Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier: EvZ0HfILUUjGjvAy4U58sRlaMZneqxHkcnrvrz5PkcY=
Subject key identifier: 22:0B:E6:CB:40:05:9E:3E:0D:91:B5:CD:CA:2F:0C:AA:B3:77:E4:F0
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 019A4F991E40DEE5208FA67AC60BCFDBED2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number: 05F5
Signing time: Tue 04 Nov 2025 16:00:25 +0000
Manifest this update: Tue 04 Nov 2025 16:00:25 +0000
Manifest next update: Wed 05 Nov 2025 16:00:25 +0000
Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: Pi0unJJA+2HrKsPWcEQn7SbCr3rY/nVUvtgIHhxcJQA=)
2: VgX2YIG6L_L8c5HWMPiqq1n_S1o.roa (hash: BRlNIKeJrtOTaA3OLFtig45D6GjYy7gWY1CCeaiI+5U=)
3: sDqZRTbZvAQQTn6KJoc_Vm9WzY4.roa (hash: iL19VOkv+2+1Ma+y58+a49a0z0arTyOufs85rap+38w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:1e:40:de:e5:20:8f:a6:7a:c6:0b:cf:db:ed:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: Nov 4 16:00:25 2025 GMT
Not After : Nov 5 16:00:25 2025 GMT
Subject: CN=220be6cb40059e3e0d91b5cdca2f0caab377e4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:a3:f4:77:fe:3a:f4:23:86:4d:05:6b:11:
db:41:23:f5:af:83:1c:83:8e:85:6b:ec:95:0f:21:
ba:a7:e6:24:3b:3e:7c:fa:94:2d:8b:3a:04:ae:c0:
bc:01:b4:02:2a:dc:89:a1:73:57:e4:09:a4:e6:1c:
25:d7:3a:eb:43:f9:8b:06:5c:4b:d3:f7:0b:bd:21:
d7:16:b8:1f:97:49:88:72:a7:a3:6d:ad:0f:12:8a:
b1:81:b0:4f:51:13:fb:52:c0:06:96:c4:95:b1:9a:
9d:4f:6e:38:49:f5:9e:82:b6:af:bd:0e:85:af:35:
2f:87:65:d3:5b:f6:01:39:36:a8:78:a4:e9:21:aa:
86:e2:75:66:7a:37:ff:d6:6a:ae:ad:1a:b7:8f:9d:
a4:91:b1:f9:6b:17:75:19:ee:29:a4:3a:f0:5c:9b:
e2:ce:b2:43:42:e1:d6:66:09:3b:17:0a:61:c9:1d:
16:2d:69:27:ba:13:44:68:73:c6:d4:e2:09:51:a1:
e4:23:b6:92:67:4e:65:0e:6e:7d:a0:22:ec:ae:3d:
7c:cb:dc:b9:5a:2f:cc:6d:88:ca:b8:61:71:26:86:
76:0b:cf:98:19:ae:a8:79:05:ea:a2:30:ab:6c:e2:
ea:38:50:7d:60:6c:c8:cc:0d:0e:42:9a:93:b5:8f:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0B:E6:CB:40:05:9E:3E:0D:91:B5:CD:CA:2F:0C:AA:B3:77:E4:F0
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fd:7e:63:e3:13:76:9a:4a:f1:41:a1:3c:ac:c0:30:18:09:
c7:17:27:ac:96:ed:14:6f:9d:7b:e6:f5:f1:1f:a9:3e:fb:ad:
fc:ba:e8:e7:65:c2:14:e5:87:64:14:ee:a1:6e:eb:81:97:87:
bc:27:18:25:86:d7:25:f0:da:ce:f2:85:c7:b9:e4:b8:c6:f4:
0c:68:14:39:47:2a:79:87:32:88:05:d9:c3:93:f9:cf:c6:bd:
62:9a:70:6f:c5:c9:38:64:f2:20:16:66:e8:b7:8e:39:ec:97:
9f:bc:57:3d:16:b4:e6:11:91:ae:27:81:a2:96:8a:0c:59:98:
63:1f:fe:e7:02:21:a9:00:0e:de:ff:14:db:f0:3a:72:86:87:
6c:bd:ad:69:d0:b1:a4:6b:0b:46:1f:a9:5e:05:df:07:51:8b:
31:7e:56:c5:89:d0:a3:9f:7c:5e:c9:90:27:1e:fb:68:3f:d4:
cb:82:e6:49:7c:9d:91:30:a1:b9:a8:1e:fb:68:a2:60:50:e6:
c7:65:7b:b7:ee:f6:45:94:25:c9:7d:01:42:cc:41:7a:73:eb:
5c:8e:6e:cd:d9:30:e1:e9:e6:02:d2:f2:1e:89:7f:49:e7:d8:
1c:69:0b:f8:c1:58:29:a2:16:df:62:94:28:7c:2c:22:95:e1:
a6:d5:25:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:56 2025 by rpki-client