Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier: Jh9BjEcO8eCzTmhlhnXBk1+Q5vQZG7xbSJuTiUKtPbQ=
Subject key identifier: 41:37:5B:68:83:17:AA:BE:09:E5:26:1E:7D:5F:94:A2:C7:54:50:73
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial: 019A4DE1DF4258499AEC9307D609B5FF988E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:39 +0000
Manifest this update: Tue 04 Nov 2025 08:00:39 +0000
Manifest next update: Wed 05 Nov 2025 08:00:39 +0000
Files and hashes: 1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: BtL+q/rUDjGnsg7bX2/gCFF36oytp+b2Jx6Mmoz6L9M=)
2: oP_NZCckorWlK08uLtq1ZhjEmNw.roa (hash: TmGRTgVUIXQXGjYy9QqbbgsvjEEm+TAtLS3xKb+xEyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:df:42:58:49:9a:ec:93:07:d6:09:b5:ff:98:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
Validity
Not Before: Nov 4 08:00:39 2025 GMT
Not After : Nov 5 08:00:39 2025 GMT
Subject: CN=41375b688317aabe09e5261e7d5f94a2c7545073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:55:45:30:d7:7b:48:32:d5:70:5c:d7:03:
c8:2c:13:6d:f0:83:25:36:13:e2:a8:0d:bf:aa:3d:
27:95:76:66:96:9a:dc:f3:8d:28:d7:04:12:b9:58:
34:60:aa:0e:9e:67:11:56:b8:58:b3:17:02:fe:69:
db:2f:38:6f:97:d0:9c:cf:21:55:7e:9c:15:30:f5:
3b:a6:bc:0a:50:a4:06:cf:57:ac:ea:de:f6:05:7f:
17:e5:0e:8f:57:73:0e:e1:fc:22:30:da:9a:c6:2c:
2c:04:ad:7f:a7:37:7a:cf:7a:55:64:04:0f:b6:78:
04:e5:e5:2f:66:0b:ef:0f:67:af:ad:97:cb:fe:51:
2d:eb:71:1d:68:67:4c:9b:a6:00:9b:dc:ff:e4:3f:
22:fb:b9:37:15:5c:79:3f:ef:88:24:6c:60:4e:30:
56:18:3a:8f:0f:d6:60:be:02:68:02:20:89:b3:17:
f9:6a:2d:58:2c:46:47:c1:00:70:d9:4a:e5:d7:6c:
c4:9d:3c:c0:ab:06:67:75:7f:d7:91:86:b4:2a:e8:
16:3e:65:d2:89:33:1d:c8:4d:4c:56:fd:e0:12:43:
0f:f8:e7:d7:2e:3c:8f:28:17:43:7e:21:bb:ac:59:
0a:4b:0e:c5:4e:21:df:f4:5d:7f:34:e0:03:2c:74:
11:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:37:5B:68:83:17:AA:BE:09:E5:26:1E:7D:5F:94:A2:C7:54:50:73
X509v3 Authority Key Identifier:
keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:91:de:f1:05:4d:84:cb:95:9c:fa:a8:08:ad:3e:2e:ca:fd:
4a:9e:a0:3a:1f:12:cb:eb:e2:7a:91:58:86:91:0b:08:bc:8d:
61:d3:40:6f:b6:9b:50:63:ba:71:fe:44:60:08:c3:0e:18:c1:
a6:72:4d:36:d7:91:86:03:e9:63:b4:85:00:c9:ad:17:bf:dd:
e3:5a:5b:3e:39:f1:0d:57:ea:ef:d0:52:6b:90:cf:51:48:aa:
3e:d8:3d:5b:c9:af:63:63:7c:31:be:90:18:e0:13:1d:93:e9:
3b:3d:d5:2f:35:40:68:82:94:b1:67:97:15:fb:d2:b5:83:9f:
dc:8b:59:da:be:f7:76:e6:99:62:01:16:a3:65:4f:0d:83:f9:
6f:9d:08:db:be:fd:16:9b:26:08:ff:16:86:09:fe:fb:da:83:
b6:4e:4e:03:6c:76:8a:57:d1:4c:63:fd:c4:79:8f:b8:4c:7b:
27:4c:83:8e:84:3b:2f:6f:10:e6:48:65:24:28:77:c7:8e:ae:
70:1e:91:1f:6e:7c:7c:a8:ef:ae:21:d3:e4:a1:73:c8:42:c0:
78:5a:f8:24:7a:f8:2f:c9:11:15:c8:32:22:79:2a:93:73:3f:
6b:d6:25:7d:af:64:e5:74:f6:31:18:0a:9b:c4:61:02:93:cd:
37:db:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:36 2025 by rpki-client