Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: LV95TRwp8vL2qLvcjByJdOfdpmXDBoNcno7QVfs6Fic=
Subject key identifier: 81:32:0E:F6:F9:39:C9:8C:F6:21:C2:DA:BF:BA:FD:95:98:C2:24:88
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 019A4E8659C3AD5B36C05ECB239E33379F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0A39
Signing time: Tue 04 Nov 2025 11:00:18 +0000
Manifest this update: Tue 04 Nov 2025 11:00:18 +0000
Manifest next update: Wed 05 Nov 2025 11:00:18 +0000
Files and hashes: 1: cASyfuH0abUwpn-V7hmuZSIQ09c.roa (hash: U2HpSDc4zJjb5yR4FxelHkJvS6rW6HvOOx+N/+WSuMk=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: 7etYDsMbh1j9ZiVIdj2xyXTwzhz9cn530wNMq2qzWco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:59:c3:ad:5b:36:c0:5e:cb:23:9e:33:37:9f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Nov 4 11:00:18 2025 GMT
Not After : Nov 5 11:00:18 2025 GMT
Subject: CN=81320ef6f939c98cf621c2dabfbafd9598c22488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:0e:86:3e:d5:aa:2d:7e:b4:6c:5f:03:23:
6a:78:17:c8:5b:be:14:df:d8:50:ea:e5:e0:11:c8:
dc:a9:a5:a5:83:65:38:cf:5b:8a:48:42:bd:5e:4b:
c4:c3:f6:18:46:43:6f:53:04:55:f4:94:3a:14:2f:
bd:26:be:66:9a:56:05:6f:e0:f8:1e:67:0d:a1:c6:
9f:77:bb:4b:e4:ee:76:f6:d2:cb:49:13:71:f4:fe:
01:84:a3:17:6a:51:f7:34:ec:1e:eb:e4:1b:45:42:
7d:c9:6a:10:b7:ac:fc:e3:0c:05:30:17:94:4e:3b:
05:fc:04:b8:72:eb:8c:45:6e:e9:a8:ea:69:c2:c0:
5f:e2:14:0a:5a:8a:3c:6d:e6:b7:10:f6:0f:96:61:
3d:92:70:42:c3:cd:01:7f:77:1a:7b:44:a7:53:03:
ab:60:13:9d:46:fb:57:78:17:7a:2c:8f:3e:d8:9e:
b3:51:e0:8d:2b:26:8a:11:14:50:7a:c1:15:5e:58:
60:22:05:53:c2:81:1d:03:c5:6c:1a:7e:b6:d1:6c:
c6:fa:69:d1:db:7d:10:db:48:1a:0b:1d:5f:99:e6:
60:dd:bd:06:32:03:9a:07:28:75:0d:51:5d:10:91:
0b:5e:7c:ef:86:46:c6:a8:25:e4:5b:f2:cc:79:d1:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:32:0E:F6:F9:39:C9:8C:F6:21:C2:DA:BF:BA:FD:95:98:C2:24:88
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b9:f5:0a:fc:75:8f:f3:56:25:c6:a7:6b:60:22:4d:db:ad:
cd:80:f5:05:da:a2:be:52:86:e6:a5:2c:80:45:fe:b7:5e:02:
38:07:f5:04:e3:dd:5d:10:2c:fa:30:48:7f:69:dc:20:87:f7:
39:b0:e5:d9:3c:5d:4b:81:a0:93:6e:6d:41:95:ae:d0:cb:16:
f5:ba:02:60:61:78:1c:31:bd:cb:98:3c:d6:38:b4:da:1d:7d:
3d:19:e7:35:d3:28:7f:b9:68:b1:2d:3e:45:cb:a5:60:8f:f2:
b0:31:ff:c3:c1:9b:a7:46:ec:32:84:66:95:d2:1c:b9:16:cd:
1e:b3:fb:d9:aa:c7:8d:3f:01:65:7c:e0:79:3b:67:6b:f7:73:
0c:a0:fb:68:b7:63:2e:90:48:40:4b:44:14:e7:d9:7b:63:3c:
97:03:0e:65:5e:f4:8b:d7:14:96:21:eb:55:d4:76:c8:44:3e:
33:5a:69:24:c1:b6:2f:8f:bc:f5:f7:50:a0:5e:56:a7:9a:2b:
39:0b:a7:f5:73:1e:01:b1:58:51:3e:43:46:2e:c0:73:0d:7d:
e1:3d:dc:49:08:a1:bc:01:5f:21:25:d1:fc:a6:e8:46:2e:3f:
07:2c:65:97:6c:7e:e7:7b:e5:11:b6:f3:70:5c:ab:b2:df:fa:
19:55:63:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:04 2025 by rpki-client