Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: Opmb2xjpnl5z47oV1zeVi6VT40zZmu0G6m+ma3tDsoM=
Subject key identifier: A4:5C:CB:91:52:C4:EA:C9:68:B6:E3:67:4C:EF:65:D7:22:48:2B:E4
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 019A4F9982EB4E64C64B50F8C2BA2215DAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 0E9B
Signing time: Tue 04 Nov 2025 16:00:51 +0000
Manifest this update: Tue 04 Nov 2025 16:00:51 +0000
Manifest next update: Wed 05 Nov 2025 16:00:51 +0000
Files and hashes: 1: 1-NOojewDd9utfznujBymNMOVe5o.roa (hash: X2kKFux/YKAN46Gj+j+YVyBua6uxGC7NabYTrscJFb0=)
2: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: TKDInU59YZ3EOa3nqperTHomW49p2qrYwRVgnmTBKR0=)
3: QYI6qk9Zfa_51Q10YSN1VCMFzDo.roa (hash: vLhteTYzXMoTEM2IXWi4847wtewoAK//TnkULC4i1CU=)
4: QjuxJ6qQtAfkxBg368Hm1m7WVg4.roa (hash: t8EQkQ4/YMRDclHW8vhweaMsa94SAKvAmv2jUXhwu6A=)
5: giTh8Ebv-slnkkaTofMNpLbZvzM.roa (hash: bO2clbkcE8o6+abtqVuqTC73svDuw3XhC1F4AhqNJOA=)
6: pj_r37O8ymvyjuC6uSrXOKsAL0o.roa (hash: wt8kJLWKI7jt1DkUmOJ01bIYni4fTUbSQrDjjyaL96c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:82:eb:4e:64:c6:4b:50:f8:c2:ba:22:15:da:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Nov 4 16:00:51 2025 GMT
Not After : Nov 5 16:00:51 2025 GMT
Subject: CN=a45ccb9152c4eac968b6e3674cef65d722482be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:0e:80:25:72:fc:76:39:0f:9f:21:14:49:
da:b4:18:16:8e:fc:90:59:48:50:33:15:63:90:b2:
b8:e7:f8:78:9e:2a:29:4b:4c:6d:81:8c:35:f8:b9:
ae:31:a0:bb:16:c9:4a:bd:64:17:e5:e0:a1:da:77:
57:b0:c0:df:c3:94:62:1f:4f:e4:d9:b4:16:1d:d4:
5b:1a:91:3e:7b:dc:6d:b7:17:45:40:ec:1a:8f:84:
bf:da:78:29:7d:81:1a:72:27:72:00:35:da:07:53:
bb:77:37:79:f0:19:4c:e1:aa:1f:7d:87:a9:4a:b6:
ca:61:8d:d8:6c:e2:f7:7f:50:18:b8:2b:5b:af:aa:
8c:68:cb:14:ba:49:70:83:5d:ea:e4:b7:5f:19:d2:
fd:80:9e:10:ab:d5:d3:f0:7a:04:38:0a:50:93:2e:
cd:08:74:14:f6:9b:ad:c5:e3:fc:e9:d5:8d:dc:eb:
5f:22:f6:c3:8e:12:ea:c9:22:b4:8f:4d:4e:51:11:
6c:cd:84:6a:2a:b1:8c:b5:02:2c:b9:f0:8f:e4:8c:
0e:d3:9b:17:21:f5:ab:07:7e:96:bc:78:e8:d1:5b:
0f:0b:81:31:ee:22:73:fc:75:51:5b:14:d7:56:12:
cc:e2:91:76:d7:cd:36:7f:da:73:6c:cc:a8:7f:30:
db:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5C:CB:91:52:C4:EA:C9:68:B6:E3:67:4C:EF:65:D7:22:48:2B:E4
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4b:a6:57:6f:86:81:da:a0:1c:20:6a:52:d1:37:d4:2d:dd:
af:1d:02:5b:27:74:d5:6c:85:bc:be:8e:98:8b:85:1a:b2:93:
d4:f1:8c:18:5a:7b:f8:03:bb:5e:6d:a8:8c:e1:92:c1:15:f0:
07:93:be:38:84:0d:0a:d0:69:6f:b0:c5:b6:a1:40:44:54:fd:
30:9c:45:e0:29:48:80:a8:b3:35:e3:e7:a6:14:e8:dc:76:50:
8e:98:cc:ce:24:52:28:a2:c9:30:3b:e8:87:b3:d1:e3:8c:8b:
55:ae:14:b9:df:99:98:99:b7:a9:e3:f8:14:a4:ca:4a:e1:1f:
8f:ab:00:6d:5d:56:7a:18:c0:04:54:12:90:d6:8f:d7:93:43:
e0:bb:15:aa:90:13:26:fc:95:7b:7e:9b:4f:50:1a:e9:2d:0e:
5c:22:ed:8f:22:95:f1:33:38:2e:c6:00:e6:0e:b1:b5:46:62:
4b:48:4b:0e:37:fb:6f:fe:44:c1:65:3a:e0:1f:05:34:54:e4:
39:4c:3a:65:cb:87:f8:eb:14:63:53:37:ac:c2:29:88:c3:b6:
62:e7:5a:a3:23:a0:5e:92:eb:97:7e:94:5c:b6:ab:23:0e:ea:
f3:ad:43:ea:cf:05:aa:6f:91:59:de:76:33:23:98:62:6e:9c:
a5:fc:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:46 2025 by rpki-client