Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier: hWqDa6lnebrs+K5h3gzKH+FL+TNcGrHETcip1OAmSwA=
Subject key identifier: 6D:47:5C:52:95:4B:2D:33:CD:CB:8A:01:D5:B3:F4:F2:C8:F8:A3:7D
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial: 0199FAA12347CE1E33F4E674BB2FE10F499E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number: 07
Signing time: Sun 19 Oct 2025 04:01:28 +0000
Manifest this update: Sun 19 Oct 2025 04:01:28 +0000
Manifest next update: Mon 20 Oct 2025 04:01:28 +0000
Files and hashes: 1: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: 510mVvfpBe0/GHD/PxcKnOHiyImBiI+d/0+7vzpmAV4=)
2: Ru_LP_twvYXVFkKuCpXxa_DASTU.roa (hash: TtTvcvdwb+ixxoHN5Y5PknKt4qH43MaPLrBOSoUuNtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:23:47:ce:1e:33:f4:e6:74:bb:2f:e1:0f:49:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Validity
Not Before: Oct 19 04:01:28 2025 GMT
Not After : Oct 20 04:01:28 2025 GMT
Subject: CN=6d475c52954b2d33cdcb8a01d5b3f4f2c8f8a37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:b9:04:26:d7:7a:85:5f:1e:a5:d0:3e:dc:
cd:1e:6f:e2:5b:dc:58:3b:bb:a1:aa:a4:d8:f2:ee:
e9:c4:3a:42:32:e2:c6:57:3b:f5:03:cf:6a:a3:7b:
d7:9c:81:e4:2d:fe:92:ba:8c:72:ad:88:38:9f:36:
6f:82:71:82:57:c6:9a:56:bf:c5:4b:bb:33:d8:c4:
32:cf:b1:cc:38:83:4a:46:3e:23:4e:f0:20:7d:1f:
ed:e7:45:cf:e9:f3:e7:34:b4:c6:67:da:8c:58:73:
d9:2f:6e:fc:50:d3:4f:68:19:a0:8d:79:df:eb:cd:
36:c9:ac:e1:6d:7d:62:b6:99:3d:c6:60:84:59:a7:
70:c3:11:62:42:2c:5a:ca:e6:d8:19:91:c6:b5:3e:
65:70:05:a3:39:b9:5b:cb:36:57:54:a2:d7:14:c2:
da:f5:3e:29:d5:ee:6d:68:f2:68:6c:03:5f:da:e5:
d4:75:96:16:45:54:35:58:26:a2:bc:57:cc:4c:60:
9e:02:56:9a:43:4f:8d:de:1e:a2:b0:6b:cc:1e:a6:
68:26:1e:e2:f3:ee:3d:c6:09:ea:86:a2:0d:41:42:
67:79:15:60:b0:61:b3:65:68:7f:58:ab:62:3d:5a:
e6:09:3e:30:23:f6:1c:70:4e:88:8d:d2:65:47:88:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:47:5C:52:95:4B:2D:33:CD:CB:8A:01:D5:B3:F4:F2:C8:F8:A3:7D
X509v3 Authority Key Identifier:
keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:34:1b:a5:f2:29:86:e4:4d:5d:dd:c0:73:97:f6:1b:17:ca:
55:c3:8f:98:a0:a2:b4:07:5b:8d:a7:4a:44:ec:d2:0a:db:aa:
6d:57:54:ac:3d:c5:34:64:95:bd:74:e3:a2:68:04:ce:e8:62:
e4:5b:b5:a6:69:74:3f:57:d8:f7:27:5e:0f:29:a1:86:31:07:
88:04:5a:c0:22:4c:46:4f:5a:bd:24:39:62:da:c9:28:f6:1a:
46:35:3f:d7:f2:77:5e:b2:8a:80:f4:7b:ff:5f:7c:ad:7f:cb:
c3:0b:70:a3:1e:98:e6:ea:23:e5:37:13:04:02:33:4e:f3:e8:
9d:8b:18:22:d9:c8:b5:d1:cd:2d:55:bf:5f:98:03:de:8c:b2:
d2:55:48:c6:62:d6:c0:ec:ea:01:1f:b5:84:41:41:4f:c4:a7:
f7:ad:b4:be:36:e2:3d:c6:cd:be:f5:bb:c0:c2:2a:c7:14:12:
70:1f:14:67:54:25:24:d2:47:2c:36:c3:47:ba:e7:67:32:12:
66:9d:be:80:73:a7:3f:82:64:08:e2:d5:ef:76:12:da:57:fb:
13:5e:26:88:33:43:24:f2:8d:0d:20:88:53:34:a5:95:65:85:
54:ab:91:71:e5:57:6b:01:21:de:d7:10:a9:bd:38:03:5a:05:
41:0b:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:09 2025 by rpki-client