Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
File: H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json)
Hash identifier: epYY9DiIwZI/qIa976wjyLGFkx1dIBfn25v4yLVhhYk=
Subject key identifier: BF:A9:E9:4D:2F:38:EE:D4:C7:24:98:55:56:94:B6:A2:6A:7B:6B:D8
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Certificate issuer: /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial: 019A4DE1C43C24542FBADE5648F4B3ADEF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:32 +0000
Manifest this update: Tue 04 Nov 2025 08:00:32 +0000
Manifest next update: Wed 05 Nov 2025 08:00:32 +0000
Files and hashes: 1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: vkpmTgZmX3aybDYa3UlQtfCl5ykj3nf0z+XqCvnbj+A=)
2: VPSZKXOomg68CX3e2czb5vATzV0.roa (hash: u5eUOziaSNihoip6mFV/l4VWIAiX36Jv1InorW26yng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c4:3c:24:54:2f:ba:de:56:48:f4:b3:ad:ef:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Validity
Not Before: Nov 4 08:00:32 2025 GMT
Not After : Nov 5 08:00:32 2025 GMT
Subject: CN=bfa9e94d2f38eed4c72498555694b6a26a7b6bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:be:02:6a:6e:33:64:8d:d6:48:e1:58:74:
e6:8c:04:1a:8d:81:1e:9b:5d:a1:d6:a1:38:2b:41:
03:b5:d8:79:1f:71:be:47:83:9e:0a:ac:fc:2f:4e:
7f:c4:b7:8a:13:e4:0b:f5:cf:60:f0:9c:7a:0d:01:
ff:f2:93:60:d5:59:72:d5:a4:7b:42:d1:d1:50:07:
c1:d6:63:86:d2:95:29:e9:38:a1:76:0a:ba:cf:d8:
37:d8:02:3b:58:0c:8e:e9:90:92:42:12:8b:fb:01:
ea:5c:b0:e1:c8:b8:dc:3f:34:f7:c1:a8:17:54:f3:
b3:fb:99:09:08:5b:5f:07:4f:45:d1:ac:0b:8a:4e:
f3:49:fb:6d:07:46:46:8a:b2:79:77:e6:fa:a9:f1:
99:6a:46:6e:43:11:b1:3c:d9:da:d0:02:fe:92:1f:
dc:6c:b0:2b:9e:ed:e9:79:6a:9f:30:42:7a:c5:72:
25:fc:cb:12:a3:99:f0:b7:a7:94:a7:5e:6a:39:49:
99:38:47:b4:b2:58:34:f4:fb:a9:81:6d:1a:29:8e:
d8:0c:7b:4f:59:21:4b:be:2d:c9:5b:fa:42:61:98:
ba:4b:67:8b:1f:c8:44:32:f1:96:bf:28:57:80:ff:
70:cc:93:b7:c0:04:49:91:7b:7f:1c:21:53:c4:cb:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A9:E9:4D:2F:38:EE:D4:C7:24:98:55:56:94:B6:A2:6A:7B:6B:D8
X509v3 Authority Key Identifier:
keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:65:b6:9a:9d:98:44:bd:a0:9d:b1:54:68:84:e9:c9:3b:43:
e6:2f:f9:fb:b5:76:2c:0a:18:3a:dd:1c:25:86:99:6b:ea:ab:
e1:b2:d5:50:17:ab:ef:9d:e2:d9:7a:5d:11:68:3e:7f:e8:e7:
95:15:4e:ea:e1:01:85:a3:7e:da:73:95:38:5f:54:36:48:0a:
ca:08:6d:df:d0:5b:d0:d0:f7:b6:4d:98:6e:a3:c9:a8:f5:4f:
b8:f6:69:e0:fc:65:7d:6b:75:8b:2c:6e:f8:b0:4f:56:a2:84:
ee:44:43:4b:ef:d7:34:2f:45:80:8c:7b:62:ca:04:58:01:48:
5e:10:15:c4:24:14:29:b6:92:3f:77:2d:d1:52:fa:27:12:92:
20:3b:bb:1c:1a:27:db:5d:78:10:d2:5f:f9:02:b0:fb:88:b0:
d3:77:86:2a:d1:8f:1b:58:55:35:43:48:76:dc:15:70:1d:a0:
96:ea:9e:f8:ec:f6:e2:c6:e2:bb:fb:b0:22:09:f3:42:36:63:
37:7e:11:da:1f:0b:b2:9c:ba:e2:55:9d:e1:3a:9e:0e:34:82:
f0:90:65:10:20:0c:bf:ed:16:32:b7:d2:70:85:ea:69:c1:90:
13:99:56:41:d8:35:88:b6:ad:8c:33:f3:53:71:7f:f5:e6:05:
c0:e3:27:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:24 2025 by rpki-client