Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json)
Hash identifier: gSThV4Iz/uemjC0DgvT2gapwdLiLVqlyq3U4vDFHY7A=
Subject key identifier: 2F:CE:D3:F7:CE:30:24:2B:E6:71:81:12:B7:57:0F:BF:25:40:43:DD
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 0199FBEAF8EDCCD99B63249E2297535C7402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
Manifest number: 0EE1
Signing time: Sun 19 Oct 2025 10:01:44 +0000
Manifest this update: Sun 19 Oct 2025 10:01:44 +0000
Manifest next update: Mon 20 Oct 2025 10:01:44 +0000
Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: jhUWFcN4YB2cQsKY2UTPxNCcwtbZ0I4Z+hzJ8H2wcB0=)
2: lHldbm0YksaCuz9XIehAf5kRzB0.roa (hash: BN7mh6nrwtoaOUPVrCKlYMfyId9M155pIfSIqKbQaEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f8:ed:cc:d9:9b:63:24:9e:22:97:53:5c:74:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: Oct 19 10:01:44 2025 GMT
Not After : Oct 20 10:01:44 2025 GMT
Subject: CN=2fced3f7ce30242be6718112b7570fbf254043dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:b6:9d:17:a2:38:19:ef:df:0e:6a:6c:89:
a0:4b:0a:c6:ee:ac:c7:cc:69:88:f4:42:cc:18:8a:
1e:ab:97:d7:d0:00:99:e8:b3:25:6d:0f:d4:51:12:
42:2b:5e:b2:15:f0:b5:d9:ba:b9:d8:ea:79:d2:cb:
a1:c6:a0:9a:c4:5a:dc:b0:f9:33:86:c8:0b:8d:2d:
e0:d6:80:ba:4b:ce:2c:99:52:e5:bf:a6:78:f3:03:
50:24:15:d1:a0:9e:ad:e9:74:89:8f:2f:94:f0:9b:
cf:0f:f4:80:33:5f:4a:54:76:3d:2d:32:f2:80:61:
f2:15:23:1b:ec:44:6f:11:c5:2c:ea:53:f1:8c:92:
4a:9d:45:a2:6f:15:65:5d:86:c1:43:ee:49:3e:76:
a0:f2:db:f7:93:18:b3:69:5f:4c:b2:99:a0:08:f1:
72:f3:6d:3b:fb:2b:a5:6d:76:08:79:81:57:30:d2:
10:15:1c:37:1f:b8:6c:9b:f4:d8:29:80:2f:2e:fc:
2e:df:65:4a:fe:08:88:0d:c2:e9:39:ad:23:58:d1:
7c:a5:d3:16:d7:45:c9:d7:b6:05:a8:85:db:73:ef:
4c:fd:b9:1d:aa:36:55:02:9b:ef:27:3e:c4:02:ef:
b3:42:f4:8e:04:f8:84:c5:8f:ef:f4:f2:58:68:1f:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CE:D3:F7:CE:30:24:2B:E6:71:81:12:B7:57:0F:BF:25:40:43:DD
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f8:c0:a5:f2:96:0f:4a:87:df:b9:96:9b:70:1b:31:5d:94:
89:7c:0a:85:94:ce:0b:63:9d:e7:67:13:8b:4a:a2:54:f8:5b:
ff:93:2a:71:5a:ad:3b:c3:4e:ab:b5:fe:e0:8a:00:53:72:57:
90:70:90:1b:1e:68:01:35:38:6c:de:58:a1:ae:c2:84:bd:11:
a1:bd:ac:c0:97:ce:5f:6f:00:6c:0f:6b:06:32:04:55:ec:53:
8f:82:7b:56:30:7a:43:31:19:7a:75:56:89:2a:5e:e9:e2:68:
f0:c8:0c:d0:45:96:0c:89:45:43:31:9f:cc:67:bf:d3:0a:aa:
37:db:e3:4a:68:17:63:b4:f9:56:02:16:4a:b8:4f:1f:24:0e:
6b:83:0a:fa:d5:bd:1b:08:7e:42:37:16:8e:4d:2e:a9:0b:03:
e3:87:67:66:20:fb:7b:16:ef:cf:87:0f:4d:84:f3:70:14:03:
da:a2:a3:7d:6f:3f:09:41:cd:e7:97:17:dc:4f:0d:76:ee:bb:
d4:70:8e:57:fd:8e:d6:0d:37:15:f2:f1:9a:1c:f7:1b:1f:cc:
e0:9f:41:53:98:80:ae:fa:99:c7:9f:ba:9d:4d:ff:a1:08:1c:
18:26:69:0c:1d:84:de:9e:57:aa:cd:ae:b2:3d:6d:f3:ca:c1:
9f:35:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:19 2025 by rpki-client