Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: kU9chWZxS8l771vIIYo2jTErte2pAQ4oTFslCKWXZKI=
Subject key identifier: 48:38:15:E2:B4:52:B3:86:08:AE:8D:4B:E4:CE:15:A6:33:0C:5D:55
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 019A4DAB0F9ABD796B244F9E014A2D1C7AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 1310
Signing time: Tue 04 Nov 2025 07:00:47 +0000
Manifest this update: Tue 04 Nov 2025 07:00:47 +0000
Manifest next update: Wed 05 Nov 2025 07:00:47 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: MkMr7vlwiJEvzePdwve1PiuGYGIL2sDyHOgLQaFFkfY=)
2: NSQQr0dchBVb5NqeR8z3x_MXCeI.roa (hash: XPvSVq5h7mPPG5QqR8bg1ZJJPL/y/MfsW5VYh5EY4C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:0f:9a:bd:79:6b:24:4f:9e:01:4a:2d:1c:7a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Nov 4 07:00:47 2025 GMT
Not After : Nov 5 07:00:47 2025 GMT
Subject: CN=483815e2b452b38608ae8d4be4ce15a6330c5d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:40:51:f1:0a:5b:41:5d:d3:0b:d1:3f:d2:5a:
e9:36:34:67:1b:98:69:7b:bf:20:57:1c:63:f8:de:
26:72:a0:98:7f:b1:31:8b:0b:2d:9f:f9:e2:7c:70:
cf:ce:85:ee:e4:b5:f5:1a:87:6a:d8:34:bd:fb:c1:
09:d6:27:ca:c0:46:00:9d:e5:5e:c3:29:5c:6b:75:
d0:18:51:b3:ac:c2:62:6e:30:8d:d9:ee:5f:1e:be:
02:ac:ab:65:0d:75:b7:f6:31:99:b9:36:b4:77:95:
3b:02:f4:61:71:e2:89:3e:36:c7:97:1b:0a:f6:ad:
4d:63:c8:34:39:b5:3f:b7:26:73:48:aa:54:96:f1:
90:dc:f6:ea:42:82:de:6c:d3:b2:d1:98:cc:f5:22:
d6:8c:9a:be:8f:7d:e1:43:05:2e:02:b9:b9:a1:a7:
cc:4e:f8:96:dc:0c:e7:67:d4:ec:70:5c:80:96:5f:
62:a7:c3:4c:25:84:74:5c:c2:12:05:9e:38:27:0a:
26:ca:f0:60:3e:d4:85:ec:c3:69:e5:b2:71:3d:0c:
14:1f:63:9f:2b:e8:f2:95:46:e8:21:f6:fe:20:ac:
93:d5:83:0e:f4:e2:b1:fc:dc:c6:40:7b:a0:83:21:
c0:02:4a:ae:53:dc:fc:0f:4f:bf:e2:6c:08:9f:58:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:38:15:E2:B4:52:B3:86:08:AE:8D:4B:E4:CE:15:A6:33:0C:5D:55
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:47:3c:58:39:67:fa:d0:de:e9:36:c6:b8:29:32:f5:de:aa:
87:8d:bc:2b:c1:cd:a4:0f:ee:77:c2:bc:b1:7c:ba:b6:d5:17:
6a:7b:37:7a:46:2a:93:e7:c3:4f:9c:cd:a7:7d:e1:3d:5f:84:
2c:67:d0:28:b8:0c:da:50:93:1e:21:be:0e:89:32:33:b3:d2:
a6:b9:50:ff:29:54:00:fa:77:4e:fa:ba:bf:61:80:39:11:27:
4a:2d:62:24:2c:c7:fc:8b:5b:1e:27:c6:6b:6c:82:f8:10:3b:
23:39:03:c1:24:88:d5:ae:27:f9:a8:fe:93:33:67:70:6e:79:
86:fa:53:b9:d9:bb:1e:00:68:0b:22:23:d0:25:62:6e:eb:7a:
7c:50:13:20:c8:17:58:b7:28:f7:41:21:9d:00:61:99:06:69:
ff:44:3e:ed:3d:30:74:63:e6:92:66:ed:0b:02:3b:6b:5d:a2:
a9:83:65:62:f8:cd:d7:c6:3a:1d:03:de:8f:ce:89:c6:31:ee:
b3:fb:b7:fb:1d:01:c0:3f:e0:9b:28:11:f4:aa:ec:6d:f2:b8:
d0:8a:9e:a1:c3:77:ee:7c:7f:55:52:c9:84:e3:d1:10:2d:4e:
2a:cd:a1:10:3a:63:63:7d:df:45:74:1f:6b:65:8f:e3:d1:7b:
e5:98:75:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:17 2025 by rpki-client