Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: 5KLPSasfnz6cbBhMN2nNvHaSo4+RXxk3QUmyfjKpVLw=
Subject key identifier: 27:DA:9B:90:53:68:46:7E:F1:D8:98:12:DF:5B:43:ED:40:76:44:C1
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 019A01B645ABC91407888671065909361D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 1059
Signing time: Mon 20 Oct 2025 13:01:53 +0000
Manifest this update: Mon 20 Oct 2025 13:01:53 +0000
Manifest next update: Tue 21 Oct 2025 13:01:53 +0000
Files and hashes: 1: TwlfNDSczGUl34rteJgSuHXTO94.roa (hash: gBwK3ZQY+snmvfWIA0VgAvr4/MBSK9FpiTLSXZrUgpg=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: WqUO+9Prq/S7GfMIXsqjh0kIWYsmw+JESBV0NpETU2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:45:ab:c9:14:07:88:86:71:06:59:09:36:1d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Oct 20 13:01:53 2025 GMT
Not After : Oct 21 13:01:53 2025 GMT
Subject: CN=27da9b905368467ef1d89812df5b43ed407644c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:3c:fd:1c:88:94:91:8f:b3:4b:73:51:46:
2e:20:90:b5:bf:d6:3d:6e:e7:10:c2:87:6b:12:77:
8a:f7:43:25:91:74:37:3c:89:d4:ec:3c:a7:bc:64:
21:f0:9b:42:7a:09:3b:f6:32:bc:9e:59:68:4f:00:
b1:21:2b:08:f8:51:a8:91:70:40:a2:4b:fd:84:fe:
13:b7:5c:41:40:a8:2e:d6:4b:d9:c1:0a:3b:3e:b8:
fb:f6:d7:a2:1a:89:71:49:ae:be:72:cb:6f:e7:e4:
d5:26:e2:0b:39:b6:54:fb:08:71:ee:93:ce:75:18:
c6:27:83:10:cb:80:d0:79:da:37:83:df:10:a5:45:
6b:0a:49:32:3a:48:53:b3:f7:b3:5d:16:cd:46:65:
ff:6c:b4:51:42:51:aa:d0:0c:80:44:c8:15:8b:21:
ff:a5:f1:ea:b1:4b:a8:09:8b:73:c9:69:14:63:1e:
2d:9f:cc:2b:84:07:b3:b4:22:4d:c0:5b:50:64:20:
85:99:19:1b:95:80:1f:0d:76:42:09:31:e8:b9:12:
63:a9:97:07:33:f3:ed:52:54:02:b8:40:04:9c:a8:
15:60:99:4d:b5:85:4c:12:25:29:29:ec:c0:02:7a:
6a:fe:21:35:de:43:34:9e:f5:9f:77:8f:92:55:02:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DA:9B:90:53:68:46:7E:F1:D8:98:12:DF:5B:43:ED:40:76:44:C1
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1a:d5:2f:21:27:fd:ec:5c:f8:42:73:fa:de:3f:fb:e8:e8:
d5:d8:bd:a0:aa:d6:36:c7:4c:8e:ec:f6:81:7a:b5:00:a5:e3:
44:aa:60:f3:17:12:76:ef:e2:a1:b6:f0:03:53:b6:e4:08:d4:
84:3a:4f:5a:bd:5d:08:49:ef:d2:58:bd:73:a1:2c:e9:b6:dc:
70:d8:83:4b:9b:fd:eb:50:76:a9:05:b4:4c:0c:ef:29:31:ed:
01:69:f9:d7:66:12:5c:8a:9a:59:62:2a:9b:fd:02:11:13:73:
17:8e:c5:a7:eb:2e:be:69:5d:7c:3b:f8:4b:52:8d:19:5b:44:
49:f3:c7:94:10:49:79:44:a5:09:ab:68:c0:f8:39:c5:de:3e:
f4:8c:01:09:f5:85:36:49:c1:7e:41:0c:eb:e9:df:2b:9d:57:
5f:fc:6c:f5:2c:b9:a9:a5:58:53:98:ac:fd:a0:de:31:77:03:
e0:3e:19:52:d3:b8:30:d8:98:e8:9d:cf:ca:78:74:16:e8:27:
d6:06:31:0c:34:36:c0:ca:0b:dc:7c:be:39:ea:23:92:aa:ae:
11:2a:81:44:63:29:19:c3:02:26:8e:37:93:30:c7:66:90:ac:
50:15:ae:32:d1:2c:b5:a8:77:0e:98:8e:01:dd:c6:a2:41:54:
6a:b6:72:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:42 2025 by rpki-client