Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: fKppjKDN7jbF5fTo3xeRHjSvY/bvAVXPDOA88qK4kFU=
Subject key identifier: CA:5C:DC:B3:68:D5:4B:E9:52:AD:B1:E8:22:5F:20:BB:8D:FC:72:03
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 0199FCC685F969F8B23762A6BEBFE6D2D105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 0680
Signing time: Sun 19 Oct 2025 14:01:32 +0000
Manifest this update: Sun 19 Oct 2025 14:01:32 +0000
Manifest next update: Mon 20 Oct 2025 14:01:32 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: 6Q+UISb1bGQHhlZkEJNrIiXxIsrQMRhxZIs4hB0rGtc=)
2: neQhSGrd27w6Xn2chZDgwEsCrLI.roa (hash: 1tkSubS/cwYJgj12QwQ+XvFzRT5l/tNW9QOj+Oo5EeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:85:f9:69:f8:b2:37:62:a6:be:bf:e6:d2:d1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: Oct 19 14:01:32 2025 GMT
Not After : Oct 20 14:01:32 2025 GMT
Subject: CN=ca5cdcb368d54be952adb1e8225f20bb8dfc7203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:0b:66:22:7d:5f:6a:23:22:8e:29:87:30:
bf:f1:d3:a8:39:bd:7f:80:3e:85:01:84:4f:67:7b:
3e:8d:41:fd:cc:34:4f:2b:17:4b:51:c2:66:fb:71:
e0:5d:38:36:ac:61:44:1d:dc:8e:96:7c:ea:ce:8d:
16:73:16:f8:43:97:7f:e7:ed:76:71:29:a9:3d:a3:
7f:3c:65:4d:74:64:2d:1f:63:cf:6c:ab:0c:33:54:
1d:15:a3:50:a0:d6:88:59:8e:63:0f:ee:a3:a1:7f:
04:91:5d:3a:7a:95:09:15:42:a6:e7:28:73:9a:56:
a1:45:c1:06:c0:57:a7:9a:36:50:ee:cc:e0:0e:63:
79:0a:95:8e:f9:29:9d:4a:cf:96:2d:fa:b0:b6:e4:
ff:2b:60:63:92:82:9d:2f:a7:4d:58:3c:f9:60:45:
d7:9a:db:6f:4b:66:e6:d7:fd:ed:b1:60:8c:ec:48:
90:d3:2b:94:35:89:b1:69:a5:39:66:ee:52:1e:f9:
47:24:f7:b6:98:dd:2f:01:44:5c:fd:9d:55:dc:62:
f5:65:39:bb:8b:09:07:38:81:c9:a2:18:ba:d3:3c:
6d:f4:72:de:eb:30:8f:e8:d5:da:27:6e:cc:6b:69:
33:5a:cf:a5:f6:fa:65:b8:cb:b0:b5:c5:a9:b9:51:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5C:DC:B3:68:D5:4B:E9:52:AD:B1:E8:22:5F:20:BB:8D:FC:72:03
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:de:ad:ab:0a:6d:ff:1c:dd:8f:fa:eb:f6:f0:c6:13:3b:26:
32:f9:ee:f3:62:96:1a:64:1b:51:dd:20:c7:7a:66:8d:64:8c:
ce:1a:0c:0f:b6:5d:8c:22:35:59:a5:ed:11:eb:14:fe:43:c4:
06:81:78:2b:80:2d:d2:b0:13:ee:0b:77:cd:40:a2:60:59:da:
f0:32:15:fc:07:a4:da:44:47:e4:07:7e:ae:4e:66:29:3f:cd:
5f:4b:a1:e5:94:61:89:37:f8:af:a3:5b:46:96:55:80:eb:43:
27:21:93:a3:60:ec:24:3d:2f:26:a6:bd:e3:29:bd:c3:03:ce:
98:d1:e8:10:72:43:66:4a:4b:79:37:56:af:25:26:49:80:0d:
c1:2f:fd:ff:ce:76:5d:dc:d7:18:82:70:91:e7:83:f6:37:36:
46:f9:0a:60:4e:b9:00:24:b7:c0:66:4f:c1:32:55:33:97:ab:
0a:51:9b:b1:59:07:78:b8:5f:42:c2:d7:55:42:e9:87:60:f4:
7e:10:7b:37:e5:cd:22:45:e2:f7:c9:99:c6:d7:d7:9f:23:e4:
7c:68:22:f4:71:c2:ad:b0:8e:a4:0b:e2:17:47:bb:7b:68:59:
e4:43:f7:f8:31:0b:03:92:8c:c6:2c:94:7e:22:1f:5a:4a:b1:
e3:8a:b5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:32 2025 by rpki-client