Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: L8p15Q5eA4NTvTRvsEpooJ/aiLePd7dA6JC7UeGAL1Y=
Subject key identifier: 15:00:84:74:DC:14:AF:FC:42:B7:11:1A:8C:B2:DB:1D:85:CF:62:9D
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 019A4DE1CD2CBB564880D0F23B01B0397D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:34 +0000
Manifest this update: Tue 04 Nov 2025 08:00:34 +0000
Manifest next update: Wed 05 Nov 2025 08:00:34 +0000
Files and hashes: 1: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (hash: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=)
2: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: C4+yofbrbwV8ZmBlAyjamxV51X/Oy3AcMk8lwUmRMGo=)
3: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (hash: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:cd:2c:bb:56:48:80:d0:f2:3b:01:b0:39:7d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Nov 4 08:00:34 2025 GMT
Not After : Nov 5 08:00:34 2025 GMT
Subject: CN=15008474dc14affc42b7111a8cb2db1d85cf629d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:4a:41:d2:0e:f6:5f:18:d7:b0:a5:79:ef:
17:28:04:25:aa:95:c8:e2:af:0f:8b:9d:ef:02:3b:
46:27:74:7c:5c:d6:c1:4c:9a:a1:f1:bb:50:78:a5:
9c:e3:9c:c0:ae:76:69:6d:bc:55:92:06:7b:81:83:
5a:2b:f5:8f:e8:21:99:bb:16:9b:74:f2:45:1e:8f:
e5:7a:22:c2:cb:2f:e9:06:af:7e:14:49:e5:cd:21:
1b:64:7a:4a:85:bb:84:f1:91:47:c7:b9:35:fc:09:
c8:5b:2c:f6:b4:98:82:ce:37:95:b3:31:22:54:fe:
95:d0:81:ed:c3:9f:f9:ef:f8:39:14:43:02:16:20:
10:d2:0d:17:f0:d5:78:f0:fe:6e:dd:63:33:47:92:
6d:fb:de:3d:22:1a:33:a0:74:c8:07:34:cd:5c:a8:
2d:c4:0c:97:c9:7d:a5:91:db:3e:a3:e4:07:b0:55:
be:03:c7:91:20:01:82:cb:2b:46:a6:9a:95:47:62:
16:d3:8e:96:9d:b3:ab:ab:ae:fb:25:1b:14:37:45:
62:c7:1f:f9:13:14:42:88:ea:2b:6f:42:de:d0:26:
a7:42:5b:a5:79:d2:4c:47:6c:d9:34:26:42:53:61:
7a:24:fa:7b:df:26:d5:d0:ac:21:15:47:82:1b:ba:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:00:84:74:DC:14:AF:FC:42:B7:11:1A:8C:B2:DB:1D:85:CF:62:9D
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:42:5e:53:11:8b:b5:40:5f:59:a6:f1:69:42:7f:84:09:24:
55:2d:1c:b3:e4:7c:b6:ac:45:1e:d7:be:f4:15:b0:5f:ee:de:
b2:72:ba:60:c5:c1:ea:7d:93:e3:6f:2a:f1:e8:2e:10:3c:a8:
e2:97:58:6d:b6:08:b3:b5:4a:c9:5e:22:8e:75:8a:2f:83:6d:
fd:47:df:e8:3c:96:e3:cb:56:b7:70:4f:65:8c:66:83:54:1e:
d0:9f:e8:db:bf:cf:59:2b:63:7f:20:fe:13:33:6f:7f:ae:c6:
a0:d2:af:db:fc:b7:86:09:4b:cb:38:59:b9:8a:1e:e9:4d:07:
fe:61:42:b3:df:dc:71:5c:08:1a:36:09:92:82:22:f8:e4:27:
83:a3:dd:78:d5:7d:4a:7b:01:55:d2:84:44:96:b9:98:cd:37:
e5:be:1b:a7:64:48:c5:0f:76:82:6a:24:b2:32:c7:b2:e2:ae:
4f:31:1d:15:b5:17:e3:f8:5d:35:9e:44:4b:cb:2b:d0:59:7b:
92:da:0f:f0:2b:41:06:34:4d:3d:2a:26:64:6a:54:f9:0f:1f:
f7:e1:12:9e:f3:6d:fa:51:6e:e5:b5:0c:31:d8:8e:d8:2d:44:
27:a1:ab:29:ef:0d:5d:bb:86:e0:98:53:70:c2:96:7c:06:77:
67:6f:d9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:04 2025 by rpki-client