Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
File: H1KEKQNNz7oB9__1x8yIVtTQbhs.mft (raw, json)
Hash identifier: GonHolNZuuucjU8jnmDV10m0BWQerMFkNl710NH8Dls=
Subject key identifier: 4B:56:96:99:DC:4A:38:02:03:53:25:71:C7:A3:1D:28:A1:12:54:A0
Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
Certificate issuer: /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Certificate serial: 0199FB45D2B47BCA8F3C6BCE2DC39B570650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
Manifest number: 0C3A
Signing time: Sun 19 Oct 2025 07:01:21 +0000
Manifest this update: Sun 19 Oct 2025 07:01:21 +0000
Manifest next update: Mon 20 Oct 2025 07:01:21 +0000
Files and hashes: 1: DwdwnNYiYszxSFZUvDnifZ1cmVo.roa (hash: z1Ue0CWmwoS4r8rtXwZcldA5j6c831i2ATcqPGIWOrM=)
2: H1KEKQNNz7oB9__1x8yIVtTQbhs.crl (hash: VogS/L97+RGqdpgr8imfSn9dSNWeFMpt9nr52Hgp030=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d2:b4:7b:ca:8f:3c:6b:ce:2d:c3:9b:57:06:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Validity
Not Before: Oct 19 07:01:21 2025 GMT
Not After : Oct 20 07:01:21 2025 GMT
Subject: CN=4b569699dc4a380203532571c7a31d28a11254a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:71:72:8a:d6:be:b6:ee:ef:17:eb:94:3c:
ea:09:bd:d2:99:ae:89:ac:5f:35:87:f6:bd:86:65:
24:c4:7e:f1:5b:dd:9d:d1:57:1a:b3:fa:32:f6:48:
c3:86:8b:b4:8a:58:30:ad:ed:e7:f4:b3:14:51:82:
57:48:7c:ee:fd:ae:7b:09:39:ca:f2:08:21:3c:b6:
47:53:5b:21:e1:b3:66:c2:02:44:6c:04:3f:9a:cd:
bc:6d:30:ca:38:31:03:5a:ff:6a:59:68:9a:af:a6:
0d:ff:0c:e4:3a:f3:66:6e:c8:f2:8e:e1:7f:17:36:
e8:29:46:7c:f7:8e:ab:a0:76:a4:60:c5:d1:d2:68:
b0:46:8d:6c:77:41:0a:4b:a7:83:a0:c1:9e:39:53:
a9:c5:cb:7c:da:09:b0:4d:a6:2c:50:ba:47:f5:28:
20:93:20:1b:34:9c:28:5f:45:7f:45:49:f0:9f:39:
71:b8:2e:54:59:56:09:ca:a2:6e:ac:e6:d5:91:89:
0a:c3:93:5b:7f:e8:e6:38:3e:17:54:33:5c:db:53:
e4:0a:93:8e:fe:1d:8d:b1:54:20:de:14:e5:23:77:
2b:8b:0e:da:e6:39:52:e1:e6:fd:5f:99:1b:e4:a4:
95:0c:a8:41:5d:2e:ae:bb:53:cb:3e:22:7f:86:d0:
7f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:56:96:99:DC:4A:38:02:03:53:25:71:C7:A3:1D:28:A1:12:54:A0
X509v3 Authority Key Identifier:
keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:97:3f:43:8d:a8:f3:68:98:94:bb:7b:82:87:82:b6:7e:92:
e1:24:e9:b1:a1:17:d3:17:1f:6c:aa:a0:ee:22:d6:46:42:17:
aa:5c:17:17:c8:92:03:52:89:f9:df:e1:7a:0a:d8:9c:41:bf:
23:21:c8:ca:a8:fe:9b:fb:f0:4e:4f:67:29:9c:13:53:4a:73:
5d:e7:5d:9a:1b:de:08:ed:e3:20:27:14:54:f6:16:fb:34:91:
a8:44:3e:7b:f2:08:b3:48:82:2d:8c:46:59:a3:87:3b:94:72:
54:5d:07:e4:99:62:c3:58:c4:ca:a4:83:0f:18:b9:a2:f0:fc:
1f:15:3d:65:29:35:fb:59:d2:47:d7:73:8f:ef:ee:00:eb:00:
97:f7:37:0b:8c:06:f8:aa:6f:85:56:a5:c2:79:02:44:9f:41:
34:a4:3a:30:60:48:5a:3c:58:55:1b:da:cc:34:d7:c8:9b:6c:
82:03:d4:57:95:73:72:0f:f2:f6:24:20:11:0d:4a:f7:92:68:
e4:4b:8e:1e:1b:f3:a0:45:3b:e1:66:39:e5:56:ff:e0:6a:f5:
7e:8c:f1:0d:d6:28:13:7c:f4:0e:58:18:03:cc:62:2f:c2:6c:
04:9d:bf:c9:65:ed:99:6e:5e:a9:fb:25:37:f5:f1:5c:56:41:
66:1d:a9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:55 2025 by rpki-client