Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier: 4XNJ6TopGuBdDWbQJQyCn+4xmDPCD6TJyLB2w8HdF/M=
Subject key identifier: 5A:DE:70:E5:B1:06:F2:54:8B:3A:11:51:7C:BA:14:F9:D4:EC:E5:65
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial: 0199FCFD2AB4F552D57555097CFED811CB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number: 0469
Signing time: Sun 19 Oct 2025 15:01:13 +0000
Manifest this update: Sun 19 Oct 2025 15:01:13 +0000
Manifest next update: Mon 20 Oct 2025 15:01:13 +0000
Files and hashes: 1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: yCfxyrV5buanRalMs30oiO5NS9MwzSijZKUfFLpR3YI=)
2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2a:b4:f5:52:d5:75:55:09:7c:fe:d8:11:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Validity
Not Before: Oct 19 15:01:13 2025 GMT
Not After : Oct 20 15:01:13 2025 GMT
Subject: CN=5ade70e5b106f2548b3a11517cba14f9d4ece565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:fc:23:10:04:0f:27:fd:95:f7:7a:c4:a7:
61:20:3e:ae:dc:9d:ee:f8:2b:14:18:90:e6:f9:d7:
9b:19:c5:1e:94:5e:99:20:60:42:15:80:9c:4d:37:
40:0d:b2:98:88:86:b7:4a:1a:9f:97:2f:5d:9b:4a:
8f:01:37:c8:94:62:8e:f7:a4:07:7f:85:05:a7:83:
92:e6:1d:f4:fa:3c:2d:b9:55:a6:ce:09:f6:b3:53:
90:29:54:de:51:a5:d2:e0:9e:da:7c:5b:95:84:61:
9d:06:ed:c4:a6:6b:a8:b7:46:d1:9b:cd:bd:0c:bc:
e3:7f:d9:0d:78:ae:55:a0:85:09:20:93:51:d6:68:
bd:dc:f6:39:09:e4:90:99:70:a2:a5:8a:93:61:f0:
ce:a6:33:f9:2d:48:01:c6:e6:89:e5:dc:e2:ba:a3:
54:f3:c4:16:77:33:34:e5:54:3b:23:17:f6:1f:1b:
66:68:4d:59:f1:76:59:b1:23:a0:df:c7:2f:b3:43:
7f:53:62:ba:71:3b:3d:f1:65:83:6d:d1:9b:6a:52:
9c:a1:e9:f1:2e:79:95:a6:97:4a:0d:53:c5:5e:5a:
7f:07:ac:bf:8e:90:64:4f:fc:7f:0d:3c:6a:e1:f5:
51:5e:f8:6f:d3:01:cb:8e:51:82:ab:0c:d4:eb:75:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DE:70:E5:B1:06:F2:54:8B:3A:11:51:7C:BA:14:F9:D4:EC:E5:65
X509v3 Authority Key Identifier:
keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b3:29:9c:28:48:e9:67:57:c2:0e:bc:99:72:7b:2d:85:39:
e1:ce:24:dc:44:3b:33:44:69:88:6f:1d:c7:d3:eb:ca:49:58:
25:8b:0a:06:06:dc:17:8e:af:12:03:94:cf:12:d3:b6:d1:3e:
79:f5:20:65:25:68:c9:8c:01:08:18:72:6f:4f:42:14:50:84:
59:d5:9c:c3:67:5d:f7:52:5c:36:18:5b:67:45:e6:a2:13:32:
5c:25:ce:5c:e9:4f:a4:9a:77:55:44:4b:ce:62:74:dc:d0:a6:
63:7f:f6:7a:dc:a3:ce:3a:9b:01:a6:77:e7:7e:88:b7:3c:8d:
ea:47:e9:aa:01:0a:fc:60:d1:61:fd:1a:05:4b:60:6d:60:48:
3f:00:2b:e0:48:56:db:2d:ca:6c:69:c7:ec:48:a1:4f:71:c7:
de:1e:cd:7c:94:68:4f:77:db:19:78:96:24:c3:0c:12:82:52:
95:8c:a7:44:89:a7:e5:bd:6c:c3:7a:07:92:03:b8:ec:c6:8e:
59:cb:4e:b1:63:30:16:e4:dd:8a:b8:c9:1f:c5:56:af:36:20:
cf:22:cb:58:bb:13:88:a6:d3:2d:33:a0:b2:c7:7b:be:42:1c:
95:f9:3a:69:1e:33:d4:62:bb:ee:58:3a:e0:c4:3c:b9:33:2c:
b4:27:e3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:38 2025 by rpki-client