
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
File: H83UEOElAi3gfKWWP5L3jo-JSG4.mft (raw, json)
Hash identifier: ruiWtd5TYXBtcsARfLorisMCVl7jIsutQamn1R7NQZ4=
Subject key identifier: 63:02:D5:0F:97:87:9F:40:73:52:0A:65:DD:B6:BE:B3:7F:22:C7:B1
Authority key identifier: 1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E
Certificate issuer: /CN=1fcdd410e125022de07ca5963f92f78e8f89486e
Certificate serial: 0199FC59069EF3B9267C57593766B818458E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:56 +0000
Manifest this update: Sun 19 Oct 2025 12:01:56 +0000
Manifest next update: Mon 20 Oct 2025 12:01:56 +0000
Files and hashes: 1: H83UEOElAi3gfKWWP5L3jo-JSG4.crl (hash: ci608BK3Z3gV4FMJFCWbH0mfLRGsq5C/KDaqA6QjBUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:06:9e:f3:b9:26:7c:57:59:37:66:b8:18:45:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fcdd410e125022de07ca5963f92f78e8f89486e
Validity
Not Before: Oct 19 12:01:56 2025 GMT
Not After : Oct 20 12:01:56 2025 GMT
Subject: CN=6302d50f97879f4073520a65ddb6beb37f22c7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:b5:3d:aa:03:8a:bd:87:11:5b:be:4f:12:
98:82:01:e8:36:06:21:f5:61:93:e8:e4:39:f0:2a:
ad:ee:34:38:6c:80:b1:2b:bc:81:e1:d4:2e:40:5c:
ed:d9:20:ae:b8:8a:b4:1c:4a:99:c3:d9:63:83:1e:
b2:57:97:ea:47:6d:d0:9d:e5:d0:60:0b:c1:04:89:
5f:60:0a:29:dd:9d:02:42:22:24:3d:76:e5:3b:19:
11:3e:76:30:d7:e3:fd:17:2b:c0:86:0a:0c:dc:de:
94:dd:1f:98:d9:b8:07:43:00:5b:6c:72:f5:71:cc:
c4:1c:aa:0c:69:ac:70:2e:ed:c5:60:f5:bf:60:55:
e3:28:0c:17:4c:fe:be:27:63:93:9b:54:1d:ad:4e:
1c:d6:6d:d0:2b:75:84:60:f3:86:ee:43:4e:d4:74:
62:f2:1d:cd:73:55:f9:a0:c2:30:a3:c0:1e:9f:f5:
95:1d:9b:34:64:b8:77:98:05:f9:df:ca:79:e9:ac:
ba:9b:1f:19:a6:96:dc:1a:76:d1:60:c9:04:d7:2c:
27:42:ab:00:58:65:35:02:af:62:64:27:14:44:9d:
37:cb:07:20:54:77:be:7b:65:96:18:76:89:e6:c5:
a8:39:a7:3f:e2:2f:a9:22:55:99:67:73:c7:09:e0:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:02:D5:0F:97:87:9F:40:73:52:0A:65:DD:B6:BE:B3:7F:22:C7:B1
X509v3 Authority Key Identifier:
keyid:1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:17:7a:fd:b9:84:87:13:9c:2b:4e:2f:6a:40:19:af:fb:ce:
ba:cc:15:b4:f0:5d:5d:a4:82:8c:c9:5d:ab:ea:f4:78:3b:53:
f0:21:72:62:ca:96:b1:09:31:68:af:74:d0:b4:ee:99:0b:03:
43:9f:4e:ea:c7:cb:55:37:d6:ed:57:6a:d9:ae:e7:7e:4c:39:
6d:a1:13:b9:88:6e:89:9f:52:e2:b6:0f:34:c8:44:8b:45:fb:
36:61:95:ac:9c:7a:d6:bf:64:2b:6f:02:14:fe:b5:bc:12:61:
ec:c4:7d:03:b5:d9:ce:ea:b8:12:69:0e:e1:d2:af:63:8a:d8:
4a:96:0d:80:fe:44:82:16:32:7d:09:f6:4b:c3:0c:ac:dc:78:
1b:5c:5f:6c:ce:f8:84:22:77:3d:97:05:4a:a9:76:d5:88:17:
7d:3d:18:c6:ce:bf:ec:1e:e2:1f:f0:db:72:6d:c7:ef:ed:53:
ff:89:33:fc:19:4b:c6:5e:a5:f4:f7:b0:0d:aa:63:d9:af:44:
8b:2d:da:6a:a9:a1:8c:b1:4e:2a:db:22:dd:ee:8b:27:32:b1:
e5:fd:1a:2b:4e:8c:e0:88:d5:79:f8:4c:ab:2c:2d:0b:d8:98:
e7:ad:21:20:8e:67:98:bf:9d:c8:2d:b8:bd:30:a5:6a:83:5e:
ec:53:dc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:29 2025 by rpki-client