Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
File: H6EtaHxiehgvgdTMyz8yIBhh9nc.mft (raw, json)
Hash identifier: ERp/MRB4XGM70/wEBv5Ar530vUe+z3niqvpEHkEcaOU=
Subject key identifier: 97:C9:FF:14:7F:69:73:21:5B:2B:63:9D:56:FD:DF:8B:A7:42:4A:6A
Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677
Certificate serial: 019A4E86477B45A15E4D9EC7BB59EBA651FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 11:00:14 +0000
Manifest this update: Tue 04 Nov 2025 11:00:14 +0000
Manifest next update: Wed 05 Nov 2025 11:00:14 +0000
Files and hashes: 1: H6EtaHxiehgvgdTMyz8yIBhh9nc.crl (hash: eo7ta+CMAwCRlYXBCkUkH2AlQyjAwz8Jb2/Lbt50G1A=)
2: TYWepdwzCmiIVwEz7K8yZe03CRw.roa (hash: Gskq7xmpmSlLRwYuMMpLlLQSUWpIBfZkyQHS0PN6dOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:47:7b:45:a1:5e:4d:9e:c7:bb:59:eb:a6:51:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677
Validity
Not Before: Nov 4 11:00:14 2025 GMT
Not After : Nov 5 11:00:14 2025 GMT
Subject: CN=97c9ff147f6973215b2b639d56fddf8ba7424a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:f3:11:bb:d7:d0:5b:a7:58:a4:97:12:ee:
ea:54:52:74:4f:a7:0f:b2:22:e9:f1:6b:b9:3f:1a:
11:d1:fb:86:e9:da:da:92:50:ca:b4:89:5e:36:b3:
02:cf:c5:c9:ff:ca:a5:b5:bc:c1:60:4f:f4:69:36:
8b:fc:83:10:aa:aa:0e:ee:63:e0:2e:9e:53:44:e1:
52:e8:9f:0b:52:fc:00:98:7c:0f:fd:d2:86:ea:b8:
4b:15:8c:e5:51:e5:60:44:ec:be:9f:fd:6d:1f:f8:
ba:85:a4:28:a2:de:c7:e3:3d:08:1c:67:43:50:77:
70:e8:01:4d:88:67:75:a1:39:0d:82:f0:e0:f8:df:
46:97:c8:57:0d:ab:a9:27:b1:12:3a:3f:2f:37:e4:
bc:41:97:50:e8:71:31:64:38:aa:34:99:b3:45:e7:
aa:1e:85:ad:a3:63:6b:db:41:04:d5:c1:55:25:6a:
f5:04:a6:13:1b:96:0f:2e:96:38:26:97:67:19:a3:
dd:4f:45:f8:6c:a4:a5:b9:5e:da:13:d7:9a:61:b1:
81:d0:8a:79:20:1d:67:e5:49:74:fe:e6:02:41:93:
f9:d8:b8:c6:63:90:ca:8a:37:56:8d:a8:00:62:b2:
56:14:55:d8:2c:4a:28:ca:c4:ac:96:db:04:44:c7:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C9:FF:14:7F:69:73:21:5B:2B:63:9D:56:FD:DF:8B:A7:42:4A:6A
X509v3 Authority Key Identifier:
keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9f:6d:c5:3a:95:06:16:1f:9e:e7:c3:bf:cb:57:1c:22:d0:
7e:c0:84:f1:78:cf:31:8a:b8:93:2e:03:7b:1d:9b:f8:24:5c:
b5:9a:5d:17:58:f8:4e:0a:ed:c6:12:6e:7c:2a:6b:dd:50:e7:
2e:d9:30:8b:c2:f0:ea:0e:13:69:52:4e:26:0e:53:e3:95:bc:
a8:25:8d:25:e5:9d:72:c4:f4:b2:25:15:4d:f3:99:34:93:01:
84:e9:1b:a5:d2:c2:d9:b9:b3:be:27:d9:a7:75:91:76:14:da:
10:15:53:4f:66:1f:02:4c:f7:58:98:d6:f2:a4:4c:f9:80:25:
3b:a5:30:90:38:3d:89:dd:22:b8:14:0b:b6:bb:07:50:78:2e:
06:68:bb:fc:89:89:57:f1:85:9c:6d:0c:78:18:25:77:1e:25:
e8:d2:7c:95:f7:f7:b3:92:fa:1b:7f:1d:e3:00:ca:b1:c0:de:
1a:92:c0:ad:10:c4:a5:78:7c:d0:55:40:41:c3:74:88:59:ad:
bd:75:c8:8f:2e:de:d9:2b:eb:cb:2a:12:71:4c:5b:24:a2:88:
07:b1:b9:9c:00:c6:a2:7a:b3:d2:f4:b3:b8:45:fd:4c:a4:56:
17:9f:9f:78:a1:0c:10:6d:c4:bc:b2:bf:d4:98:5b:76:8b:c8:
2c:27:48:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:30 2025 by rpki-client