Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: z6yxjmXPtqfvL2uQ47rBfb6TXNhXXcUz3mrxzDaDotM=
Subject key identifier: 5A:85:08:09:48:81:64:62:F7:14:4A:C0:2B:27:14:FB:37:2E:88:2A
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 019A4E86A99CC6A38CA33CA15DAA6764278E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 0E16
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: 9LtCAwdvQTxrsgjAgJBXTY-dexQ.roa (hash: YbPa7xrFRquA6rkXPn/4oW9xs5SCR/ZWuuJuhONwhvc=)
2: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: n8Fuad7El1EIbhM3SI8IpBz7Tnw+Jel8qhxeeGm1kV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a9:9c:c6:a3:8c:a3:3c:a1:5d:aa:67:64:27:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=5a85080948816462f7144ac02b2714fb372e882a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:d3:1c:fb:02:ba:76:03:cf:c8:38:03:c3:
d6:d0:dc:6f:58:6c:d4:3e:53:4b:22:11:aa:8e:a7:
05:56:34:72:79:a3:98:09:f2:8e:33:6b:8e:75:d9:
bc:dd:16:f2:cb:66:f9:5c:87:4b:01:32:17:cd:da:
a2:a2:ef:24:e0:ec:2c:2a:96:a3:51:8d:3e:07:2b:
7d:4e:ca:39:27:31:65:cc:b3:ac:69:f2:ef:39:2b:
4b:b4:ff:5d:1a:25:25:03:ba:34:e9:73:cf:96:a9:
aa:f5:db:76:93:b7:4f:d5:9f:91:d5:50:e0:1b:14:
8d:ef:fb:63:df:0e:8a:9f:61:a5:a7:eb:84:61:d0:
18:0d:0c:cb:af:d3:f2:c8:e5:01:58:a9:c3:35:25:
58:28:4c:94:ff:b5:ce:cc:1c:81:ac:43:99:12:13:
44:27:d4:e2:f5:46:b8:e1:a3:68:4e:ef:8a:da:65:
17:79:24:68:05:11:d3:45:3a:6e:d5:1d:db:d0:67:
fe:5e:cf:63:a1:28:0d:95:a7:f0:f1:ce:47:13:47:
a9:27:d5:00:dc:96:e6:0a:91:66:5d:10:5c:a0:7c:
0e:64:27:3e:14:cf:e7:a2:07:b5:23:f8:67:1f:2b:
89:e1:2b:73:da:ab:35:ba:25:19:91:1b:fe:07:98:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:85:08:09:48:81:64:62:F7:14:4A:C0:2B:27:14:FB:37:2E:88:2A
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0a:5d:5f:8d:9b:bf:8b:a1:5a:0a:f2:e5:43:5a:33:90:b1:
82:4f:46:b2:d5:89:80:49:a5:44:fd:ae:2c:a4:9a:51:07:cf:
46:3e:5e:d7:4f:52:85:2a:fb:11:bb:c7:4d:f2:e4:7b:26:75:
b2:ba:2b:c6:92:b8:07:b2:ca:32:d1:61:97:3e:c0:3a:17:14:
4b:e6:69:d3:11:dc:93:5f:14:61:84:cd:40:77:cd:23:8c:42:
94:57:8c:8c:a7:54:4c:38:16:24:7b:01:b1:75:c7:09:b5:8d:
19:7d:31:81:47:cb:3c:f2:60:fc:92:ca:a7:29:f7:b6:32:a8:
0a:6f:dd:ab:da:bd:84:8f:bb:17:41:3d:cf:a4:4a:4d:6a:cc:
d1:f2:c6:d4:32:94:f7:20:62:44:80:d6:28:26:1d:42:c1:f7:
c7:2e:c2:6d:a3:94:71:8c:53:ce:bd:71:b1:49:48:0f:12:d6:
99:b7:0b:27:31:68:5c:37:7a:5a:4d:a9:80:66:64:6f:3d:e1:
be:4f:51:1c:bd:39:d8:7e:aa:43:05:4b:2c:09:5f:bf:d2:06:
8c:e2:be:68:e9:62:c6:3a:f6:7b:9e:21:d5:3f:c2:b3:1c:a1:
9d:98:cd:27:70:b4:e8:1c:41:eb:30:b6:c3:ab:df:4b:34:d1:
df:1e:bd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:43 2025 by rpki-client