:7f:a9:a7:b1:93:
c7:45:f9:99:74:d9:b3:af:3a:03:f4:0d:dd:fd:32:a8:84:62:
b2:77:8e:93:b5:a8:ff:cf:26:32:a0:66:7e:1b:b3:d2:ed:e1:
a9:2e:91:9c:e8:c6:69:41:8a:81:88:9e:d5:ac:f1:70:34:e1:
f4:8d:a6:9f:fe:71:db:e7:41:2a:88:1a:a3:a9:36:8d:d2:af:
da:6d:df:24:cd:d2:25:f7:0f:36:b1:67:e8:a7:82:14:75:c5:
f5:af:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:24:17 2025 by rpki-client