Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: loPudoaStOFN4SWVcj73i2Y/+yqyTVv3GheQUZotVFw=
Subject key identifier: 4B:E9:CB:02:70:64:84:EC:E5:64:2E:F2:E2:03:AA:2E:D5:6D:2B:45
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 019A4D3D286767EA5D809AAD52881350D290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 05:00:44 +0000
Manifest this update: Tue 04 Nov 2025 05:00:44 +0000
Manifest next update: Wed 05 Nov 2025 05:00:44 +0000
Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=)
2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: xiW9cixDrBBSML8VQcaZTxfkqcvFT700kedjHO6alLs=)
3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:28:67:67:ea:5d:80:9a:ad:52:88:13:50:d2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Nov 4 05:00:44 2025 GMT
Not After : Nov 5 05:00:44 2025 GMT
Subject: CN=4be9cb02706484ece5642ef2e203aa2ed56d2b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:c4:a8:a2:99:ec:e2:ff:3b:11:00:f1:ae:
4d:a4:7d:d3:34:e9:fe:d3:33:9a:94:2d:22:c9:18:
0e:64:d1:bd:28:dc:58:bf:d2:8d:02:59:a7:03:b0:
fd:b5:aa:76:09:07:7d:53:99:32:45:b9:08:81:2b:
39:94:05:39:20:e2:21:f9:93:a3:36:27:9c:b8:fa:
d6:54:d3:70:60:e5:f9:0c:c4:44:42:bd:e0:b8:e6:
d3:63:52:5f:29:0f:be:dc:8c:75:d4:84:d5:bb:71:
38:11:dd:5b:aa:85:7e:e6:de:7f:b0:0c:20:43:cc:
0d:47:4d:1a:f0:7f:35:67:78:df:0a:5f:bd:cb:63:
4b:68:58:76:11:3e:e6:1b:ba:58:65:ee:7b:e6:d5:
9f:19:09:32:2d:c9:e6:5b:f3:cf:3b:e1:6f:a9:e9:
55:ea:1e:c9:58:3f:0f:fd:f7:c2:e3:d8:5c:16:ca:
4e:71:31:5c:02:91:56:df:bc:93:a5:dc:49:59:c4:
0f:18:4a:41:69:74:43:af:96:23:0c:47:ce:75:91:
53:da:c5:6a:97:b6:ce:91:67:d1:a1:07:e4:cd:a6:
32:e9:52:92:33:dc:ee:d0:b9:56:ec:7b:c5:41:c7:
e7:80:cc:4a:97:41:32:68:8f:e3:52:42:82:56:35:
94:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:CB:02:70:64:84:EC:E5:64:2E:F2:E2:03:AA:2E:D5:6D:2B:45
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a8:b0:04:83:46:24:83:df:86:29:cf:84:ea:5e:17:9a:7c:
e1:04:47:c7:c7:67:f8:92:3b:43:4d:f4:62:a0:c5:a9:40:73:
f4:ae:2f:33:c2:b5:e5:e8:e9:92:22:e0:2e:ba:04:84:26:f6:
18:53:c0:5a:37:ed:11:81:d5:1e:20:16:59:1f:ca:f5:85:a8:
bb:97:ba:27:44:a7:a9:23:2d:01:c2:94:63:3f:b5:d3:8f:f2:
23:b7:64:82:be:53:55:91:44:48:80:37:6a:78:af:2f:cf:cb:
b5:a5:00:6b:f0:15:02:b1:a5:2e:60:d8:59:4c:77:a9:8e:36:
81:38:b4:b7:f8:a2:d0:8e:6f:a4:65:82:04:9f:da:c6:39:d1:
87:d2:cb:88:f0:30:86:e8:65:84:21:5d:32:5f:3d:80:be:51:
c3:df:2e:16:40:99:a6:d3:9d:c9:95:fe:51:07:06:fd:b5:f9:
6d:7c:0c:63:e8:44:42:7d:f5:88:03:2d:46:31:db:03:7a:91:
e1:b6:93:01:49:65:d5:b4:12:87:ae:21:2c:69:fb:a2:9e:21:
a0:c4:37:15:90:07:b5:ae:26:5b:c0:e8:83:81:be:0c:ee:81:
0e:35:58:80:26:2a:4f:ba:0b:36:a5:14:71:dc:91:75:4f:9f:
46:ea:48:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:01 2025 by rpki-client