Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: PXGIeorZdE27K+Vt6hdLCKATQJFJ+r/9pMBD4mdHL0k=
Subject key identifier: CF:73:7F:1A:52:EA:9D:72:76:FC:EF:E6:6C:AD:51:EB:D0:DA:A8:02
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 0199FC8F79ED06F3AB06380DF73CB76394DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 0B19
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: XT1/lYSuTB5CsbjkIO2t+qqrY5OY4emtw0pfiPWs9SU=)
2: VUf_eExQI714X29LkFd3HNL5qOc.roa (hash: qlXkcSYlvviPgCfxmngZKQMwauhcQqJeFXxSq0WXurQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:79:ed:06:f3:ab:06:38:0d:f7:3c:b7:63:94:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=cf737f1a52ea9d7276fcefe66cad51ebd0daa802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:bc:38:15:29:9d:45:e9:fe:f1:e8:74:d8:
91:be:d8:02:a7:98:a2:9d:59:1b:14:cf:44:b5:bd:
5c:30:f4:2a:04:57:2f:88:0f:47:c7:3a:98:8e:00:
69:dc:00:89:38:43:e4:b4:f9:c4:d2:c4:7c:c2:7a:
bb:96:43:af:da:fb:f7:93:15:7e:55:8e:80:68:83:
6f:05:be:44:d7:9c:70:ce:60:0d:2d:61:c3:aa:b4:
e6:76:83:7f:c3:3a:60:60:98:5c:f3:10:8d:12:cd:
54:f1:3e:fe:93:8a:8a:6d:db:f9:68:6a:18:19:fb:
23:8c:56:63:c1:3f:46:0b:7b:94:ca:6a:a2:73:13:
e6:dd:13:7e:b9:eb:89:d1:70:e3:58:a0:7a:cd:0c:
24:b1:cd:91:6d:af:fc:e0:cf:1c:05:67:cf:58:aa:
06:aa:69:e2:a4:e9:fd:a6:25:ca:16:82:71:37:2d:
f5:17:ed:9b:f1:6a:fe:b0:6b:23:02:eb:ed:ba:19:
2a:5d:1b:3a:9e:fb:c6:de:03:86:7b:9b:c4:a2:59:
2a:fa:76:b6:86:79:67:e2:f3:b2:c6:8f:6c:5d:98:
95:a8:15:07:49:05:0d:b8:c0:9c:4c:2d:2d:af:08:
5f:d8:46:03:1f:70:36:21:33:8a:03:9a:c8:8c:a2:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:73:7F:1A:52:EA:9D:72:76:FC:EF:E6:6C:AD:51:EB:D0:DA:A8:02
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c9:77:fb:e0:6d:44:a3:0a:44:0b:af:f6:a6:cf:51:e6:40:
2b:87:b8:1c:9c:0b:84:d3:b1:7a:6a:a4:44:df:20:de:9f:31:
09:80:d1:ad:f0:84:47:47:e0:50:9e:20:88:b1:13:7d:b6:2a:
37:f6:b8:db:a3:b1:ce:7d:c3:e5:a0:b1:e3:5c:4a:b8:4a:59:
1c:aa:c2:fc:e1:05:34:59:e9:68:39:73:f0:2c:a0:d1:f1:46:
34:ae:20:59:63:9b:e7:ac:1c:50:d3:d7:5b:3a:50:5c:7e:a9:
42:64:1c:ee:9d:78:d2:c4:32:01:06:1b:8d:3c:0a:0e:4e:11:
00:44:e9:b5:ab:35:53:a6:c4:25:22:1c:b3:88:86:82:79:28:
52:14:64:c0:20:df:cf:fb:e4:0c:f5:81:cd:5e:b9:c5:39:7d:
8d:f3:71:cb:fd:2a:5e:8d:89:1a:29:eb:37:1a:1c:a3:8c:ff:
03:1a:e1:42:b5:bd:c9:02:36:2a:b1:25:8a:50:09:02:66:cc:
ca:d9:04:c4:b8:36:e8:91:73:a0:77:47:08:d1:aa:84:7f:fa:
8c:b9:09:15:4f:53:3e:04:60:f5:08:e2:5f:8e:b2:96:2a:78:
e7:6a:e3:f4:e0:86:9d:e4:90:4e:b6:27:fe:73:3c:c4:ed:af:
6f:28:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:16 2025 by rpki-client