Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
File: h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json)
Hash identifier: Q1zjA+3b0g0YFHyG0+mgdFA3jt0H15wpFgPD5UGjq5E=
Subject key identifier: 5E:86:44:0C:12:FA:7B:06:E1:9F:C1:D9:68:10:F4:2D:5D:A0:70:8C
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Certificate issuer: /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial: 0199FAD8333ECA73D181386A1E2A39E7DB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
Manifest number: 0E58
Signing time: Sun 19 Oct 2025 05:01:36 +0000
Manifest this update: Sun 19 Oct 2025 05:01:36 +0000
Manifest next update: Mon 20 Oct 2025 05:01:36 +0000
Files and hashes: 1: RHGOdSgcoaK-6eU2dKjKlpRjaMo.roa (hash: NRVJAc4Gjyt0Wmb+WBhbiFKpJbnBkqjBbBZ7MMuCSS0=)
2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: 7puWOlYLu4oPXamlzFWT54Lk4sYLHExaw/byrVFGTYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:33:3e:ca:73:d1:81:38:6a:1e:2a:39:e7:db:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Validity
Not Before: Oct 19 05:01:36 2025 GMT
Not After : Oct 20 05:01:36 2025 GMT
Subject: CN=5e86440c12fa7b06e19fc1d96810f42d5da0708c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:87:49:d9:b4:43:bb:39:4b:f3:4b:9f:1e:
1d:51:08:6d:5c:ce:be:77:a9:dd:90:f8:66:ca:4c:
5d:89:2d:09:84:5e:25:14:26:c1:14:27:c3:2a:11:
2d:d3:db:53:10:6c:ee:df:23:28:99:22:c1:40:65:
c4:70:59:c0:ab:62:6f:6c:b5:db:b4:7e:1a:b3:cd:
2a:f4:7f:f3:97:dc:10:8f:15:d6:fa:72:c5:ca:8f:
28:62:21:26:84:94:3f:0e:73:8c:ad:67:2a:57:b5:
33:a0:6a:ae:f4:f7:3c:f7:c5:93:b7:77:0f:97:3a:
66:ab:56:79:d0:4b:a8:78:59:d2:7c:8c:c4:bb:e6:
e8:fd:7f:51:a1:1a:45:d2:cc:3e:a8:e3:6b:71:11:
b9:fa:87:3f:05:db:23:16:5f:eb:41:a0:eb:53:f1:
da:a3:90:75:fa:d6:f4:85:fc:38:1b:96:f9:f6:b9:
50:46:1f:d2:f4:55:f0:34:0b:9b:39:0e:b2:02:c6:
b1:41:fb:86:28:ac:35:c0:a3:15:33:0e:e0:98:ae:
18:04:99:bd:9e:ef:c6:c4:49:ed:9d:3d:3c:59:80:
b1:bb:5d:3e:b4:ad:de:d6:82:d8:ec:d5:bf:23:d9:
e5:ca:29:e5:94:7b:28:fb:95:98:90:e5:b7:ac:59:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:86:44:0C:12:FA:7B:06:E1:9F:C1:D9:68:10:F4:2D:5D:A0:70:8C
X509v3 Authority Key Identifier:
keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f7:d4:fb:cf:cb:56:66:62:01:57:2a:3a:93:92:33:ac:7e:
99:8f:28:3c:82:1d:75:a1:19:89:1b:b4:95:c0:69:58:04:21:
73:74:9f:2a:76:19:c6:c8:ae:e0:79:8e:e5:09:25:03:64:c1:
80:5f:da:c0:de:17:56:fd:9e:df:02:b4:f0:ee:4c:0e:fb:50:
4a:d9:84:e9:bd:3d:20:c1:de:5c:04:05:22:9d:97:04:20:23:
14:81:66:92:b9:18:65:ca:7c:97:9a:1f:c4:f0:55:3b:5b:7f:
55:8f:39:8f:86:82:46:77:15:a5:85:4f:e1:f7:1f:9b:01:4c:
69:c0:82:ec:02:b9:26:b5:8a:64:14:8d:33:00:45:ce:96:05:
19:f4:39:95:8e:ba:0a:c7:25:30:7b:52:22:7e:11:18:ab:9f:
81:0a:21:ae:2f:49:ef:f8:6e:92:8b:d9:c2:4a:5f:b2:2b:c1:
6a:6c:bd:24:05:32:d4:6b:81:61:f4:f1:bb:57:fd:c0:f1:30:
9d:c6:33:d2:ce:f4:95:43:29:9c:3c:76:0b:f0:e2:3b:d1:c5:
40:8c:ed:8d:e1:a2:9d:96:ba:eb:7d:be:ad:ea:09:d0:d7:43:
5c:68:1c:39:b8:95:e5:fa:72:29:c3:83:b7:c8:f6:c0:0f:a7:
40:69:b7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:34 2025 by rpki-client