Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
File: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft (raw, json)
Hash identifier: TmN3Zk/8l1C9enLAC9u6SDCGkkOY5mDu69ixprUuE30=
Subject key identifier: 3A:93:A5:D3:0B:A3:32:AA:94:93:81:67:29:69:30:9A:6E:15:64:C2
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial: 019A4E4F8DDABFDAE6F7E3C7FB0D60E5A2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
Manifest number: 1503
Signing time: Tue 04 Nov 2025 10:00:27 +0000
Manifest this update: Tue 04 Nov 2025 10:00:27 +0000
Manifest next update: Wed 05 Nov 2025 10:00:27 +0000
Files and hashes: 1: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl (hash: AIH4w36f1Bv57nBvPXLeM0YjaGmJKbjwky/CwF32TjA=)
2: UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa (hash: tUUMnCPKY1tGYA08Lbr1dGnhLn6RW32Wd2MZ44NLy2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:8d:da:bf:da:e6:f7:e3:c7:fb:0d:60:e5:a2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Validity
Not Before: Nov 4 10:00:27 2025 GMT
Not After : Nov 5 10:00:27 2025 GMT
Subject: CN=3a93a5d30ba332aa949381672969309a6e1564c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:f0:4b:d2:e7:ac:12:a7:29:81:d2:43:af:
02:08:cb:c3:83:7a:c4:66:af:d7:50:8f:74:93:26:
8d:06:28:17:80:2a:ad:d9:07:f3:50:f2:f3:1d:16:
48:22:2e:57:e0:94:e5:9b:37:85:d6:ac:80:2a:14:
2b:d0:0f:93:f3:6c:70:32:b9:4a:05:df:13:3e:b5:
07:29:5f:65:60:7a:75:8f:e2:89:ee:8b:c4:cd:d0:
38:56:49:44:af:2a:f6:f7:97:0b:b1:d8:b7:c1:a4:
82:c1:34:db:6a:00:e3:bd:f3:9e:7a:5e:4d:a6:c2:
ff:92:6d:b9:2c:3d:b4:39:dc:ff:11:15:fc:0a:71:
4b:78:4e:1b:7a:6e:05:3c:ed:a1:4f:fc:42:0c:6c:
40:51:0b:23:8f:4d:3b:f3:52:a3:d6:2f:ee:a4:84:
e0:c0:f2:4d:8c:77:0b:49:b9:c8:17:fe:8f:bb:10:
ee:7b:98:3c:76:7a:07:14:b9:90:51:95:79:c4:12:
0e:57:f2:7e:44:5e:20:d8:e3:5c:07:42:d5:59:3b:
9e:4c:aa:a8:87:a9:73:a8:b6:94:c4:1e:8e:75:72:
e4:b7:8a:66:91:b5:f8:a7:d0:79:f4:db:84:d3:22:
2f:de:b5:ec:f1:93:8f:89:7d:21:04:87:f5:ef:99:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:93:A5:D3:0B:A3:32:AA:94:93:81:67:29:69:30:9A:6E:15:64:C2
X509v3 Authority Key Identifier:
keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:10:d1:86:bc:3b:79:e9:b1:da:41:6b:dc:0c:66:4f:fb:bb:
0a:e8:f7:1c:a1:7a:1b:13:81:05:eb:b2:94:f4:ec:84:51:56:
a6:1d:6b:0f:a4:5b:31:f9:ea:5e:e8:cc:81:bf:df:56:19:73:
ed:71:1b:be:65:0c:ca:b4:06:25:4a:0c:d7:a7:fd:d8:0c:0c:
7b:b0:a0:cf:9d:81:f2:34:a9:68:38:51:2c:cd:c3:f6:08:36:
76:7f:7b:e3:9b:97:6b:de:fa:93:15:a1:f8:5d:54:c6:08:f7:
46:c5:c7:d3:de:29:a6:31:7c:f3:dc:41:cb:58:be:ce:fe:69:
92:bd:25:91:6d:d7:80:0a:a6:7f:f5:92:54:f5:bf:ca:b9:9a:
7c:15:c0:a8:2a:d0:f2:44:7f:d8:1f:d1:96:96:3e:e7:68:51:
30:9c:1b:21:ba:81:44:b5:32:b9:ea:3b:e4:02:a7:1d:05:e9:
cc:f9:9d:eb:5b:c6:56:9f:8d:3c:a5:13:a6:fd:88:15:77:c8:
5d:15:e7:ea:91:4c:af:2a:51:57:8a:ee:9b:91:8e:e3:97:37:
ce:b2:5b:6d:b1:ba:39:fb:d9:4d:29:0d:b0:dd:02:27:ac:df:
b1:e2:82:43:a0:2b:7b:fa:a3:3b:8e:7f:bb:dd:5b:e4:18:48:
d7:b5:b7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:26 2025 by rpki-client