Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier: bnRvEWWt4pw5G8WLY4+J7gJmdXx8innxTYoN/Ge0XK0=
Subject key identifier: 54:2D:16:3B:F4:79:4E:68:70:A9:81:3B:A1:FB:73:9F:A2:C4:2A:34
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 019A515041E40514C03D4802B81C0B2933B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number: 0625
Signing time: Wed 05 Nov 2025 00:00:05 +0000
Manifest this update: Wed 05 Nov 2025 00:00:05 +0000
Manifest next update: Thu 06 Nov 2025 00:00:05 +0000
Files and hashes: 1: PadXYOgLqVZA9ql5KBGvS89vmRo.roa (hash: nxJ2UXZ8SywJLT0Mr208cedxyBjVOFCCZZniGKgSLRU=)
2: X4DPqtKQyZOWAKBMlN7mRtcd1Ms.roa (hash: kXRcohahU5UXZUtKpTF4pyZvtQAWUIYvj9zgl+Pf9XM=)
3: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: Glv4MAmweeSYw/1suq/KhROEWEoe8LGD2Wi8SNqvnuo=)
4: i-NcdzW87JQ4S13PQa8zzViNhxY.roa (hash: 5KklHjluhn1HzYRZR4tDfo9d5WYKAm0X95RTT55u4EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:41:e4:05:14:c0:3d:48:02:b8:1c:0b:29:33:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Nov 5 00:00:05 2025 GMT
Not After : Nov 6 00:00:05 2025 GMT
Subject: CN=542d163bf4794e6870a9813ba1fb739fa2c42a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:b1:40:e1:a6:ec:18:2d:97:7f:0d:19:ff:
9b:49:d8:a7:5c:54:c2:a2:71:7f:3d:e1:13:d7:c4:
eb:0e:f4:91:cd:74:8f:14:ce:46:c2:42:f9:dd:c6:
c0:37:d5:1d:00:83:f0:9e:79:60:8a:75:b2:53:1c:
41:77:49:1b:ea:a6:27:94:f6:58:1a:c1:08:a6:68:
bc:41:09:4d:b0:ca:9e:04:d6:a4:77:56:b6:5b:f0:
d9:97:a0:2d:e4:f4:3a:a4:e4:da:2e:d2:23:6c:f8:
43:68:26:f9:ff:b7:ee:28:69:5f:67:17:e5:08:e4:
3f:ad:e9:c1:b2:df:b8:fd:3b:e8:d6:a1:b6:d0:0a:
74:2b:6e:f9:20:c5:b3:f0:e9:ce:9a:09:a0:1b:16:
48:4f:08:1d:53:03:29:1e:3e:e8:8d:3b:47:c4:99:
ef:c4:67:05:d3:ce:20:1b:6c:82:a2:92:67:88:1d:
a1:46:3b:ed:63:7c:24:e3:42:18:6f:53:0f:43:0f:
01:08:43:22:f4:33:43:03:cf:a8:c8:4e:ea:97:29:
a8:ce:bc:b4:b7:11:2b:e4:28:b1:47:15:95:3d:ac:
74:a0:1e:ca:7b:1d:ab:e5:f8:f5:a1:4e:3d:9f:17:
cf:33:07:4a:01:9a:4b:59:5b:60:dd:22:d5:67:05:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2D:16:3B:F4:79:4E:68:70:A9:81:3B:A1:FB:73:9F:A2:C4:2A:34
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:63:a6:8b:8d:ae:e7:e1:0b:98:3d:45:ff:a4:c5:7c:19:37:
db:3c:6a:11:b6:2f:86:61:04:66:7d:87:5a:e2:ce:25:e5:13:
47:9b:b4:a6:3f:8a:8f:29:f1:93:63:72:49:97:50:86:84:98:
36:0e:17:89:5b:90:94:b7:a0:b4:c4:05:78:81:7f:92:35:cf:
46:2a:d9:db:97:39:e7:f8:6f:5e:bc:c2:f8:5a:e0:10:ca:01:
3a:77:a8:08:25:35:a0:a3:a3:16:3d:c6:20:2a:70:56:2c:56:
6a:d8:d4:ab:06:9b:ab:d8:c4:ea:7f:d0:16:6a:dc:85:71:98:
e4:b2:70:c8:9d:34:da:18:d0:bb:75:c3:2d:74:e9:59:09:6c:
ff:14:5d:4d:71:ee:17:c1:fd:e6:37:e9:9c:8e:73:ac:a6:7e:
5e:08:7a:fc:3c:97:07:0f:a3:bc:4f:da:e3:c2:c3:a7:18:d2:
31:55:12:e1:90:f9:e3:96:c7:a4:a5:37:11:23:c0:d7:f5:a8:
7b:a4:93:bc:c1:c0:e2:f2:38:f3:e9:58:01:0c:68:24:de:77:
c5:08:d1:a0:d0:90:9d:8e:2c:f1:af:02:96:ea:00:40:c2:a5:
a5:62:ca:c4:f6:2b:61:0d:a8:78:5d:1f:48:31:01:12:85:48:
2f:61:6e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:40:19 2025 by rpki-client