Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: kf8AssoGi4pp+UpsXHt9J5C8g+YpFw8lZRh2ijyKWcA=
Subject key identifier: 1F:09:3D:95:FA:B4:6E:E7:3F:F1:D7:51:4C:10:05:DD:65:75:E1:58
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 019A0035844505036072FF0D8C51070E7894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 02AF
Signing time: Mon 20 Oct 2025 06:01:38 +0000
Manifest this update: Mon 20 Oct 2025 06:01:38 +0000
Manifest next update: Tue 21 Oct 2025 06:01:38 +0000
Files and hashes: 1: f87u7kBdxRsndUbHafpkZkro0IU.roa (hash: zdIYsmtX/Gy6oFoVgbZrLwhX3d3gff2hTbpByuS7zVc=)
2: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: hMBXx0n7eWCf9uhSxrPbwDST3cI81rYJ4TMjzZAOBgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:84:45:05:03:60:72:ff:0d:8c:51:07:0e:78:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Oct 20 06:01:38 2025 GMT
Not After : Oct 21 06:01:38 2025 GMT
Subject: CN=1f093d95fab46ee73ff1d7514c1005dd6575e158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:f2:01:ce:5e:c6:d2:73:26:9f:ae:4f:2a:
34:86:6c:63:3b:75:46:b4:51:26:0b:b8:af:0d:bc:
d8:e4:3e:88:b2:97:bf:33:7a:46:cf:35:41:4d:c6:
48:7c:64:fc:8d:de:57:04:bf:b6:26:fb:29:c7:1f:
ed:f5:83:c7:8a:c6:ab:f9:fa:7d:b1:20:b7:ce:33:
64:c0:d0:9a:1f:01:0c:fc:11:05:10:0c:28:4f:a9:
ec:9e:91:7a:c6:14:e4:95:2f:ea:26:9a:b2:8c:36:
13:0b:68:7f:c3:28:d8:3c:b4:48:f0:91:c1:7b:78:
d9:74:8b:d1:fc:29:21:0a:fb:64:3d:bf:e3:71:92:
15:df:5c:2d:83:40:9a:f9:90:71:69:8a:8d:72:c9:
3e:29:e9:69:48:7b:fc:55:85:fb:16:96:5f:ac:8e:
16:8c:ac:a0:44:99:f4:f5:35:59:cd:5b:65:65:49:
02:41:4a:a0:00:53:1f:ea:cf:cc:c2:33:59:a1:fe:
36:ef:70:38:c8:7d:64:cc:d3:e8:82:c6:b3:5e:6c:
6d:14:be:3e:de:cd:bc:65:60:b9:1f:a8:44:f9:8a:
5f:31:93:10:c7:e7:af:51:8c:1b:4a:92:e1:34:c3:
63:09:30:8e:ef:08:9a:f5:48:d2:b1:18:93:01:73:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:09:3D:95:FA:B4:6E:E7:3F:F1:D7:51:4C:10:05:DD:65:75:E1:58
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:42:ff:64:a1:37:79:75:e2:9c:c4:34:fc:ea:43:75:26:dd:
63:52:af:4e:73:3c:4e:56:d0:e1:29:3f:5d:28:50:4b:0f:a5:
9e:13:2d:03:71:f8:b8:7d:10:b6:00:e9:6a:74:1c:d7:9e:80:
8e:3c:a4:01:e5:b4:34:9e:5a:8c:ad:85:a0:67:88:9b:94:28:
3a:cf:ef:cf:2d:36:73:f1:9f:74:f2:ce:1d:9f:03:1d:6f:f8:
56:9d:62:20:56:71:50:fb:70:64:97:46:a8:b7:49:af:6d:dd:
fe:93:92:c8:c9:0c:df:04:67:85:d9:d3:00:a4:2f:32:4f:22:
26:c3:fe:19:f7:a5:4d:de:b2:f0:2f:8e:ec:92:fe:16:9e:ca:
e5:ce:2f:b9:aa:48:f8:b0:7a:68:88:77:e1:94:05:a6:2d:6e:
86:55:21:88:4d:32:69:2b:c3:ef:27:f6:f8:d3:6d:63:31:47:
f9:f8:b0:5b:6b:6a:a7:38:c8:d9:85:63:eb:1e:60:e1:99:dd:
ae:cc:db:fa:bc:f4:d0:e8:1a:f1:cc:4c:a1:36:4f:52:b0:f5:
ae:b4:ad:81:a7:e3:fd:27:71:aa:22:d4:30:5c:e7:4d:8b:43:
52:4d:0c:9f:16:0b:f5:eb:b0:80:e0:e3:50:7a:f7:76:8b:81:
7d:5a:50:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:22 2025 by rpki-client