Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
File: h497ckDFitfp7vUFdPYIjpuQsC0.mft (raw, json)
Hash identifier: D2V2s5Je5ftUg3KxzcuAQf8PmukT/312D2Hh0yc0Jvo=
Subject key identifier: 02:63:22:C3:DD:41:C0:1D:9D:B7:7D:A7:93:F3:E3:7D:0C:C4:42:C8
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Certificate issuer: /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial: 019A5451AB66D321439D81D5B4CCF2EF36B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
Manifest number: 16A1
Signing time: Wed 05 Nov 2025 14:00:29 +0000
Manifest this update: Wed 05 Nov 2025 14:00:29 +0000
Manifest next update: Thu 06 Nov 2025 14:00:29 +0000
Files and hashes: 1: 6mTYkUzvhb-Htm6lfZWXyJFAe3g.roa (hash: wl2jbKj60gngwVW2ZgUBMEJL1S5Obo/uhCmKyt9SPvM=)
2: h497ckDFitfp7vUFdPYIjpuQsC0.crl (hash: 1MxyDjviN7voXqm+Joc6ljpBsgOmTI1vUWvrw3/KfKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:ab:66:d3:21:43:9d:81:d5:b4:cc:f2:ef:36:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Validity
Not Before: Nov 5 14:00:29 2025 GMT
Not After : Nov 6 14:00:29 2025 GMT
Subject: CN=026322c3dd41c01d9db77da793f3e37d0cc442c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:1e:c7:e8:73:ee:7f:36:50:5d:9d:54:61:
1c:1c:e9:80:21:d1:ab:6f:72:ea:1a:52:bd:53:2d:
fb:46:3d:43:71:5c:22:82:cc:f5:46:1c:2d:2b:d9:
fc:fa:5e:75:fd:ce:7c:e7:13:21:7c:b2:8b:b5:be:
b5:f5:e5:92:50:38:cc:ac:e8:27:7e:f7:ec:e4:92:
04:31:00:4c:92:c9:a6:d4:5a:01:87:4d:83:f2:e6:
1d:e2:e5:db:2b:dd:83:e9:f7:ba:c1:e6:91:fc:cb:
a3:fb:cb:62:1f:ff:00:13:14:ae:af:72:ba:1a:71:
fe:97:59:73:ac:c7:46:4c:ea:17:1f:e5:d9:8e:e4:
c6:7b:a1:c3:33:96:00:3e:bb:9f:36:56:24:79:72:
98:71:22:7f:d1:e0:06:b7:0d:32:88:62:7d:b8:d8:
f4:de:41:c8:92:8d:4a:da:2e:4d:4e:e3:c4:58:64:
aa:b9:80:85:47:4a:27:e4:1b:9a:fb:b8:c1:52:c0:
ab:8a:f2:fd:d2:02:48:b2:57:eb:a1:26:df:83:d9:
51:28:3b:9b:f7:8b:ec:d4:b4:52:cd:91:a8:ea:3b:
4b:ee:df:2a:59:b7:e2:f2:02:2d:7e:42:ad:90:e7:
06:a2:f9:b3:ed:b3:5b:0b:a3:d7:25:be:13:da:8e:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:63:22:C3:DD:41:C0:1D:9D:B7:7D:A7:93:F3:E3:7D:0C:C4:42:C8
X509v3 Authority Key Identifier:
keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4f:33:8a:37:43:03:49:b9:be:91:3a:51:d4:d1:23:92:9a:
5b:89:3d:e1:f4:da:ce:c4:2e:b0:16:76:8a:80:67:cf:75:9f:
c9:98:0a:da:e4:de:d2:83:f0:b5:d9:1e:83:b2:19:94:36:5c:
c7:0f:fe:65:97:b6:d6:62:81:04:4f:61:ce:e7:52:44:46:ff:
f4:32:14:6e:77:4e:bc:98:bc:8b:2a:cc:bc:0c:61:a8:1a:a1:
7a:ea:a6:eb:4f:67:13:8f:7d:ae:4e:38:38:16:e1:1f:5e:fa:
b1:bc:2f:1b:2f:4a:44:a4:bc:d3:19:92:c6:41:f0:55:48:72:
2f:fc:33:31:b0:ad:c6:7e:0d:d3:f6:d5:a3:23:a0:0d:b2:49:
9e:ca:55:be:31:83:69:7c:cd:15:65:99:19:5f:64:ed:32:3c:
ca:cc:7b:55:1e:8a:6c:3c:32:1c:65:8e:1f:04:71:bf:02:63:
1f:f9:95:f2:12:39:21:ea:bc:aa:a1:db:e5:a6:7f:ea:c6:59:
0a:3f:27:32:68:19:61:e2:ec:95:d5:7d:65:c8:80:c4:f4:07:
42:e2:b5:47:47:5c:f3:f3:e2:f0:cc:f6:58:e2:2f:78:c3:28:
47:d6:59:e5:49:74:dd:e6:78:7b:3e:de:7b:a9:91:d8:5f:18:
e1:e0:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:09:16 2025 by rpki-client