Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: q1DGOAF5iBHcKw+D70CeKdGCxlWtsYvFGuLEA+LZ83k=
Subject key identifier: CE:66:88:57:44:55:6B:80:3C:F4:68:58:E1:9F:9C:F8:E8:69:CC:CD
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019A4E188F1032886230E9A48DE3EBCFDD14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 1196
Signing time: Tue 04 Nov 2025 09:00:23 +0000
Manifest this update: Tue 04 Nov 2025 09:00:23 +0000
Manifest next update: Wed 05 Nov 2025 09:00:23 +0000
Files and hashes: 1: 7q0WrWMejy7wbR787YAaoWGbJFQ.roa (hash: wvukoKMYamTKrvVMIAVFKbPLx57mG8Vi2Twko2h+BGA=)
2: 9N4nOv3tg3sEbPyzZf0it1Hq25E.roa (hash: IJnSS5a9u+7nIpL38LijT/DvQkKhhTmKcLRcnn9ZFq4=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: tU5zYDCd9M0kA4Ld5pEW1FiKzuC56vpwwmrPQz+jEdo=)
4: HFw-x8czfBceHHrxWFsisFaU53k.roa (hash: cYh9OngZxsihRjHnYd3zU3o4mbQkOgFi9+M2bbApN3k=)
5: X8AY7TE63_MLYw5qzgUDNFtz5p0.roa (hash: X2a5upeXUq+OfzrT3NEfhOg+ntOWBbajp/Ueexg9I2s=)
6: lZMuhPvtZ2azCXBKPog94p3v2Xw.roa (hash: xEuRWjb3WfY9qNirTUGj3ZWp2yVhhUygTy4CswJMg3c=)
7: uIXD9TM7mcGL2h8D_v3d0KyzT9E.roa (hash: N8tk1k3ctTBw3mBa+DDHR+60L2fh+aJO68VY7R3S2T4=)
8: vlexF02dkqJLD0WdrTxwGKUdE4I.roa (hash: cuDkI790X0jMiu+jzLtuqyGyt6ox4BybHkrBEnZriww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:8f:10:32:88:62:30:e9:a4:8d:e3:eb:cf:dd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Nov 4 09:00:23 2025 GMT
Not After : Nov 5 09:00:23 2025 GMT
Subject: CN=ce66885744556b803cf46858e19f9cf8e869cccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:15:bd:94:4d:c7:70:b8:5e:8b:59:5f:f9:
0b:bd:d1:dc:a5:65:2c:23:99:e2:16:83:7c:10:59:
11:5a:9a:5f:a4:82:2f:bf:8d:7a:1c:8e:78:b4:f2:
d9:7b:e5:af:3d:35:53:03:53:b5:40:a7:f5:0e:76:
66:18:f9:cb:ba:d8:bd:12:4c:95:ea:21:7c:ab:13:
3e:11:99:2c:da:02:c9:05:83:9d:0e:94:ea:64:3b:
31:85:35:42:5c:95:b1:44:08:14:9d:83:b4:46:cf:
4e:43:34:b5:6e:57:01:c9:b1:78:85:66:7b:de:ac:
71:35:13:84:7c:87:56:8c:8d:53:0d:17:e7:87:56:
24:1a:9a:74:12:ee:59:f8:63:69:d6:73:97:90:be:
d4:28:8a:53:fa:6c:6e:b5:55:a7:25:f2:b5:91:98:
3c:2d:c2:6e:ae:d7:17:c4:e5:ad:21:ea:44:94:a1:
e8:e7:01:b0:34:03:1c:21:b1:dd:85:08:ae:a9:3b:
6b:63:15:58:c6:a2:36:ad:1b:be:a4:f1:f0:c7:1b:
11:6b:2d:58:e6:16:e3:36:94:90:23:4b:6b:e3:75:
28:34:4c:ca:01:31:48:fa:d9:73:ee:2c:82:0b:bb:
5c:b1:fe:21:6b:3d:c3:fd:1c:cd:a9:f5:67:ba:9a:
b9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:66:88:57:44:55:6B:80:3C:F4:68:58:E1:9F:9C:F8:E8:69:CC:CD
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:86:0e:65:c7:4a:56:64:42:02:62:71:b3:c1:a5:1f:5e:3c:
1c:41:ce:bb:68:65:4a:50:12:fe:f8:07:78:02:48:85:7c:93:
13:47:0d:ba:15:8b:bb:78:62:5d:1e:f6:5e:3e:57:d3:19:51:
6c:60:10:56:58:2e:f5:cd:9f:61:02:33:29:77:91:ab:e1:bc:
fb:90:55:e3:6e:f9:62:23:3b:3c:a6:97:83:d5:86:11:c9:b8:
95:8b:0f:04:b1:88:ee:5d:54:5e:fd:72:2f:b4:56:80:33:7d:
ad:15:0c:bd:0d:08:d7:86:bf:a0:2c:95:20:4c:58:a3:cb:88:
cc:56:73:f0:95:46:af:d2:22:8c:23:12:c2:3d:7d:56:69:d3:
12:44:19:fc:57:7d:d5:60:f1:81:2b:dd:56:f2:f8:5d:e4:8b:
b0:44:58:01:af:10:bc:38:c6:c3:2e:d9:c7:97:16:b4:c3:76:
f0:1b:68:46:25:46:ca:fd:63:81:55:78:c6:d2:a2:64:d9:a6:
0c:09:35:ab:c1:bc:5c:8e:9e:69:d2:8a:f6:eb:5c:51:30:6b:
76:45:0d:22:5b:23:5a:81:c5:0c:a3:94:e1:87:2a:8d:bd:cb:
5d:8a:7c:9a:0b:23:e8:0a:c7:83:2f:c7:5e:83:0e:f6:81:0d:
45:9e:6d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:07 2025 by rpki-client