Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier: ZZ+t2EIUwy074d6I4Hpz7iUNErxGu4lc+qPOv1yQ2aQ=
Subject key identifier: D0:A2:B4:3F:1E:05:61:02:A8:44:7B:2A:9E:BD:12:B4:4B:C3:7B:E0
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial: 019A4C987B293EF449F09E768B631B044A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number: 13AA
Signing time: Tue 04 Nov 2025 02:00:52 +0000
Manifest this update: Tue 04 Nov 2025 02:00:52 +0000
Manifest next update: Wed 05 Nov 2025 02:00:52 +0000
Files and hashes: 1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: Ll7i6Xe27M3zQHkHCQTewlQWpODgcMaQ3IPohuu33cs=)
2: m1aho7A62fK7s2UNnicExFjE6us.roa (hash: ADQVW+bl8YrIssIav1fCxE/xWNAztKLL5kf78n8W9UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:7b:29:3e:f4:49:f0:9e:76:8b:63:1b:04:4a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Validity
Not Before: Nov 4 02:00:52 2025 GMT
Not After : Nov 5 02:00:52 2025 GMT
Subject: CN=d0a2b43f1e056102a8447b2a9ebd12b44bc37be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:c7:1c:ae:43:96:b5:42:19:e5:9a:e3:a1:
2b:89:44:e0:93:43:42:e1:77:81:a2:d9:c8:49:ee:
f9:eb:8e:8d:f2:1e:e4:b6:b7:ac:f7:1f:c0:6e:74:
b6:a8:ac:bc:7e:b9:66:74:b9:01:9d:b5:d1:f6:5d:
c1:45:c4:76:9f:d2:0f:f6:d0:70:e4:2e:0a:83:5b:
f6:0f:00:93:fb:b4:b2:6a:78:86:bf:ec:48:82:db:
df:38:9e:7f:10:57:05:04:30:76:b2:7f:15:57:ef:
a4:bc:8d:16:a3:39:50:4e:51:d0:e1:3c:57:50:43:
46:a2:6b:53:10:e6:3f:ee:de:50:c3:35:29:e2:89:
5c:fa:e9:cf:dd:53:80:1d:9c:7d:ed:de:56:00:82:
d7:5d:07:c1:27:45:ad:e7:e8:e9:b3:c0:90:4b:c1:
8a:a7:48:63:ca:e0:40:66:80:d2:c0:a9:27:ae:d5:
52:e1:5e:8f:63:c6:91:81:11:db:8a:d8:eb:d5:a7:
96:01:68:0e:01:56:bf:f1:5e:83:c6:43:80:72:db:
c8:6c:42:68:5f:ef:53:32:b8:02:a5:1b:22:ce:a5:
b6:82:19:a7:f6:71:ff:82:7b:f3:23:c6:68:bd:93:
4a:5e:10:f8:f8:09:21:2a:63:60:3c:bb:1e:fc:52:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A2:B4:3F:1E:05:61:02:A8:44:7B:2A:9E:BD:12:B4:4B:C3:7B:E0
X509v3 Authority Key Identifier:
keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:79:3a:30:77:9b:30:d2:df:24:fa:2c:6c:47:fd:b7:c1:e2:
d8:4f:17:5f:3b:37:49:d7:7d:15:6f:ad:30:32:ec:5b:0b:49:
d0:c3:89:f4:f4:24:93:2a:64:a6:2c:5d:36:36:7a:fb:dc:5d:
67:3c:3a:74:d9:20:0c:b5:85:e9:5a:4f:76:6d:9f:95:18:ba:
36:87:eb:b3:1c:d5:fc:e5:11:f2:31:b1:82:b7:a1:04:16:08:
81:4f:ce:d3:4a:d2:b4:fd:6d:b8:96:2a:e6:32:a4:a2:60:89:
02:26:33:06:d4:cf:b9:f7:56:34:d9:c4:c9:05:19:02:fd:54:
e5:a9:bf:98:0e:b0:b5:b4:0d:75:56:7f:89:8a:5d:7d:8a:6e:
6e:b6:17:d4:ae:56:bb:76:ad:50:d6:5c:4d:ba:b9:a7:b8:64:
0b:92:98:ea:8c:ca:d7:3b:ad:e4:70:f9:ae:15:80:e8:c1:fa:
d4:c7:aa:13:0b:f1:d3:25:49:73:77:67:24:f3:23:ba:e2:4c:
08:ea:13:ef:ca:eb:d2:d7:c5:4d:37:fb:15:8c:8f:81:e9:aa:
f8:3b:67:93:cd:1e:89:0e:76:a6:b3:20:8f:8c:e4:cd:a1:f1:
5d:f0:80:bd:7c:9a:ef:2c:05:d6:ea:80:a6:44:b5:89:6b:1e:
2c:1d:36:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:54 2025 by rpki-client