Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: R5HUMqay5SgdpJRmBKndVXLL1oCEsTRb6sTHsPfan2Q=
Subject key identifier: 57:CF:FF:3B:46:19:D6:96:96:74:D5:25:86:22:04:D8:84:37:16:5A
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 019A53AD3AD1CC5D9D4A9E3E13EAB90988AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 11:00:52 +0000
Manifest this update: Wed 05 Nov 2025 11:00:52 +0000
Manifest next update: Thu 06 Nov 2025 11:00:52 +0000
Files and hashes: 1: DLMTOoacedomtvAfOo_wUgsg7ZM.roa (hash: CuMafo/kjG1kejlU1ti10/bQ5ADJP+5OLOjwOYxRNqo=)
2: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: AfMwDLTutDc7hrb2FfXGT+eU1E1kL3It9vno2m8p2Uw=)
3: KySbiR-MGliV0HnEusiYoVPq_Tw.roa (hash: Tom90ESsjuLbQCudFU+oOzUxWbGr9ZgqEwEe4qv+gmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:3a:d1:cc:5d:9d:4a:9e:3e:13:ea:b9:09:88:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Nov 5 11:00:52 2025 GMT
Not After : Nov 6 11:00:52 2025 GMT
Subject: CN=57cfff3b4619d6969674d525862204d88437165a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:ab:05:7f:73:50:1a:41:57:f2:d9:9e:42:
ee:0a:0a:43:ba:80:07:69:26:b6:71:dc:62:46:20:
bf:cf:20:50:26:d1:a0:af:c5:a4:45:de:1e:c2:98:
b3:c4:c4:7c:2b:1f:e4:78:5e:93:6f:b0:1d:62:54:
4c:13:00:68:a2:28:d9:42:49:cd:c4:ff:5e:8c:18:
7c:09:5d:0c:bf:84:c1:eb:d0:4a:1c:44:5f:e2:2f:
90:51:c4:76:ad:21:8b:ea:28:3f:24:fd:04:99:95:
58:43:73:7e:b9:12:ed:d1:a6:7e:5c:fd:6a:5e:8a:
28:a9:91:fa:61:a9:71:a8:4e:5a:79:36:03:ba:28:
c5:c5:bb:7b:78:5d:aa:20:4d:d6:60:8d:a9:08:4d:
03:54:5d:7e:92:0e:65:b3:b8:50:d5:99:26:b3:c4:
45:d7:91:e9:06:5c:fb:0e:2e:25:4b:0c:7d:f3:3f:
eb:f4:33:75:48:d5:ba:18:81:40:e0:3e:1b:47:0d:
99:be:d8:6f:5e:00:d3:d9:4d:80:dc:73:b6:e3:c0:
13:36:2c:e2:e6:f5:d1:6a:21:89:09:a2:cd:35:30:
0e:11:c0:ea:1c:30:39:d5:c9:bc:01:85:09:e5:03:
6f:d3:fd:77:9b:02:c4:67:6c:4d:ba:ad:d9:d6:23:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:FF:3B:46:19:D6:96:96:74:D5:25:86:22:04:D8:84:37:16:5A
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d4:fa:ca:b7:bd:e0:d1:5e:19:17:61:64:7f:e9:3b:75:9e:
f5:f2:c7:3e:f5:b8:58:92:40:51:b6:c2:c2:44:e0:d6:75:1f:
6e:45:15:21:f7:6a:70:eb:45:5e:d4:84:56:cf:9a:fe:c9:5e:
99:b7:09:52:b2:db:fa:92:f5:c5:09:41:55:13:cb:ab:9c:61:
af:57:e1:58:fe:c9:87:95:37:a8:fd:e1:4a:bb:cd:d9:80:da:
f6:a1:36:40:97:c1:ac:3a:51:3c:6d:78:9f:c7:85:44:2b:86:
83:48:a7:85:d6:e6:c0:4c:91:78:31:78:3a:90:e0:cd:d7:ca:
14:78:6f:44:e1:30:c3:98:13:57:5f:3f:c1:fe:61:21:1f:ea:
0b:06:ce:77:c9:55:2f:00:46:0e:23:c0:ec:63:22:99:79:64:
b4:3c:8f:f2:d2:11:c4:c7:ae:e9:9b:0e:65:66:d2:15:ae:f6:
90:e2:80:1d:54:77:d0:16:b7:be:80:35:38:c4:a2:33:9f:a2:
71:75:86:d4:b4:28:e9:d4:ba:66:61:2b:b3:ba:17:00:79:1d:
88:41:4d:53:4e:40:49:a5:dc:b0:fe:4d:fb:ab:19:ee:46:1b:
ef:cb:6d:50:61:6a:03:59:b4:0f:be:1d:3d:a1:02:d8:b9:b2:
36:59:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:58:16 2025 by rpki-client