Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
File: H9e7sd5oCd9_blc_mrtk5gNhPKE.mft (raw, json)
Hash identifier: Gjo1pKjfv5dO7JU27MaSVxlVFlsGU5hQU4Vb3i9K8GY=
Subject key identifier: 23:33:3E:31:FE:A8:8C:22:67:98:C9:C7:78:CB:D5:45:DD:8C:29:1F
Authority key identifier: 1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
Certificate issuer: /CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Certificate serial: 019A4F2B5C3CC951959CD4D600C72B9EEC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 14:00:32 +0000
Manifest this update: Tue 04 Nov 2025 14:00:32 +0000
Manifest next update: Wed 05 Nov 2025 14:00:32 +0000
Files and hashes: 1: H9e7sd5oCd9_blc_mrtk5gNhPKE.crl (hash: 1rvrXSP7ePIlKCKrZ3uK/8fXWvB2oV3csiC8JYaMUmc=)
2: hOjqFzmwDn3h8aF0jh7_FXo9ReI.roa (hash: CNoH2a1MzUmjFlMi/+aHXlooSM/YD9l7gB33O/u52sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:5c:3c:c9:51:95:9c:d4:d6:00:c7:2b:9e:ec:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Validity
Not Before: Nov 4 14:00:32 2025 GMT
Not After : Nov 5 14:00:32 2025 GMT
Subject: CN=23333e31fea88c226798c9c778cbd545dd8c291f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:e5:70:a9:8e:9e:6d:3f:56:b2:bf:09:a8:
30:e2:cb:57:06:f3:5a:bc:0c:9a:a6:e1:24:3a:67:
a5:6b:ec:4b:b7:f4:41:d6:96:09:29:67:07:f1:9c:
ac:31:b2:f9:e1:04:69:5d:6e:76:9b:b2:7a:b7:f7:
ca:04:55:23:b5:73:b4:e6:b8:04:50:f1:c9:60:60:
9c:d0:8c:40:c0:6e:af:85:59:3d:04:1f:7e:db:8d:
e7:f4:45:c1:d8:87:ee:3a:f1:71:a5:68:8b:43:33:
d1:0c:a4:d2:91:d1:ce:3a:ec:96:73:da:3b:26:29:
1b:6f:ba:42:c9:5d:20:c5:55:e3:18:6f:09:ba:b4:
74:b6:8a:f4:1b:cd:ef:4f:25:2d:57:58:c2:78:d1:
45:30:07:7e:08:a9:73:d0:3c:a8:3f:69:31:b4:bb:
8a:de:b7:59:a9:d4:12:2d:2e:1f:c3:24:a2:c4:58:
3f:ae:fc:65:da:b2:45:57:2f:f1:f7:2c:ff:61:e4:
d6:f5:c8:9b:2b:85:82:56:77:25:24:6f:af:7d:bd:
83:f3:3a:39:6d:44:83:9f:7e:94:3c:50:48:8a:dd:
c4:49:a1:0d:f4:cc:23:c6:3b:f2:eb:e9:22:ed:a3:
28:c7:6e:b4:cc:fc:61:95:3e:01:a2:0d:fe:17:57:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:33:3E:31:FE:A8:8C:22:67:98:C9:C7:78:CB:D5:45:DD:8C:29:1F
X509v3 Authority Key Identifier:
keyid:1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fe:94:5d:4f:a7:d8:94:95:c7:90:f2:06:fb:cc:b9:8c:c6:
b6:8d:20:fb:e6:3f:af:89:54:10:50:12:d8:6a:bf:d9:9b:52:
25:f0:30:69:53:51:28:48:36:10:9a:4d:5f:21:3f:08:f2:aa:
12:f2:7b:79:b4:05:43:84:fc:32:de:5b:7b:54:a8:df:93:b8:
f9:0a:9d:bf:3c:35:b8:98:62:99:33:14:05:80:ed:8d:8b:6b:
3e:56:02:4c:28:57:ff:15:f1:dd:90:de:49:23:a7:09:76:ca:
eb:e3:91:be:df:63:49:53:19:54:ac:f2:89:4b:7d:9f:1a:41:
a1:5b:75:6b:94:20:11:a7:07:a2:bb:87:a1:f1:16:c0:2d:fd:
8a:d6:d9:a4:d5:45:c2:e6:92:80:07:10:88:8c:34:3f:c0:78:
75:82:27:70:89:d8:c2:f3:aa:20:e0:0c:72:fd:4f:fe:f7:e3:
e7:78:df:ab:4c:04:bb:70:ca:24:8d:66:04:24:33:e7:af:ab:
3b:56:dd:8c:34:b6:64:9c:6d:08:17:4c:90:90:e5:d3:01:01:
fb:c7:5e:6e:9a:de:74:01:ef:62:23:5b:af:9c:cb:d7:3c:12:
35:f0:4e:af:4a:e3:4e:05:e4:99:2b:1a:be:07:2f:e0:41:d1:
f3:3c:9e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:18 2025 by rpki-client