Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: IGjnkWwq7MZoyao5mUFnPRSp7eQCeN8bFIOu4oB54nU=
Subject key identifier: 5D:C8:18:5F:25:79:EC:DD:6A:C6:5E:7D:EE:08:71:26:62:B2:D2:30
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 0199FEB4A4F1F89F36ACC5C1C0B057A55A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 23:01:15 +0000
Manifest this update: Sun 19 Oct 2025 23:01:15 +0000
Manifest next update: Mon 20 Oct 2025 23:01:15 +0000
Files and hashes: 1: DLMTOoacedomtvAfOo_wUgsg7ZM.roa (hash: CuMafo/kjG1kejlU1ti10/bQ5ADJP+5OLOjwOYxRNqo=)
2: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: pbGyy5VAHh6MkU1zLooztEGjImbJxEmg38oEg4WYDnU=)
3: KySbiR-MGliV0HnEusiYoVPq_Tw.roa (hash: Tom90ESsjuLbQCudFU+oOzUxWbGr9ZgqEwEe4qv+gmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:a4:f1:f8:9f:36:ac:c5:c1:c0:b0:57:a5:5a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Oct 19 23:01:15 2025 GMT
Not After : Oct 20 23:01:15 2025 GMT
Subject: CN=5dc8185f2579ecdd6ac65e7dee08712662b2d230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:c8:51:81:ac:d9:43:02:3a:ed:03:57:65:
9d:ac:cc:5b:44:5a:65:7a:d5:44:5d:39:07:40:67:
dd:1a:df:ae:4f:40:65:5c:a8:ec:ae:13:83:ab:bc:
c9:4e:93:21:57:6d:bb:e3:75:0f:05:6f:65:48:6b:
58:db:c9:64:79:79:ff:ce:08:a9:fe:c7:b7:e1:50:
d8:b7:64:c9:9a:d3:fb:6a:2b:c3:64:f7:f3:df:e0:
e0:59:b1:08:16:88:93:29:92:8b:27:19:d9:b6:50:
5a:ec:a2:e3:f2:ae:65:80:5e:2b:29:4a:d3:99:50:
ed:04:99:cc:a6:af:e4:22:b6:ed:53:98:80:b0:ea:
fd:8c:0b:17:56:cb:29:62:ed:b2:c0:69:c5:09:99:
b4:e3:ac:2d:63:03:96:e9:c5:5e:bb:0f:82:85:0c:
a1:fd:dc:07:40:17:1b:8d:f7:96:c3:1f:d3:5c:af:
3b:31:d1:cd:9a:3e:09:74:b0:b3:0b:a1:2b:24:7d:
33:94:4a:28:20:4c:3b:dd:5d:6b:08:04:c1:e4:48:
e3:1c:e7:9a:c1:44:ed:27:f4:98:d6:40:e1:4a:e2:
44:8a:52:ce:94:20:d7:59:13:51:72:91:72:c0:d2:
ca:61:3a:86:f7:7b:37:f0:1b:de:fc:e9:18:42:8f:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C8:18:5F:25:79:EC:DD:6A:C6:5E:7D:EE:08:71:26:62:B2:D2:30
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:86:24:96:06:8a:8c:13:d4:5c:7b:96:4d:d6:59:41:da:a6:
d5:4d:48:92:18:8e:a1:a5:68:2e:9c:1e:fc:d1:f0:07:18:51:
4a:51:a0:47:be:3b:1e:b6:68:b7:45:90:99:c7:20:fe:6a:11:
fe:7e:fe:80:d7:41:e2:0c:29:7a:04:f1:0d:35:a4:dc:77:97:
41:7d:ce:df:8d:8c:f4:0f:40:d5:12:27:0d:e4:82:40:7b:0f:
32:94:45:ae:74:0c:08:42:df:7a:ad:d0:1e:72:25:91:d7:84:
44:eb:66:5e:78:ad:52:fb:e3:8a:67:bb:0f:bb:25:5d:b0:52:
f2:2e:92:b7:22:34:12:9d:79:84:6a:ad:9b:63:af:99:11:00:
f3:a2:c6:50:2b:af:da:36:4e:37:51:f9:d6:40:8d:e7:70:a1:
77:6b:53:15:b5:e8:11:c8:ba:cf:36:75:9f:74:85:f7:54:6d:
a2:36:4b:a2:fe:33:73:d6:18:4d:69:ed:87:cf:70:fc:98:5e:
b7:72:2c:ac:ed:23:19:de:d1:8b:18:43:af:53:e2:cd:96:70:
0b:46:cd:73:4f:e0:f3:5a:cf:72:55:34:8c:d3:f0:f5:2a:55:
82:f0:ac:12:7e:c3:81:98:b3:cb:f8:09:21:f3:5d:2f:bd:26:
b1:70:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:54:12 2025 by rpki-client