Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier: XJVDJB2D82sy0gxV0C4d9lsgTmIRzsgSxE9ZOSSoyvU=
Subject key identifier: 37:B0:F7:EC:2D:6D:57:66:79:A7:05:38:C2:35:17:4F:56:D5:A5:A8
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 0199FA6A452E255A87BF4A3AA8D6DC431001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 03:01:32 +0000
Manifest this update: Sun 19 Oct 2025 03:01:32 +0000
Manifest next update: Mon 20 Oct 2025 03:01:32 +0000
Files and hashes: 1: 1-cISFCJjrOXOH13uOfejSN0t07U.roa (hash: CsZ+l20+WvDp7ZAvLuoQUu3eyz/VH/hBFp+Sltnj4u8=)
2: Cz4X9MPRs8p_ImW4tUel1Ly3B_A.roa (hash: mCOTukj35b5NKqry7uD/1PQ8/wQManDEmCJ3x3rHtng=)
3: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: uQM8Sej7p0XmyLXuIxSOa6HI1QGmgNe75pIOyTMveb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:45:2e:25:5a:87:bf:4a:3a:a8:d6:dc:43:10:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Oct 19 03:01:32 2025 GMT
Not After : Oct 20 03:01:32 2025 GMT
Subject: CN=37b0f7ec2d6d576679a70538c235174f56d5a5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bc:cf:f0:7b:cc:89:b6:96:3f:77:60:4c:23:
38:59:7f:b4:85:21:a3:62:de:a3:4e:f5:6b:a9:e5:
bb:95:02:56:ea:ab:dc:71:0e:d4:e2:56:e0:9f:0f:
8b:c0:e6:d8:64:e1:2d:66:07:f9:6b:ff:83:22:89:
c2:38:f9:38:54:80:4f:17:31:38:33:1e:5b:27:27:
8d:3a:cb:4f:95:43:3a:09:18:bf:5e:d3:d4:a2:3b:
e1:1e:75:f6:0e:09:89:e9:71:cf:34:c3:8e:ce:ca:
87:ce:c6:1f:7c:0f:2b:27:a3:b3:a6:fa:b3:4f:b5:
45:80:ca:ae:08:92:0d:a4:b6:e8:ca:b6:c5:ea:d1:
04:83:50:e6:69:30:84:f3:97:c8:e9:0d:75:5c:b9:
df:05:a2:2f:fc:49:bc:4f:17:31:10:e0:89:e5:99:
66:46:5c:35:f5:fd:5f:30:de:a1:76:b1:cb:d7:41:
b0:a8:0e:e9:83:ed:d4:5f:ff:ca:74:ef:5d:96:70:
b5:91:db:2e:9c:19:8d:99:91:53:67:0f:bd:9b:9c:
1c:75:06:b0:a8:32:36:00:3c:d3:a6:c9:cb:3a:56:
46:4d:7a:15:98:f2:c6:17:3b:fc:9f:1a:69:92:43:
12:c5:34:28:62:de:af:91:6a:87:bf:3a:78:3c:ca:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B0:F7:EC:2D:6D:57:66:79:A7:05:38:C2:35:17:4F:56:D5:A5:A8
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cd:ab:b5:07:f4:34:e3:a7:50:95:af:9a:d0:63:97:56:98:
4b:7e:da:86:b4:13:f2:8d:55:84:db:dc:eb:ee:85:a9:b7:e0:
54:29:b3:30:07:a8:00:47:d2:79:c2:50:d6:b3:2e:d0:c8:7b:
89:a4:e6:97:c1:30:93:2d:ff:54:5d:6c:ae:4a:f0:79:49:6f:
a8:b1:b5:59:6f:5d:a8:cd:4e:74:7a:99:a9:b7:e7:9f:f4:1d:
5c:98:db:54:f3:11:10:af:00:91:bb:d2:6a:0a:f0:37:a8:9e:
85:39:5f:22:7c:9a:d0:6f:34:a9:1d:90:3e:59:89:a1:e8:aa:
e1:aa:c3:d8:b9:4d:46:67:3f:e1:f7:43:fa:42:53:1a:5d:ac:
ae:d5:8b:df:16:3d:bc:a8:8d:72:a9:99:30:15:af:8c:e5:9a:
26:d5:3b:d1:a5:3b:dd:4d:62:f3:7f:8f:0a:0d:a0:38:39:f4:
79:9b:3b:c4:c1:42:d3:8c:52:5e:7c:48:2c:9b:eb:91:08:e7:
25:e2:e7:c2:80:1d:5d:e1:c5:04:ef:c6:4d:4e:da:4c:8b:00:
dd:83:e5:a3:e4:6d:d3:88:eb:61:43:63:19:22:cf:24:35:08:
48:84:48:ef:72:3c:30:33:3b:9c:9e:77:e3:d2:c6:ef:19:93:
da:a8:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:24 2025 by rpki-client