Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File: B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier: toQWYunVTmH51QSCqQOKR0LT0APJsO/UTUBhjKPaSSY=
Subject key identifier: 01:45:DA:93:58:E8:FC:F8:BA:64:10:2D:9E:33:72:C1:8E:7D:08:46
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer: /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial: 0199FB7C7BB5AD8265B04693DAB330AD8A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number: 11E0
Signing time: Sun 19 Oct 2025 08:01:03 +0000
Manifest this update: Sun 19 Oct 2025 08:01:03 +0000
Manifest next update: Mon 20 Oct 2025 08:01:03 +0000
Files and hashes: 1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: Z2IIHH6tbbdEUrHmAgRZ3gvl1Ibm06OQZUsejT3hEzs=)
2: jIFgf1lBNqu6NES_hhmJCRkx6WU.roa (hash: b4SkMZ2qfegq/aAVSnzcin5lHV5SoqB7AozMTZpTRfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7b:b5:ad:82:65:b0:46:93:da:b3:30:ad:8a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Validity
Not Before: Oct 19 08:01:03 2025 GMT
Not After : Oct 20 08:01:03 2025 GMT
Subject: CN=0145da9358e8fcf8ba64102d9e3372c18e7d0846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:6e:e4:16:3f:72:d4:a8:dd:f0:2f:da:ca:
06:dc:a4:24:c0:3b:26:e6:3b:ce:d2:b8:25:42:53:
55:c5:3f:cf:a2:7d:7d:cf:df:fc:68:4f:dd:2f:7e:
00:04:21:8c:04:31:e4:fd:e6:89:87:ee:38:8a:76:
b9:33:de:d9:1a:84:df:b4:7d:1f:c4:1e:ab:67:68:
45:fd:3d:5e:10:b7:c0:1f:ae:72:20:4d:fc:52:b4:
1e:5e:d9:fb:c9:60:c4:12:f6:00:c8:ae:98:86:f9:
86:14:98:2d:2e:e4:61:1a:0a:9f:5b:57:b3:52:15:
85:74:01:59:74:c2:da:47:5a:83:2f:4d:36:67:b3:
99:8e:9f:49:44:10:e0:9a:ab:f6:e1:f6:71:63:bb:
6d:f5:6b:27:17:f2:03:a3:6d:d9:92:fc:c9:05:7f:
22:63:ff:03:92:57:15:26:45:82:35:e2:80:aa:9e:
ac:27:a2:ab:fc:83:d7:14:02:67:f2:60:33:a4:b1:
34:d7:b1:8a:eb:ea:47:d9:65:10:c7:33:60:5c:4a:
f1:f8:46:aa:74:a0:e8:2a:b2:36:18:84:b8:ba:b5:
d0:77:45:15:c6:ae:c5:8f:6d:80:f1:2c:2f:72:19:
12:81:9f:68:00:69:c5:a6:08:18:a8:39:43:94:fa:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:45:DA:93:58:E8:FC:F8:BA:64:10:2D:9E:33:72:C1:8E:7D:08:46
X509v3 Authority Key Identifier:
keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4f:c7:95:46:44:0c:11:93:86:9c:33:ac:46:f4:b6:75:a5:
5a:e5:9a:fe:36:e8:6c:d5:22:23:ae:6f:a0:c0:bd:74:16:c0:
7f:ee:03:a5:f6:07:51:31:50:08:d0:71:64:ae:96:23:7b:ec:
a6:5d:a6:2c:cb:96:6a:cb:c9:b7:88:02:21:d1:5c:d8:6e:14:
e8:a1:1c:0d:33:a9:b8:a4:41:85:9d:c9:7e:13:8a:9e:88:d6:
5f:0d:33:25:e1:26:bf:93:2e:cb:ae:6f:3a:85:0f:b3:c0:ca:
b0:5a:07:4a:0f:13:36:1f:da:7a:19:f8:29:bf:44:67:ef:20:
5a:1a:52:30:c2:2c:93:f9:b1:03:19:f5:5e:f6:42:1c:d5:8f:
9c:18:e4:d1:a8:47:ef:99:74:64:bb:b1:dc:4d:ef:31:e4:b9:
d8:80:b9:e4:e9:4b:65:fe:3b:d5:ed:e2:3a:42:d7:7b:16:af:
fa:5f:81:cc:92:88:b0:09:c3:75:0d:e5:9f:27:5e:30:3a:92:
84:b3:25:a9:a5:06:e1:d8:1a:b7:ac:1c:2a:79:b5:9a:e0:79:
7a:93:84:58:24:c3:14:1c:e0:6c:0b:b1:16:44:ee:87:85:97:
bf:25:ee:04:99:eb:dc:fd:b7:41:d4:0f:34:33:e0:e8:c6:cb:
70:2f:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:52 2025 by rpki-client