Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File: H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier: lcQx/n9ypVEjz7g57rrLZXdqDonGyU4aLqQazgSu9Y0=
Subject key identifier: E5:6A:C6:DA:C4:BE:8A:39:D7:52:BB:E4:64:CC:7E:C7:05:BE:F6:E4
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 019A0035B49E97C7232B0F6B9179F20E0468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 06:01:50 +0000
Manifest this update: Mon 20 Oct 2025 06:01:50 +0000
Manifest next update: Tue 21 Oct 2025 06:01:50 +0000
Files and hashes: 1: 1k-z_h_ZwS63SDr6uXmM3AXasE8.roa (hash: cdlAENSozIsV23f6Qzr2sxi7P2lHy2WlkfVerTdNtUQ=)
2: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: UCwlDIVWrJdGUeLJNJMmyHGyLYKIcUdsUIogr0p+2KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:b4:9e:97:c7:23:2b:0f:6b:91:79:f2:0e:04:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Oct 20 06:01:50 2025 GMT
Not After : Oct 21 06:01:50 2025 GMT
Subject: CN=e56ac6dac4be8a39d752bbe464cc7ec705bef6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:3d:e2:14:5a:61:30:8d:f7:c1:4d:a8:4e:
12:5b:50:e1:89:47:77:2c:71:1d:01:95:3f:e0:0a:
37:eb:8a:2b:f2:d7:2f:19:3f:28:bb:b8:53:e4:af:
9c:01:c3:48:54:07:a6:f4:1e:3d:9d:07:bc:ce:66:
f7:cc:df:dc:9b:81:1a:f4:f9:b3:93:d5:fb:0b:84:
3b:55:57:c3:de:4f:1e:c8:74:61:e9:bb:16:39:64:
09:88:5d:21:bd:db:dd:d3:8e:f5:33:14:af:93:22:
9a:e3:46:fd:b4:3c:a8:50:5c:af:14:15:f6:4f:78:
79:85:d3:62:b6:bc:be:bd:c0:19:6d:d8:87:33:a1:
8f:37:45:3a:86:0d:9e:73:43:89:7d:57:87:8e:90:
a9:f0:28:95:0c:de:a0:a1:b1:d5:58:c8:32:2f:ed:
30:e1:6b:77:fc:07:b2:2c:b7:de:23:ee:02:e0:fc:
71:bc:17:f6:9b:71:91:30:84:14:7b:81:41:c7:f4:
d2:99:67:a4:9e:77:dc:fb:4a:34:ba:68:00:6f:10:
f1:38:f1:b2:f2:52:4f:2b:2a:42:72:38:b7:fa:77:
8c:14:7d:1b:de:6c:60:30:6e:57:0a:99:63:9d:57:
a7:39:b7:61:3e:3a:dd:a1:25:28:e3:c4:b8:e7:ae:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6A:C6:DA:C4:BE:8A:39:D7:52:BB:E4:64:CC:7E:C7:05:BE:F6:E4
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fe:a8:98:1a:f0:05:2f:72:c2:34:bd:93:4c:5c:bf:5a:8f:
f0:f3:e3:c8:ea:71:94:67:f0:b8:8d:ec:1c:75:a4:1a:45:7a:
ad:f6:6f:4f:d4:bb:d2:1c:ce:d0:8c:1d:45:55:d1:7c:ff:de:
5d:b5:d5:c4:75:79:8f:f5:7b:4d:49:11:f7:72:a8:64:7f:c3:
f1:41:cb:7a:3b:df:4f:40:40:df:66:63:9d:81:46:ab:20:4a:
19:d5:e8:d4:23:88:f4:8a:39:90:9b:15:60:26:fc:b2:97:90:
22:f0:c1:c1:25:4c:15:12:94:07:e6:be:07:64:b3:32:34:2a:
1e:b5:e9:ba:d8:a2:7a:30:58:5c:9d:6e:8a:ae:bf:1d:6e:fd:
9e:9f:d9:94:8f:db:bd:0d:5d:dd:25:fa:7b:df:5b:2d:a6:44:
0d:1c:a6:09:ae:8e:c3:79:46:4d:2b:e9:00:3e:b3:e5:7e:b3:
c7:40:8a:00:e1:41:3a:3f:87:c0:52:de:e4:40:51:a7:f8:85:
af:9e:42:54:bd:0e:eb:34:4b:68:f4:2d:86:5e:33:78:f1:ee:
bd:8f:1f:b8:65:b4:60:ca:fe:8c:6f:ec:bc:eb:33:67:46:82:
5c:08:38:67:47:68:db:07:65:c2:31:af:7b:d4:45:8e:b5:a1:
fd:30:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:39 2025 by rpki-client