Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
File: H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json)
Hash identifier: T4eirKyW5psZcpRQ4M6guV1N/GZTE28a/ysO31gjYfg=
Subject key identifier: F2:20:3B:BE:FC:F8:7D:17:93:80:D5:A8:47:37:8E:06:ED:31:EC:E7
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Certificate issuer: /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial: 0199FAD7D511E84D81F01C297AB90BD3A61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
Manifest number: 0F16
Signing time: Sun 19 Oct 2025 05:01:12 +0000
Manifest this update: Sun 19 Oct 2025 05:01:12 +0000
Manifest next update: Mon 20 Oct 2025 05:01:12 +0000
Files and hashes: 1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: ct3CE74+YiL5Xjls6egT0p5sZQSffDtOIG5KHGir6jw=)
2: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:d5:11:e8:4d:81:f0:1c:29:7a:b9:0b:d3:a6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Validity
Not Before: Oct 19 05:01:12 2025 GMT
Not After : Oct 20 05:01:12 2025 GMT
Subject: CN=f2203bbefcf87d179380d5a847378e06ed31ece7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:f7:de:4a:27:20:b2:6d:e3:b8:55:65:57:
da:29:ae:fe:05:aa:ab:6d:0d:60:cd:5c:46:db:a4:
cf:c5:23:50:15:e5:82:2c:55:9a:bd:43:d9:d5:00:
07:bc:a9:a4:37:21:59:34:d7:7a:8a:9a:db:3c:ac:
af:61:d7:df:84:7c:1c:e2:ec:ca:05:3d:00:5f:32:
98:1a:16:45:9d:f4:2a:9f:4c:93:7c:cc:bb:72:e7:
75:56:8e:ef:a9:1f:6b:01:13:e4:4a:a5:fe:32:af:
1c:2a:c6:ee:8c:5c:85:a5:3e:4b:33:87:f4:67:3c:
30:3a:a4:2f:f1:68:5f:b6:dd:c4:45:c3:e9:e0:bf:
45:71:e5:77:65:aa:02:63:b3:8b:19:57:8b:8c:36:
64:0d:dd:40:a1:b6:10:af:dc:32:b4:0a:3d:93:ee:
da:93:cb:7f:f9:0c:b4:e9:b2:7a:c3:9e:5f:93:73:
d9:9d:5e:51:b3:b5:5e:ae:0a:ea:91:28:a5:b4:da:
0f:a1:34:99:96:93:77:1f:7c:2d:ac:91:d7:97:79:
63:dc:33:be:29:a0:c4:01:f7:6c:68:6c:dc:c6:e3:
97:d6:ff:3e:9f:90:e5:72:cd:90:c2:8f:82:74:77:
b4:b7:47:2d:2f:e5:5c:97:f2:f6:37:2a:2c:1a:15:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:20:3B:BE:FC:F8:7D:17:93:80:D5:A8:47:37:8E:06:ED:31:EC:E7
X509v3 Authority Key Identifier:
keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:32:3d:c0:aa:88:59:4f:ba:4d:f3:5b:18:6e:bb:5b:c7:43:
f2:be:12:c1:e0:69:27:95:17:13:4b:05:c2:59:bc:a1:bd:97:
d6:b6:b1:3b:65:06:c1:c1:16:f1:83:ce:6d:92:f2:93:d7:bf:
92:f2:75:1e:08:94:76:16:ee:fc:59:82:2b:22:0e:28:0d:81:
fa:40:64:e8:75:83:c8:9f:dd:79:44:fc:90:3c:14:5e:48:b6:
9d:65:5a:1a:be:03:c4:d4:7d:6b:70:72:a0:94:86:ea:87:c3:
22:91:8d:68:aa:20:31:58:67:d0:f2:e7:04:a9:7c:d6:07:3d:
f5:c4:fe:f1:67:0b:58:33:25:1a:6f:da:4b:eb:7d:b4:8a:20:
4b:b7:95:d0:8d:42:a4:6e:da:b1:94:8f:c4:4d:b5:af:7c:4e:
be:7b:8d:c9:11:4f:82:43:a3:2c:08:6c:79:c4:ae:8a:7f:51:
ff:ba:80:e2:4c:5a:d1:61:ac:34:cf:14:46:3f:92:64:1c:0d:
17:af:a3:70:69:2a:08:e4:68:38:ee:26:88:35:59:c0:bc:38:
c7:81:a2:83:d1:0b:67:5e:7a:75:df:39:fb:ba:97:74:90:33:
6a:f5:53:35:01:01:c0:49:28:d0:b7:75:e6:26:75:56:7e:c6:
96:33:7c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:51 2025 by rpki-client