Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier: 9WLW2+D4mbrAwkJM5FscJkQcvBVL1qd8vD89kzVvXX0=
Subject key identifier: 1A:BD:9A:42:40:30:A4:D7:F9:93:37:F9:AD:05:64:83:49:07:56:EB
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 0199FC8F57004CEC1D7AE8872E1A3D57AE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number: 05CA
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: 1p8FJy7DvCBcuvfFQSCvrUw03KGvk+Oyn+wP8Xv3niE=)
2: VgX2YIG6L_L8c5HWMPiqq1n_S1o.roa (hash: BRlNIKeJrtOTaA3OLFtig45D6GjYy7gWY1CCeaiI+5U=)
3: sDqZRTbZvAQQTn6KJoc_Vm9WzY4.roa (hash: iL19VOkv+2+1Ma+y58+a49a0z0arTyOufs85rap+38w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:57:00:4c:ec:1d:7a:e8:87:2e:1a:3d:57:ae:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=1abd9a424030a4d7f99337f9ad056483490756eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:54:97:83:70:a6:e9:f4:02:a4:7f:71:49:99:
87:e0:9e:ea:18:21:8e:18:d1:bc:f0:a0:87:8c:03:
1f:8e:96:67:09:6c:9d:1a:d0:4c:2f:ba:ac:63:f4:
c1:97:e4:5d:72:04:a9:b8:27:c0:04:b5:d7:fc:80:
ae:99:ab:9d:ed:e2:19:98:b2:60:0d:01:47:fa:f8:
e5:5a:39:6c:87:ea:bb:bc:ca:53:fa:45:d2:e7:36:
25:06:a5:f5:77:11:78:27:bd:26:35:c6:37:d9:8d:
33:c7:af:cc:70:37:5d:8e:01:29:26:a4:cc:45:9d:
db:d5:cc:0f:f4:0d:09:b6:14:85:59:a8:95:5b:65:
29:4b:83:32:2f:37:3a:4a:1e:9f:1f:c0:7b:53:f2:
e5:65:6d:2d:7c:1d:57:0d:d4:08:82:c1:e5:44:dc:
91:9f:a9:5a:62:eb:2f:6f:a7:ed:e4:38:2b:bb:a2:
52:f0:6e:36:97:5f:18:88:04:ce:3c:80:c7:e0:ff:
39:ea:f9:51:35:26:16:f7:c3:0e:93:fd:5e:ad:55:
45:47:05:ae:43:a3:30:1c:53:de:d7:d6:e7:f4:45:
e0:b9:48:f4:1a:d4:2c:b9:fc:13:39:4d:d1:44:f0:
74:cc:be:2e:70:b3:30:4c:c1:9e:f3:09:b7:88:8d:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BD:9A:42:40:30:A4:D7:F9:93:37:F9:AD:05:64:83:49:07:56:EB
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8f:d3:3f:5b:26:53:dc:9c:1c:a6:d0:49:e5:14:ce:c2:49:
dc:eb:33:a5:b6:a9:82:0a:c8:35:9f:8a:6b:de:4a:90:c7:e3:
07:85:06:89:b9:77:ba:b0:09:02:39:ff:61:6f:b3:58:cf:8f:
87:9c:eb:c3:ff:f3:5c:95:7e:4b:58:71:00:2c:7a:55:89:06:
c4:a0:ee:62:19:b5:90:80:7d:f7:4e:b9:5d:5e:40:35:3b:01:
cd:78:ee:45:6f:99:b9:4d:d2:2b:01:06:18:c6:aa:bf:48:b4:
85:36:ed:24:68:c3:3a:c1:13:f3:d6:3c:41:be:0e:f2:8c:10:
d6:97:67:d1:c0:33:d2:d5:78:9c:5d:fa:f0:59:84:47:9b:a3:
e2:db:04:43:41:f0:e6:ba:87:14:e5:3a:98:22:02:70:c3:11:
0a:51:7d:2a:00:76:a4:18:19:9a:e7:dd:a6:01:8a:2b:5c:fb:
f6:92:29:5a:cc:dd:eb:0c:86:3b:07:28:e8:c6:9c:53:89:e6:
42:79:61:61:58:f1:e5:7a:c0:a3:fa:74:56:78:e6:c1:35:dc:
4f:f4:a1:25:5c:ed:fb:fb:75:5d:76:fb:1f:f0:10:7f:3a:08:
a5:21:d5:be:23:bf:ec:ad:f7:e3:69:88:aa:29:4d:7f:b4:06:
12:46:7e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:06 2025 by rpki-client