Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json)
Hash identifier: gdq35DY5IN7cq6I3+JVhSykvOjk5pNvUGntGHXEHcNg=
Subject key identifier: 35:60:48:F9:7E:31:6E:10:D8:3A:FD:33:38:2A:B2:AC:A5:89:ED:1D
Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Certificate serial: 019A522C7A23999A889A42AD006C46D55E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
Manifest number: 1674
Signing time: Wed 05 Nov 2025 04:00:37 +0000
Manifest this update: Wed 05 Nov 2025 04:00:37 +0000
Manifest next update: Thu 06 Nov 2025 04:00:37 +0000
Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: Bldr8Qrtu2lZIIdyEHc8Ns8xM/BlHxf10dEvoJaDNzc=)
2: fPSZP8slBnM3nSGAFaRQqfblguQ.roa (hash: blLgu2v1K5L5bFcrSgTETqeQaxD8GwJMq27CaonXujI=)
3: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:7a:23:99:9a:88:9a:42:ad:00:6c:46:d5:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Validity
Not Before: Nov 5 04:00:37 2025 GMT
Not After : Nov 6 04:00:37 2025 GMT
Subject: CN=356048f97e316e10d83afd33382ab2aca589ed1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:bf:a7:64:91:ad:39:53:0f:27:22:7c:6c:
ad:f2:8c:d7:03:00:b1:05:34:41:15:86:89:45:54:
f1:74:7a:d4:c4:6b:21:9a:fd:6b:43:0b:97:9c:2c:
ec:7e:6a:81:8e:61:2f:a7:87:bf:38:a8:53:34:08:
60:a5:ef:9b:ad:f3:15:78:5f:6d:bf:86:86:07:96:
5e:9f:26:e9:a0:b4:56:23:82:72:b1:75:dc:f4:71:
6d:cc:0e:a9:3d:47:a8:79:09:ef:bf:5a:5a:d9:8a:
ea:49:b3:d4:05:34:da:09:8b:42:91:1e:45:0d:a7:
aa:c4:cf:dd:fd:68:ee:9f:cf:11:0c:e6:5b:4d:4b:
ab:51:90:4e:a6:b6:8c:fd:5f:ce:c8:d3:3f:94:9e:
c6:36:94:a1:dd:5a:e6:f3:03:7f:54:73:2f:0f:bd:
3e:c2:74:39:2f:84:70:47:1d:9e:47:fe:94:6d:f6:
6a:f2:8e:da:40:d6:d9:27:6e:fb:da:aa:af:2f:4c:
55:2d:c1:b4:f1:8c:97:a9:99:3b:c0:96:8d:7d:52:
50:b5:69:9e:54:2e:34:ca:56:37:b8:c4:02:f3:d9:
31:43:7e:17:e7:04:29:fd:33:5b:cf:2d:0b:1d:27:
ad:b5:b1:0f:7f:26:c6:5e:b9:d2:b0:86:fa:a8:e9:
40:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:60:48:F9:7E:31:6E:10:D8:3A:FD:33:38:2A:B2:AC:A5:89:ED:1D
X509v3 Authority Key Identifier:
keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:00:7b:16:9a:71:c3:2c:10:8f:96:58:1f:b5:cd:46:93:ba:
53:f2:14:bd:a9:a6:7b:19:04:60:55:fa:35:01:be:2f:14:c3:
bd:e6:7e:18:61:c4:59:d1:53:e4:ed:1d:6f:1f:54:80:d9:bf:
82:4a:e7:74:e0:10:07:4d:fc:7f:a4:e6:ef:07:a5:3a:ad:c9:
09:ff:70:ad:47:fc:b0:03:19:bd:ae:31:c4:15:53:9d:51:2d:
d5:dc:48:44:c8:ea:15:67:5e:e0:3d:75:d7:bb:ba:15:2b:b4:
8d:22:b8:5d:92:bd:66:02:40:16:d9:0b:1b:6b:18:33:16:0f:
8e:47:e7:04:f0:36:15:69:ca:96:d6:24:c4:2f:6a:f5:d9:16:
dd:d9:92:41:78:5e:7b:57:33:d2:63:c7:ee:83:97:41:89:86:
c6:5e:68:65:ef:7f:02:fc:93:a9:91:a2:83:9d:07:2d:3b:8d:
2b:9c:79:d1:25:2b:2c:2b:b9:f5:c5:d2:bf:dc:7d:58:59:94:
0a:d1:57:df:c3:d9:0f:a8:41:b1:50:99:05:7b:18:e6:5a:bf:
82:48:af:0a:00:3f:1d:be:78:b5:2d:f9:08:d6:c8:6e:43:cc:
0c:63:c4:fb:93:84:70:d7:6c:e8:91:86:06:84:8a:f2:4f:36:
86:00:6d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:03:15 2025 by rpki-client