Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File: 1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier: 7S722fz72vg/DHeme5ieacfasFVWaYJlHvOVcAJQPjA=
Subject key identifier: 8A:57:C6:6C:9A:F8:0C:7E:BA:A6:E8:EC:83:D6:1D:A3:B9:76:38:61
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer: /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial: 019A4F629F292C8930C05D98BF41889B5CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number: 0322
Signing time: Tue 04 Nov 2025 15:00:54 +0000
Manifest this update: Tue 04 Nov 2025 15:00:54 +0000
Manifest next update: Wed 05 Nov 2025 15:00:54 +0000
Files and hashes: 1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: LXxCqu6DnNi4h41vHdkutn69g32lpv7Zn+s164BF4YU=)
2: oL3YqmLZNQTklrYCVBkqoxnVPVE.roa (hash: vNB411x6DGxlKgUop3xuDcnHI37Ap9OjrZ9OIS8r31M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9f:29:2c:89:30:c0:5d:98:bf:41:88:9b:5c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Validity
Not Before: Nov 4 15:00:54 2025 GMT
Not After : Nov 5 15:00:54 2025 GMT
Subject: CN=8a57c66c9af80c7ebaa6e8ec83d61da3b9763861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:9e:d6:f3:f8:81:95:5f:51:8b:6c:0f:c8:
53:e1:79:68:da:1e:ea:ee:3a:dd:0f:45:7b:3b:98:
e3:dc:2f:42:e3:79:e9:35:0b:d4:f6:7c:f1:e8:eb:
5b:e4:e3:67:e0:20:b8:7a:27:a6:ad:06:03:a7:bb:
79:4c:36:07:65:71:e6:af:61:40:6a:69:53:f0:5d:
d1:a4:89:ba:3b:f0:9b:c8:95:dc:95:ca:eb:40:81:
04:42:53:18:e2:f5:b8:42:22:ca:67:af:7a:bb:3a:
49:14:38:f8:13:57:fe:1e:5f:d9:eb:54:f5:b9:ba:
31:a5:61:02:8a:66:61:15:6a:a8:55:18:73:3a:67:
f4:99:e9:2b:2b:5f:24:8b:bf:60:6e:1f:b6:bc:23:
40:fa:32:14:a2:4d:92:1e:41:b7:9b:9c:5b:8c:71:
7e:41:11:d4:54:61:06:7a:71:21:08:88:51:80:17:
be:a2:76:55:9d:2d:14:d4:55:f1:24:89:2c:88:00:
47:1e:76:a8:36:db:7f:de:d5:73:bb:82:40:e6:f3:
68:fa:bc:a1:3e:2d:c6:69:71:a4:0c:b6:ad:52:31:
42:4c:a4:00:af:31:d5:9f:e7:5f:bb:40:38:86:91:
05:36:dd:19:53:1b:89:ad:5c:14:1c:d9:6f:fd:22:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:57:C6:6C:9A:F8:0C:7E:BA:A6:E8:EC:83:D6:1D:A3:B9:76:38:61
X509v3 Authority Key Identifier:
keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1b:9e:49:f7:b0:f1:0d:31:5d:a1:9a:20:a6:a5:79:f0:ef:
42:b4:13:b0:18:17:30:db:27:1a:03:07:db:7e:7c:5f:b1:c4:
89:6a:2c:3c:f2:14:af:22:eb:b8:c3:32:cb:3c:b2:d0:91:4e:
d5:39:82:f0:30:4c:8f:52:3b:31:60:fe:56:7b:3c:3f:4a:a8:
2a:9a:eb:43:69:8c:01:b9:d6:5e:41:c9:df:b9:ce:f3:40:3d:
f6:fa:12:8f:97:eb:a4:ff:b1:6b:48:47:d7:5f:fd:8d:66:6e:
2b:eb:ac:df:4a:21:cb:6a:a7:cc:51:42:7d:78:b3:b4:f7:42:
0b:eb:96:1e:ad:30:4a:e3:bc:64:96:9e:ab:16:37:07:d8:92:
be:b2:07:a5:79:59:e0:11:e2:73:d2:c1:88:2a:5b:86:dc:a3:
99:d0:fb:fa:6a:31:ef:3e:e1:0f:fd:88:a2:79:92:c2:68:f2:
f6:57:3d:1b:9f:1c:c8:67:fe:d3:fb:59:ad:2a:10:57:39:46:
5c:ee:21:36:e8:4f:cc:d1:33:77:26:f9:90:49:3c:66:c7:d1:
00:91:5f:4f:1a:e7:3e:f8:62:10:50:5d:cc:8e:4f:7c:87:4c:
a5:a5:c9:7f:19:91:e0:51:1d:6d:c0:bd:02:e1:4b:be:77:d1:
43:8a:08:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:42 2025 by rpki-client