Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier: nZAEMsXp9Koh/FrpRFjoI/KhZTW3RV3pj8X2nX2UW00=
Subject key identifier: D5:BE:DD:D0:87:0D:C6:DD:3A:D9:3D:E5:F8:CC:4C:B9:C5:0D:13:BC
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 019A4DE179E4103AB0E8A0ED861669E8B04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number: 0955
Signing time: Tue 04 Nov 2025 08:00:13 +0000
Manifest this update: Tue 04 Nov 2025 08:00:13 +0000
Manifest next update: Wed 05 Nov 2025 08:00:13 +0000
Files and hashes: 1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: kErLBjVxvNl1w1i7cUEhoJLAtebwliUecg1WKOTnPAU=)
2: rNGuPSJft-Vo3aMmE_0SHixDFYs.roa (hash: RB3m8yl02sm8Z1EZzBwUHBfxuJzfyJEgz7CGmiyldWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:79:e4:10:3a:b0:e8:a0:ed:86:16:69:e8:b0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Nov 4 08:00:13 2025 GMT
Not After : Nov 5 08:00:13 2025 GMT
Subject: CN=d5beddd0870dc6dd3ad93de5f8cc4cb9c50d13bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:e3:ac:94:c8:9c:1a:df:a2:5b:c5:d3:56:
84:04:22:42:61:25:4a:3f:b7:cf:3a:2c:6f:2b:96:
c1:0f:78:c1:2c:b1:48:80:7c:c8:59:ef:01:fe:23:
94:57:ee:06:b4:18:a4:99:c8:76:c6:f9:1c:fa:05:
06:20:8e:af:45:65:ca:88:33:65:e2:31:37:4b:c9:
c2:80:23:87:69:83:c9:ee:8b:09:3f:ec:0e:41:13:
d5:59:4f:68:3b:87:fa:a7:74:26:35:91:f8:01:ff:
c7:e0:7e:2e:1f:df:c9:d4:79:f5:6f:f5:89:92:0a:
63:bb:0f:94:6a:da:59:be:6d:62:dc:a4:a1:d5:56:
ad:03:0a:95:2b:f8:23:40:40:4c:3b:5d:7d:40:83:
67:e9:ae:6f:7e:31:64:e3:69:24:93:88:39:a8:2a:
2a:00:f8:5e:15:49:58:8d:43:f8:fd:25:85:c3:f4:
4d:a5:e8:1c:fc:0b:60:de:bd:cb:dd:8b:d8:36:42:
a4:96:1b:09:23:9b:e1:b0:a0:a6:20:e5:e3:99:2e:
98:dc:8b:55:c2:e6:7f:6b:b6:56:3f:d5:4e:06:d7:
df:e3:11:e5:ea:23:5f:88:3e:ee:1a:1e:42:bf:7d:
6f:a3:4a:f8:f7:c4:06:43:03:0f:5e:53:1a:65:ae:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BE:DD:D0:87:0D:C6:DD:3A:D9:3D:E5:F8:CC:4C:B9:C5:0D:13:BC
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:52:8a:82:c5:5e:72:5e:63:dd:75:38:97:68:ba:5e:92:b9:
3d:d3:0e:00:d6:2f:85:53:09:09:e2:76:61:f2:c6:de:dd:a0:
8e:9c:14:21:fb:51:ad:e7:7d:90:b9:0e:5f:88:e3:bf:5c:f3:
d2:63:16:e3:c9:b9:a6:c5:21:b2:ca:0a:4f:69:c8:df:62:75:
c4:5e:55:b8:47:98:ad:e8:7f:c0:52:33:7e:d2:a7:2b:9c:d6:
46:72:77:ae:11:25:f0:60:e7:12:8c:e5:d2:94:fd:51:9c:2c:
68:f0:2a:53:b1:9f:82:5f:cf:7c:1b:9e:55:65:26:0a:fc:87:
f7:5c:f7:bd:77:c3:8b:5e:28:05:34:68:7f:14:85:32:d8:af:
f4:9b:96:69:e8:bd:0b:a4:d5:bf:bf:0e:56:c7:ad:b3:57:ea:
9e:df:dc:2c:cd:18:f3:79:2f:4d:c1:1b:f6:35:13:b3:34:3d:
b6:64:c6:e1:1e:ad:4e:24:7e:cf:c1:b0:21:81:4a:3b:ee:41:
e8:f4:ba:19:b8:1c:ff:a5:bb:bd:35:9f:a5:d0:b6:3f:c1:45:
d6:b1:16:d1:d2:78:88:30:a7:f3:0b:ab:7e:d3:1e:e6:f9:45:
ca:64:a0:4e:31:61:18:68:c7:8e:42:78:37:8d:3b:da:6c:68:
8f:94:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:31 2025 by rpki-client