Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: JU6QnKjPk2+aafLY45GiUXXpTciBIInZqZdrIeuH4aI=
Subject key identifier: 70:22:A5:81:48:F8:E6:13:B1:C1:13:66:30:84:9E:E2:64:E4:B9:5F
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 019A4EBD4A5EF8160E2A34CFF019774498AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 0590
Signing time: Tue 04 Nov 2025 12:00:19 +0000
Manifest this update: Tue 04 Nov 2025 12:00:19 +0000
Manifest next update: Wed 05 Nov 2025 12:00:19 +0000
Files and hashes: 1: KOsVP5bePK5N3aNgh_Mf2tcpMMI.roa (hash: 7uBjlY68CN9kyBrkClnf/o/c0vAf129ok+umjgiD7ws=)
2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: ke0UHn8KnMrAjhgbpgP288LmVlOho6BMZahiY4PFb4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:4a:5e:f8:16:0e:2a:34:cf:f0:19:77:44:98:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Nov 4 12:00:19 2025 GMT
Not After : Nov 5 12:00:19 2025 GMT
Subject: CN=7022a58148f8e613b1c1136630849ee264e4b95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9f:4e:9e:c8:3f:17:ab:b7:61:00:92:41:51:
d2:53:0d:8f:fb:7e:74:c8:d8:b0:40:4a:75:df:03:
8d:90:42:7b:cd:10:e5:99:73:b5:ef:cb:3f:fc:f5:
64:8c:a3:e4:39:7a:64:05:05:33:11:25:01:b0:b5:
e1:bd:a6:c2:71:ba:65:7a:db:f7:84:45:95:b4:1c:
93:a0:37:23:de:b0:f1:4b:c5:b6:d5:97:cc:b9:27:
e8:9a:af:16:12:29:3e:4e:ad:69:d7:fd:56:90:e8:
21:b2:a6:bf:b1:41:a1:ce:09:c5:e8:0f:32:2c:6b:
b0:67:a4:4e:f5:c5:14:8f:f6:84:04:db:67:42:97:
84:75:74:11:03:9b:36:27:0a:b5:80:60:fe:2e:09:
42:68:65:1c:e1:14:4e:49:77:42:89:af:86:09:b7:
29:e9:96:00:cb:f3:05:a3:38:2f:b4:bf:66:11:6a:
65:9b:ef:2f:20:78:22:a3:dc:d3:89:1d:a5:b4:42:
30:26:b7:73:f4:4c:7c:03:b6:f8:a9:ae:8c:87:b1:
a9:39:76:62:2a:1c:9b:8e:cd:08:2f:0b:a2:f2:9e:
d3:e1:c9:2f:c3:d4:5b:e5:6e:11:da:36:e8:d6:c4:
0f:e0:09:1e:4a:69:a3:7f:3a:47:f3:f9:72:47:f5:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:22:A5:81:48:F8:E6:13:B1:C1:13:66:30:84:9E:E2:64:E4:B9:5F
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f0:de:4f:40:4a:a3:78:73:b5:25:a2:ac:ca:f3:51:fa:7e:
61:c6:2c:3e:ed:59:e3:63:b3:04:fa:0f:a4:7b:2d:f8:4b:13:
f6:f4:f8:64:ce:3e:75:e1:71:00:e9:ae:f0:ed:3a:17:8b:19:
5b:03:0f:95:ec:2c:7c:ff:fb:af:00:b6:86:c5:d9:70:8c:73:
b0:4e:c1:5c:21:f5:8b:e9:96:c1:64:f8:b9:32:f3:f6:8f:44:
92:4d:bf:f2:74:0e:47:89:d7:16:14:24:18:d1:f2:34:b2:78:
51:3a:33:b2:27:0d:93:48:b2:fa:c0:63:12:81:0c:f0:80:d6:
9f:d0:15:a6:df:d9:ab:3c:48:69:03:27:0c:a1:f2:51:c2:d4:
78:02:d9:dd:40:ad:1b:1a:5b:70:ec:b9:b3:a3:90:ca:15:bf:
0d:9c:cb:88:55:86:ae:73:2c:40:a3:f1:83:46:8e:11:4e:7d:
ff:e3:ec:79:2e:bb:09:a3:9d:09:c0:4e:ee:49:74:c5:84:d1:
6f:47:e1:3a:2b:30:a4:2c:2e:0d:02:54:f7:df:98:22:9d:e6:
8c:0f:23:e4:6b:8d:c3:7f:6c:92:6e:20:03:90:82:9a:8b:5c:
d0:0b:25:2c:db:f1:79:c6:b8:fd:0e:45:7c:2a:4c:14:f7:48:
b4:1b:8d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:02 2025 by rpki-client