Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
File: H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json)
Hash identifier: YfQUhBkxEaCf4BOF8RWm3CgM/mDAaTGCFw8G/Cq+FvQ=
Subject key identifier: 1C:F4:EF:33:EA:3A:AA:2C:E1:50:06:9F:FC:5B:3C:C4:4D:C5:2A:7B
Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Certificate serial: 0199FC8F906B6623DD764503EB49720153FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
Manifest number: 052D
Signing time: Sun 19 Oct 2025 13:01:30 +0000
Manifest this update: Sun 19 Oct 2025 13:01:30 +0000
Manifest next update: Mon 20 Oct 2025 13:01:30 +0000
Files and hashes: 1: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: NhEDOkMijDSNzRAKMcYouSK9avurV70J7lSLDuC5tSY=)
2: StsIBWXPkUmDPSa1M3nyv0UDUR4.roa (hash: rqGYqeTGV9tyOvnudhslVeQEEchE0GwN6rysMNZqs1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:90:6b:66:23:dd:76:45:03:eb:49:72:01:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Validity
Not Before: Oct 19 13:01:30 2025 GMT
Not After : Oct 20 13:01:30 2025 GMT
Subject: CN=1cf4ef33ea3aaa2ce150069ffc5b3cc44dc52a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:ae:24:b5:c2:d8:92:11:6f:67:96:fb:8b:
8c:30:fb:f7:a5:54:49:9d:d0:02:b1:cc:36:af:de:
f4:a6:5f:03:b4:16:7e:dc:d6:93:ec:7d:db:64:8d:
58:ad:92:94:4d:4c:d3:63:53:19:ff:38:44:13:b0:
81:7e:f3:cf:36:b3:53:e4:3e:75:fc:4d:cb:1f:a4:
f6:c0:cd:2f:c6:46:dc:61:7b:5d:90:32:0e:0c:30:
8c:bb:81:10:cf:a6:7b:0a:15:0d:9e:2c:da:4c:c5:
b6:5a:f0:98:b1:cd:31:0c:6a:57:da:da:4f:cb:5a:
db:e1:6d:56:02:68:5a:02:60:8f:96:d4:cc:ad:42:
6e:34:c6:59:55:56:18:b9:53:bc:83:ee:4d:76:21:
c9:39:23:c3:52:e0:57:a5:ad:26:e7:e9:5f:f9:de:
e9:55:e3:7c:26:13:4c:f6:ac:f4:2b:a7:2c:a3:21:
b3:f5:56:2c:f4:61:94:09:16:8d:32:70:ab:93:05:
b9:bf:07:3b:9d:22:dd:bf:20:28:7d:bb:e0:2f:95:
e6:a8:16:34:75:49:08:11:42:0b:6d:ff:19:57:ac:
d5:a6:91:79:f0:e3:9a:46:b4:0f:7e:fc:b7:f5:dc:
c2:1b:c6:bd:80:9d:2c:2d:07:e5:c2:0f:b4:2f:dd:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F4:EF:33:EA:3A:AA:2C:E1:50:06:9F:FC:5B:3C:C4:4D:C5:2A:7B
X509v3 Authority Key Identifier:
keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a8:d6:f2:ea:1e:5a:b3:3e:95:5c:da:6f:51:5e:66:61:f0:
fc:77:4d:22:4e:a9:f1:2d:39:78:4f:82:bb:34:fd:ac:d0:d6:
70:ae:81:b5:18:42:66:14:82:d4:23:b2:4a:71:69:a3:b8:09:
0a:75:29:4a:fc:ea:de:61:ce:68:30:c8:af:af:df:74:35:74:
fc:88:e8:fd:2b:83:56:6e:17:22:68:b2:23:a7:34:7f:30:00:
87:4b:ea:4e:7b:1b:25:b5:11:44:58:5f:b7:ca:a2:d2:fd:84:
09:f8:fb:04:53:27:6a:0c:45:38:b8:c1:4c:8a:0d:54:cd:aa:
1c:45:ee:3c:bb:9b:f8:c3:dc:a1:86:fd:65:f7:1c:87:81:f3:
42:5f:58:bd:19:45:11:03:b8:64:4a:8e:c9:ec:8b:1c:2f:58:
46:d2:f2:47:dc:ea:91:89:c7:97:21:58:16:6c:2c:54:8b:e3:
69:1d:c2:81:04:c5:21:dc:2a:84:51:16:fe:37:bf:2d:38:3b:
44:0b:61:24:d2:d8:49:8c:6f:0d:8b:10:7b:d5:af:61:b7:80:
b3:d6:0e:b8:32:0b:c6:06:67:24:9b:49:25:e8:4c:7c:6a:91:
05:9d:17:07:b8:74:90:35:3d:92:39:de:9f:58:06:d5:08:fd:
e8:09:6e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:50 2025 by rpki-client