Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: V0l7tiKHeCzTp1sZjvZVuMANGiGx6hpmHqtaN5x8qfs=
Subject key identifier: 78:B0:0C:BD:91:1B:9E:82:1B:65:A6:FE:FB:3B:D2:AC:36:41:E9:8E
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 0199FB0EC47CCA4FFE94552B1802DDA3BE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0DD3
Signing time: Sun 19 Oct 2025 06:01:12 +0000
Manifest this update: Sun 19 Oct 2025 06:01:12 +0000
Manifest next update: Mon 20 Oct 2025 06:01:12 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: S7lAcR6dfWC21+UgAxgZcrvdZ6Yo73C4Q3BfkTC9JyU=)
2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:c4:7c:ca:4f:fe:94:55:2b:18:02:dd:a3:be:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Oct 19 06:01:12 2025 GMT
Not After : Oct 20 06:01:12 2025 GMT
Subject: CN=78b00cbd911b9e821b65a6fefb3bd2ac3641e98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a9:f3:38:96:69:23:37:23:c8:01:bd:ec:8a:
2d:0d:37:37:11:af:52:b9:76:07:3c:fb:45:82:2a:
5f:4f:6a:12:ee:b3:29:2b:da:1c:97:85:04:80:41:
51:18:37:0f:8d:43:e2:93:c0:5f:32:cf:ad:d3:e0:
5f:c3:67:e9:2a:eb:e8:15:d8:2c:e7:4e:26:5e:ae:
00:e6:1b:31:f5:3d:89:0d:b5:b2:b5:8a:39:7b:47:
09:84:be:a7:e9:cc:c8:e7:23:7e:3a:41:88:6d:db:
a2:d6:e0:d6:f0:0d:c9:ce:9c:65:11:22:99:22:38:
66:b0:a2:3c:80:ab:f3:1f:92:bb:8c:ce:71:a1:7a:
35:62:23:fd:d1:82:48:01:c2:8e:81:9d:80:8a:74:
36:01:54:c6:cd:41:c1:a0:fc:d0:cc:e1:98:2e:23:
be:f1:f2:17:1c:62:d6:e6:59:cb:60:4e:54:07:41:
a3:ab:78:05:76:c5:0c:ed:dc:8b:b7:73:d1:79:22:
92:41:12:64:f6:7b:ee:64:ed:fd:41:0e:96:87:a7:
99:39:97:3d:50:e0:37:80:ed:de:38:2f:84:6a:3c:
be:ea:62:2f:df:a0:6d:28:92:16:0e:b6:6f:d3:7f:
4d:11:1f:47:80:6f:fc:74:8e:fd:43:df:73:19:13:
2f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B0:0C:BD:91:1B:9E:82:1B:65:A6:FE:FB:3B:D2:AC:36:41:E9:8E
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e1:94:0f:3c:f7:7c:22:48:29:eb:20:5a:99:74:99:b3:a6:
c1:e0:11:cb:92:68:9c:17:73:4b:ec:ed:c1:1e:90:04:4d:ab:
bd:41:e2:18:35:2c:d3:15:24:6e:ac:10:f6:65:ae:f8:3e:9f:
02:07:c3:4b:a7:1e:f3:aa:57:f8:c1:2f:bb:b8:9e:d9:39:bd:
83:ed:4d:57:18:ca:cb:5a:51:a2:51:f7:77:79:6b:7e:68:72:
f1:ce:f4:66:62:8f:7f:55:e4:a0:18:9a:7b:6a:3b:63:94:63:
f9:47:c5:60:ef:32:9b:e3:0a:fe:12:68:2a:87:ad:19:f2:94:
43:57:c7:d3:42:ea:57:76:a9:c0:11:a0:56:0a:47:40:bd:87:
23:1c:02:38:f0:50:e6:fb:4d:82:80:da:da:74:56:f6:f1:04:
1f:7e:3b:d9:e2:79:ac:ff:24:03:a4:e4:b2:99:a6:44:e1:5d:
d8:c1:f6:0c:91:3a:14:c6:61:55:69:48:f0:82:b3:b5:49:f5:
eb:ee:08:f3:15:e4:2c:5a:be:e3:e4:7b:a7:0c:1b:13:a7:6a:
f1:59:30:cb:af:08:ee:4d:c2:7f:70:6e:07:61:7f:12:0c:38:
60:74:1b:09:24:d0:27:0e:05:13:89:f6:25:29:8a:4e:1a:96:
49:d7:73:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:27 2025 by rpki-client