Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
File: H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json)
Hash identifier: hvjARE+TEzWy6hm2G8BOkyu0xe4pdZEWVHaMKhI+U2c=
Subject key identifier: 8E:03:C1:EF:BF:9D:54:FC:FC:02:E0:8A:01:53:5A:26:B8:76:25:01
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Certificate issuer: /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial: 0199FCC6B3EDE32495C42F9955A57D6F322D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
Manifest number: 05A9
Signing time: Sun 19 Oct 2025 14:01:44 +0000
Manifest this update: Sun 19 Oct 2025 14:01:44 +0000
Manifest next update: Mon 20 Oct 2025 14:01:44 +0000
Files and hashes: 1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: V4auMpqu02j1PUsfGGtKr/HdM/UWO9BbumZOXFK7wAQ=)
2: y-Jj6DyqKWn6BYWapkymjYaL5QU.roa (hash: gn98KweekT80SkX3KfiuOUzbXsngJC/J9zd5eWO66No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b3:ed:e3:24:95:c4:2f:99:55:a5:7d:6f:32:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
Validity
Not Before: Oct 19 14:01:44 2025 GMT
Not After : Oct 20 14:01:44 2025 GMT
Subject: CN=8e03c1efbf9d54fcfc02e08a01535a26b8762501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f4:df:93:89:b6:bf:3d:11:90:23:2d:7c:53:
b0:bb:2d:30:cb:d6:d9:06:5e:2c:eb:fd:ab:99:7c:
8e:80:10:99:d1:c7:f1:eb:87:24:e8:55:ab:6f:92:
bf:42:6f:4e:27:90:9d:71:b5:bb:54:79:dd:28:a9:
8d:00:14:da:5d:f0:3d:15:4e:ff:39:fe:e1:c8:1c:
9d:a6:99:ac:a1:ee:3e:1f:03:e3:13:45:5c:e8:ce:
34:fa:d9:02:17:c9:54:83:0c:c1:71:0a:3c:34:15:
1d:4c:63:48:e6:d9:56:5b:71:43:de:3d:ea:f0:1f:
dd:32:e3:56:32:57:89:ae:bf:4b:29:e9:14:65:d0:
bf:7a:f4:8b:68:c9:0c:2f:cf:42:32:8d:b5:15:29:
7e:b2:40:46:42:43:ee:a9:f0:73:20:91:e6:42:8c:
50:04:da:58:9b:5d:2d:a5:c9:e9:0b:03:80:62:bc:
51:db:29:b5:71:20:00:ff:73:43:bc:f2:0f:09:c8:
cc:ae:02:99:fb:cb:10:a9:4a:6c:67:78:53:a5:1b:
7f:ba:c5:7d:7a:5b:d4:6a:29:f6:46:6a:39:f8:8e:
c6:69:b9:ce:79:f4:95:f0:df:6d:92:fa:5a:47:65:
6c:09:3c:5c:7f:42:70:fe:6c:77:9f:2b:fe:aa:d8:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:03:C1:EF:BF:9D:54:FC:FC:02:E0:8A:01:53:5A:26:B8:76:25:01
X509v3 Authority Key Identifier:
keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:10:10:77:93:e6:d5:3e:03:27:ed:b9:18:6c:a6:3b:b6:96:
f1:c1:c5:88:57:d5:17:4f:25:da:06:0b:9f:af:66:ca:43:f4:
6a:41:87:2b:38:2b:14:35:61:98:0d:ff:82:8c:2c:85:93:af:
bf:76:e7:b0:21:c2:3f:3f:be:39:23:fa:ed:f4:22:c8:dc:76:
f2:fd:8e:d4:e7:7d:02:f1:88:bf:32:65:36:a7:78:8c:54:3c:
8d:9c:ff:c1:79:87:81:8d:4f:29:d9:0a:10:e2:81:60:3f:33:
63:21:4b:e3:61:94:cb:99:b6:ce:62:c8:1a:0b:1a:4e:dc:bc:
a7:b0:51:27:4a:49:c8:c8:34:f0:b1:45:da:07:44:09:32:54:
c7:3b:52:f1:53:1a:01:34:94:8c:e7:40:36:8c:8a:5e:6b:a0:
14:65:3a:9b:77:e0:aa:4c:e6:2d:f0:53:0e:56:1d:8d:be:66:
6f:83:08:aa:d2:c5:be:30:eb:88:49:b6:a5:da:8f:6b:cf:03:
82:d3:90:4d:67:76:af:bc:75:23:48:c8:af:2a:0a:e5:8a:b1:
84:72:c7:3a:ab:e7:d4:94:f2:d0:c5:92:44:a3:f7:e0:e4:b1:
20:2c:47:ba:52:50:d5:89:69:28:cd:6d:10:8b:3e:6e:36:ef:
6a:ec:85:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:11 2025 by rpki-client