Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: uvtgHi5017OiwzVHt4mIl+9dMclkKjUG3/sqG8z+fXk=
Subject key identifier: 2D:1D:CF:2F:32:82:15:23:34:BC:BC:62:E5:66:6A:8F:E6:18:16:89
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 0199FB7CA15677DD069853FF2F326CB1692A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: GYb1F3991igV-Xs-ZoTKTm-Vg7M.roa (hash: oDfsrWpPRTbFkqWOBaawHb+IseXIbMKYHakcvEvzdXQ=)
2: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: MfhXjuM4It/pXo6VhGw5zMHkgDD3qoevFeaDU0HGNPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a1:56:77:dd:06:98:53:ff:2f:32:6c:b1:69:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=2d1dcf2f3282152334bcbc62e5666a8fe6181689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:74:7b:b0:d7:1f:1e:d8:b6:7a:db:b3:5e:
b9:32:fa:b2:f2:c7:03:ba:38:e0:85:89:f7:61:5f:
2b:25:69:fe:d7:8e:53:0a:3a:c3:66:ea:5e:4a:11:
50:5e:48:62:20:0c:2b:91:81:a3:b3:e7:a2:39:70:
73:4b:a0:03:f2:de:51:46:ca:95:22:43:9f:be:82:
91:a4:fa:b6:e4:61:89:0d:f7:86:c1:5e:5e:d8:81:
8f:21:74:96:d4:e3:df:fc:8c:67:80:ab:1b:2c:f5:
00:7c:65:79:37:64:3e:9d:7c:3c:d7:07:d7:79:8f:
6d:fc:ef:d4:7b:fd:db:af:44:93:54:a2:2f:c0:5b:
1f:93:2e:af:ca:35:45:49:e4:7a:6b:9c:99:e3:5a:
54:08:80:52:b1:c5:6f:39:31:6e:c4:b4:02:fb:c7:
06:7b:b3:eb:e6:76:b7:4e:1d:5e:d2:ab:d5:de:a9:
40:78:2b:ce:e4:57:52:3a:6d:6c:ee:47:8f:2e:6b:
d3:07:e3:ea:95:bc:63:a2:ec:7a:d0:8c:67:ed:da:
18:71:91:a6:96:a6:4e:df:69:2b:7f:3d:1a:f4:e2:
03:99:e6:04:87:8d:e5:5a:8a:4f:a3:9a:27:e0:49:
3f:46:44:79:d8:03:14:15:00:53:f2:39:a6:fc:38:
ac:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1D:CF:2F:32:82:15:23:34:BC:BC:62:E5:66:6A:8F:E6:18:16:89
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:62:44:42:d4:e1:b8:91:ae:e1:81:b9:88:c6:08:27:08:a4:
bb:20:fc:68:01:60:b8:59:98:06:52:68:ca:6f:5d:0d:28:2d:
19:0f:de:8b:10:9e:0a:70:fd:d8:b5:48:76:1d:99:38:79:c2:
d0:40:1f:88:65:f7:1d:a3:81:56:3a:71:4a:d4:65:e5:2b:90:
0e:08:22:fb:43:55:7a:d8:69:80:ad:fb:0c:7b:ae:c6:06:06:
97:52:9c:1b:77:8d:da:48:e1:77:bf:13:5e:58:2b:b5:42:2f:
90:0b:c9:25:86:b5:25:a7:3a:ab:f5:a9:15:f5:44:49:e0:0f:
ee:70:35:42:a8:7c:4b:96:da:53:61:fb:e1:9a:af:71:21:82:
0a:16:4a:db:d3:7f:25:be:3d:89:15:9e:1e:f4:ed:00:a7:98:
37:2a:41:3f:94:ee:91:af:42:a2:d2:bb:7b:55:09:d4:71:5d:
d8:e6:5f:fc:b6:0d:33:81:21:12:bb:f7:cd:ad:db:eb:bb:3e:
0c:fc:2c:fb:1d:76:6b:69:5c:36:99:bb:09:6b:86:54:ba:87:
c9:54:a5:48:98:b4:4a:7c:55:b9:66:75:51:0f:91:2a:7a:be:
58:19:c3:ac:be:25:98:e0:bc:c2:37:d0:62:c2:22:68:56:a2:
34:a0:b1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:06 2025 by rpki-client