Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
File: H_Umh1LLtSS8_ktaSXb_D4XTia8.mft (raw, json)
Hash identifier: 1r6YEPeL/aRyvloPaHf/hC4y+WzCZVu6CJR4qKAFLA8=
Subject key identifier: E8:6B:7E:C7:A6:50:08:5F:E5:21:3B:AC:15:9E:F6:EE:4E:BB:0A:3F
Authority key identifier: 1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
Certificate issuer: /CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
Certificate serial: 0199FBEC3B92ED7E8C94581E656F8A2C19C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
Manifest number: 0AD0
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: 9pQi_NMMFUj3irIeg0-DmdkDCbk.roa (hash: PFd36o1XR8n7Qanm5GG5TpwQ2+VBH8Rn7+qS0Um/8ws=)
2: H_Umh1LLtSS8_ktaSXb_D4XTia8.crl (hash: u2W24vEdmt57uD/efQC70UShPHwAN+veCqVaMrjKWC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3b:92:ed:7e:8c:94:58:1e:65:6f:8a:2c:19:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=e86b7ec7a650085fe5213bac159ef6ee4ebb0a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:c6:ca:22:93:2b:28:44:ba:5a:28:f6:f2:
e2:e7:a5:ab:4b:39:6a:bd:f0:da:97:13:77:09:f5:
43:55:07:05:53:d2:71:c8:12:6b:92:2e:f7:47:fc:
69:c4:31:f6:df:da:b0:74:7f:90:b7:3d:e2:80:c9:
13:f7:13:7f:ac:8e:11:eb:92:e1:79:5e:30:ab:5c:
31:73:73:9e:af:13:d7:93:85:63:57:99:40:05:ea:
05:bb:16:51:23:86:4f:dc:99:52:6b:f0:69:d4:f9:
ba:0f:24:8c:4a:0c:92:69:e7:1e:a0:3b:ba:13:46:
b0:d2:a9:b7:f1:33:a8:67:ed:43:7c:c6:79:97:bc:
6e:3b:60:d7:ce:b2:06:54:9f:f0:77:18:53:2d:ce:
50:d2:a2:83:ea:35:b3:87:3f:22:27:ae:50:8b:90:
f2:18:53:7e:f0:68:53:7a:90:0b:9f:d6:52:9f:a7:
a5:1c:01:c5:bb:90:6a:20:44:aa:f9:29:7d:7c:57:
42:2b:fb:c7:50:63:44:f7:79:f6:92:ed:c2:8d:30:
57:77:52:2a:68:35:bc:c0:70:08:b6:4f:c2:b3:88:
a5:54:f8:02:c2:59:7d:22:22:75:d3:29:43:06:7d:
fc:ff:e0:46:9e:5b:a7:de:6a:6b:37:76:9e:41:ce:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6B:7E:C7:A6:50:08:5F:E5:21:3B:AC:15:9E:F6:EE:4E:BB:0A:3F
X509v3 Authority Key Identifier:
keyid:1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3c:e7:5a:40:81:1a:c0:d6:05:aa:c7:46:c9:c0:1c:ce:d2:
de:01:15:c8:6e:db:23:9b:17:26:84:c2:58:76:a3:ac:86:fb:
4f:61:2e:5c:16:c8:e4:6b:b7:90:7b:56:d5:d8:e6:59:11:be:
5a:11:08:82:7d:97:82:0b:0a:91:1f:10:2f:91:c8:d7:07:e6:
2c:4f:e7:1f:f6:0d:d9:bb:48:0f:75:0b:1d:6e:38:f8:9a:f5:
55:8a:a1:e3:5f:32:bc:99:49:e1:4e:96:b2:aa:3a:9d:90:f0:
bc:e9:87:68:1d:8d:f1:65:fb:da:6b:eb:b4:04:eb:eb:c4:71:
dd:a3:a4:3b:4f:95:bd:bb:da:fa:88:72:8c:94:61:93:b4:73:
83:57:7e:f2:2a:37:30:65:ab:b0:7b:07:4b:95:d8:65:68:b8:
19:61:ad:11:c0:d5:68:2e:a4:52:a4:69:92:b9:e1:ef:05:a2:
49:90:91:ca:d8:42:ce:a5:0f:81:88:e5:ae:ff:10:d2:c0:ca:
78:2f:c6:e5:c4:9f:70:b9:1f:bf:23:02:62:b6:25:8f:bf:f2:
5c:16:d4:f4:d4:df:09:79:2d:34:ba:c2:89:3c:11:30:4d:a8:
f9:ea:d9:03:3a:b3:a6:e9:d9:7a:29:27:88:6f:fd:2d:9f:17:
86:35:aa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:35:16 2025 by rpki-client