Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier: HkHFxb92qxgZ2PjpYWoJRwJy4fFV6s2IxyFn9wOXLrI=
Subject key identifier: 1B:85:65:AC:CC:E6:E1:36:AA:DC:03:89:C6:65:22:02:64:51:9F:88
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 019A00A33240325D58EF49EF5C2BC2974AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number: 092D
Signing time: Mon 20 Oct 2025 08:01:26 +0000
Manifest this update: Mon 20 Oct 2025 08:01:26 +0000
Manifest next update: Tue 21 Oct 2025 08:01:26 +0000
Files and hashes: 1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: zx+7gXUzBPAUWTKnvmIpi3Bm8rK7uwx09NENwC/EWXU=)
2: rNGuPSJft-Vo3aMmE_0SHixDFYs.roa (hash: RB3m8yl02sm8Z1EZzBwUHBfxuJzfyJEgz7CGmiyldWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:32:40:32:5d:58:ef:49:ef:5c:2b:c2:97:4a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Oct 20 08:01:26 2025 GMT
Not After : Oct 21 08:01:26 2025 GMT
Subject: CN=1b8565accce6e136aadc0389c665220264519f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:4a:d3:22:77:38:22:9d:28:da:27:89:26:
8c:57:db:c9:f7:45:ac:42:f3:72:47:fa:48:a5:e8:
a1:40:6b:1d:dc:1e:bc:f0:6b:4b:54:52:ae:17:8c:
4d:89:cb:9e:b6:0d:3f:e7:6b:47:84:9a:8c:6a:39:
02:8e:c3:64:77:79:cb:23:ee:5e:89:b0:3b:f7:bf:
9d:aa:be:53:2d:6d:c1:98:3c:ba:e1:d1:ab:dd:90:
a5:70:6b:dc:70:79:95:97:ec:5f:ba:6d:d7:87:63:
84:23:72:14:b4:29:f1:0e:43:7a:7b:34:2e:34:fd:
3f:21:f7:71:2b:55:98:af:cf:78:8b:08:9d:5d:21:
cd:58:00:46:b6:d7:fa:9e:4d:72:d5:7f:ad:10:e6:
70:de:1c:0a:82:fd:c1:14:93:87:ef:c0:15:ca:db:
cd:5f:68:04:c4:41:1c:39:d0:8b:69:2d:81:e4:e1:
29:b2:07:b2:73:1f:0f:1e:ca:54:79:4c:99:69:e7:
15:05:5b:97:ca:62:28:4a:ce:5a:bc:36:d5:1d:d5:
c8:4f:ba:18:3f:a2:cd:f8:2d:52:84:5a:3a:de:d6:
a0:af:35:da:c6:13:25:02:bc:10:8d:01:48:6d:48:
49:93:75:5a:ad:17:4e:b0:af:36:46:6a:e5:ac:70:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:65:AC:CC:E6:E1:36:AA:DC:03:89:C6:65:22:02:64:51:9F:88
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7b:e4:8d:af:a3:b3:5a:61:c1:fb:92:58:e4:6b:f3:3f:bb:
86:92:c1:68:62:91:26:5a:f6:3c:01:77:e4:a3:65:8d:28:5c:
19:ff:8a:e4:17:b5:cb:1a:9c:d6:65:79:ac:bf:56:f7:38:6f:
4c:54:a9:02:92:79:15:62:10:36:f3:91:7c:ca:3e:b9:3a:de:
28:91:34:8b:fc:6e:2e:15:54:d7:40:0a:ff:f9:e6:62:1a:60:
f6:33:76:40:59:f6:af:6a:f5:a3:6d:89:a7:47:db:93:10:7f:
0e:09:da:a4:c7:7b:d8:5e:6e:d6:7a:11:e2:6d:d6:4b:1b:a7:
34:0f:e7:96:5e:4c:09:41:10:39:69:43:d9:fe:af:97:9e:f1:
27:33:67:82:1d:18:cc:ee:88:df:fa:d8:a8:15:ed:b8:1f:50:
2b:36:79:6e:94:ca:94:d3:0b:41:39:1b:3b:4a:6e:c0:a1:c7:
66:14:f2:a8:78:6a:5a:e6:8a:f2:16:d9:02:82:97:86:72:69:
2e:8f:41:c7:e5:41:ab:d3:94:3c:16:00:9a:0a:68:04:71:55:
58:b6:78:61:27:4f:89:6b:70:88:2f:b3:41:fe:38:79:22:63:
d1:23:56:c7:3c:1a:71:c9:ec:9f:a5:ca:12:ad:dc:58:03:60:
97:af:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:00:29 2025 by rpki-client