Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: JzO1czg9GtKVaQPHauzO8T+kUIzzSFRtRAVTodhG9i0=
Subject key identifier: 41:05:30:00:C3:CB:5F:C1:9D:7C:B8:4F:39:2A:02:2D:AC:F3:52:0C
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 0199FEEB92BA95AF69B3F1358E1F448F2A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 00:01:15 +0000
Manifest this update: Mon 20 Oct 2025 00:01:15 +0000
Manifest next update: Tue 21 Oct 2025 00:01:15 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: XXldJnlMabPdfcemurRFkcHhwDMLL93CRM8qZ76hbLw=)
2: I-qnYe3pCJJC6GLKlhRXNSOnj7Q.roa (hash: MvvvcuaQB3Ptunhg27MnEt55o6So5bq1V197PASnWPY=)
3: mMhmcSnBtPYU48zDanAOHPsakbk.roa (hash: Q7SwxYVQV3nbpcnCiOpdRYrjGyoIJC6VBvUMsqX3OXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:92:ba:95:af:69:b3:f1:35:8e:1f:44:8f:2a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Oct 20 00:01:15 2025 GMT
Not After : Oct 21 00:01:15 2025 GMT
Subject: CN=41053000c3cb5fc19d7cb84f392a022dacf3520c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:bc:47:48:68:37:ea:9c:39:46:c9:40:01:
cd:1d:20:92:a2:2a:f9:7f:02:5b:fe:5f:19:bf:12:
31:8b:ff:21:46:89:d6:2a:3e:ff:c9:cf:9a:98:cb:
8b:1d:bd:37:d3:34:5f:6a:ca:70:f1:e3:fe:28:ca:
ef:64:de:f8:ee:ea:6d:97:2c:13:9e:10:d1:21:af:
99:b5:25:21:bc:ea:b5:2e:f0:9f:08:2c:33:34:0c:
c1:a5:a4:d9:ac:ad:2c:c6:9d:be:65:ab:8c:c4:30:
cb:15:17:92:9f:88:fc:64:77:bc:2d:11:b1:96:b1:
0c:e9:8c:fa:15:14:68:93:ff:fc:0b:6f:69:1b:32:
47:3a:12:43:21:be:1d:98:1d:05:fe:c3:56:9a:23:
ba:1a:77:23:5e:50:63:62:9c:f8:1e:30:60:60:9a:
12:4a:e7:0c:99:ac:0e:72:e1:e8:f1:75:85:6b:f4:
f5:16:05:9f:18:14:10:51:f7:bf:45:ec:ae:4c:dc:
11:b3:ef:f6:45:a0:3d:1e:b8:0b:ca:3f:ef:f6:45:
e7:a1:1e:b2:40:c1:60:ec:67:4b:88:ec:5e:58:29:
ee:9c:17:07:dc:b6:e6:52:7f:bb:96:8c:86:ff:b7:
13:cb:4d:0b:aa:9e:d1:63:47:4f:ea:eb:c6:cc:20:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:05:30:00:C3:CB:5F:C1:9D:7C:B8:4F:39:2A:02:2D:AC:F3:52:0C
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:44:08:0b:78:9d:99:62:d6:c2:92:32:fd:86:54:54:da:82:
14:f9:0b:e4:3d:7e:cc:be:8e:bd:c2:4e:05:4f:80:f1:92:78:
a3:f8:9b:7a:42:61:72:ac:8f:52:2e:71:2d:e6:4b:23:e4:15:
a9:c5:0e:22:4e:f4:24:84:52:92:e5:81:d8:20:77:8d:ce:ec:
58:f4:08:19:0e:d5:44:a2:2e:f6:c3:45:7a:03:3f:e3:01:5e:
cb:fb:2b:b6:fb:7b:4f:96:30:19:a7:16:0d:7b:a0:f4:61:33:
23:5b:17:60:ad:c3:f0:68:58:7d:55:dd:e6:a4:ae:1e:4d:c3:
06:10:a8:af:90:32:b6:85:aa:96:47:de:9c:ed:02:83:a4:0a:
79:54:db:03:b4:4a:1f:9c:19:2a:84:22:d7:77:5c:69:46:b8:
88:d1:64:25:82:86:ab:bf:b4:2a:41:9d:4e:25:da:d2:06:e2:
f2:84:8b:0f:0a:5c:09:1c:a3:22:08:9a:0c:9f:5a:32:04:d1:
94:18:d9:25:b8:80:c6:bf:1e:7e:df:65:10:60:fc:9a:43:a9:
8a:db:e8:de:8b:44:b0:87:a9:ff:35:2d:00:ab:d9:e8:a2:44:
42:84:7b:11:73:5e:96:9a:0f:90:45:6d:89:f1:4f:0f:d8:54:
ee:f4:8f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:45:14 2025 by rpki-client