Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: xoEPNs5n1zmPOmTup3oMYb3sF6VO9C++gOGGt0L/FTM=
Subject key identifier: 83:CB:E7:29:98:5E:2D:6B:A2:10:D4:8B:C2:2A:E6:4A:4F:28:24:63
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 0199FCFD6BF43B2BB2A211ACA51271CC1752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 09DC
Signing time: Sun 19 Oct 2025 15:01:30 +0000
Manifest this update: Sun 19 Oct 2025 15:01:30 +0000
Manifest next update: Mon 20 Oct 2025 15:01:30 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: vdX0x6PdXOUTEFWKukp+0XUDN3+JmIDqvKsivn9Xkws=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6b:f4:3b:2b:b2:a2:11:ac:a5:12:71:cc:17:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Oct 19 15:01:30 2025 GMT
Not After : Oct 20 15:01:30 2025 GMT
Subject: CN=83cbe729985e2d6ba210d48bc22ae64a4f282463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:23:72:c7:8d:2c:f5:ce:96:fe:07:d7:a6:
08:1d:af:ea:f6:25:96:7d:66:e1:e0:d7:93:35:e7:
30:73:b4:5b:7e:c5:1f:36:a7:eb:51:73:c8:b7:c9:
dd:ce:ea:9a:b5:46:1b:64:cf:c7:15:08:ac:31:2c:
2e:75:f2:d4:a3:39:1c:56:eb:c8:8a:f5:6c:c5:25:
ac:ff:8f:ce:99:e7:21:44:91:08:0a:63:42:bc:23:
36:13:78:7f:1a:b0:ff:8a:b4:f8:3a:8f:3f:ad:59:
26:2c:0f:42:00:8d:b8:98:ae:15:3d:45:64:dd:6b:
e7:e8:a7:47:62:59:27:f8:f5:84:cd:ed:b6:59:13:
e3:a2:50:ad:57:de:6c:a1:65:56:97:2c:23:48:c0:
80:18:b7:73:6d:13:90:89:17:7e:83:52:36:c6:b2:
bc:0d:ef:0e:e0:40:2e:ca:37:dc:7d:1d:ff:45:b9:
7a:84:b1:42:d5:41:c4:17:cb:31:2a:bf:90:d7:7e:
da:8a:a5:a6:ca:7d:3a:bf:0f:e9:69:5c:50:08:98:
2b:d2:87:b1:ac:ef:09:95:43:45:96:57:f2:6e:10:
52:43:e9:1d:5a:8d:df:e1:24:28:d8:f0:1f:4c:d0:
26:ac:bf:91:3c:e4:f1:c2:1b:15:84:3e:dd:89:23:
f1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CB:E7:29:98:5E:2D:6B:A2:10:D4:8B:C2:2A:E6:4A:4F:28:24:63
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:76:15:6c:f8:b1:3f:71:82:84:0e:d0:14:d4:68:06:f0:87:
f4:ca:8c:1d:1d:9f:24:9e:1d:de:d1:c9:82:d7:6b:d0:d7:77:
a5:2b:8f:8b:75:62:a1:bf:11:57:86:4a:4f:fe:ee:1e:2e:3e:
8d:07:26:73:4c:5e:1c:92:c4:e3:39:98:4c:e6:39:25:c7:8b:
4e:11:e9:b5:6c:a4:1d:81:05:ad:19:9b:f1:02:ae:c6:56:cb:
68:e9:e6:41:27:0e:2f:81:c7:e9:c0:ac:9d:98:99:27:d6:38:
83:53:6d:f8:74:11:12:25:02:cc:bb:89:9f:21:3e:73:63:4f:
d5:24:9e:4c:a5:54:5d:7c:07:74:3a:da:63:e7:6e:06:a0:05:
0c:6c:c3:db:96:d0:05:b3:13:98:00:4e:e6:00:33:18:53:f3:
f9:b8:b6:91:99:2d:02:c3:ec:a2:21:8c:07:15:a4:b7:34:b8:
58:66:9f:14:dc:22:ba:f6:59:fd:a7:68:ff:32:8e:7a:bb:cd:
b0:a9:6e:f3:cc:ad:11:e8:94:0d:1a:0d:94:1c:ee:fa:3b:90:
d6:2f:13:ff:6e:73:41:10:2e:d7:0a:80:99:c7:f3:81:ee:96:
9a:1a:28:84:d0:fc:7d:e8:70:3b:80:08:b5:d0:d8:3b:64:42:
1d:1d:4a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:48 2025 by rpki-client