Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
File: H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json)
Hash identifier: hcuX9dHZXrfEwFv5IIiLfkIPU8q8kvBHP1onGx9FwCM=
Subject key identifier: 7A:56:3B:39:B6:A1:50:4F:2B:D7:27:57:B7:05:9F:C1:AA:78:1C:45
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Certificate issuer: /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial: 0199FCC64C497D58D0F2C99A55FF3CE78D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:18 +0000
Manifest this update: Sun 19 Oct 2025 14:01:18 +0000
Manifest next update: Mon 20 Oct 2025 14:01:18 +0000
Files and hashes: 1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: tnA2W3mMUtaUYV9zpHdZLx8ZT2BxRqrl2IgKUrOhT7A=)
2: VPSZKXOomg68CX3e2czb5vATzV0.roa (hash: u5eUOziaSNihoip6mFV/l4VWIAiX36Jv1InorW26yng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4c:49:7d:58:d0:f2:c9:9a:55:ff:3c:e7:8d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Validity
Not Before: Oct 19 14:01:18 2025 GMT
Not After : Oct 20 14:01:18 2025 GMT
Subject: CN=7a563b39b6a1504f2bd72757b7059fc1aa781c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:44:3c:31:07:60:9e:62:e5:6b:df:63:72:
08:8d:01:cb:a8:8a:54:ec:e8:9a:d0:f2:c8:33:d6:
d0:49:97:0d:27:4a:44:0a:b5:93:32:fc:07:61:c0:
17:fd:cd:7c:67:f3:52:1d:11:73:79:1c:11:2a:b5:
39:7d:05:21:07:1a:b9:89:63:ad:b9:85:c7:bd:f7:
0b:38:83:54:4e:25:63:d2:31:78:f3:51:a3:bd:e0:
7f:03:e9:4a:65:e2:9f:66:54:ad:3b:c0:25:c6:62:
94:0a:a1:9e:2e:f6:54:af:33:4d:9a:ce:7e:4a:e4:
ae:92:b2:85:70:5e:5a:f7:4f:e7:fd:25:9c:6a:6a:
76:9a:89:b3:35:bf:ab:59:87:9b:25:b6:9e:a2:62:
71:eb:11:3a:0f:59:d3:2c:d2:11:f6:2c:d3:59:95:
f6:d3:c1:e7:18:a0:fd:8d:45:bd:f4:28:12:74:fb:
44:5b:95:b6:9d:ab:af:f4:1a:98:5f:07:a4:f4:aa:
2e:59:f8:c7:49:51:90:d8:84:b6:c9:93:7a:7c:68:
e0:62:6d:9a:43:ea:db:b1:a1:b0:ff:f5:9c:e2:74:
ac:5f:1a:5a:c1:14:c4:b9:f1:37:c4:d7:8d:44:52:
d7:5b:82:96:8d:c5:33:fc:8a:59:18:64:f3:e8:da:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:56:3B:39:B6:A1:50:4F:2B:D7:27:57:B7:05:9F:C1:AA:78:1C:45
X509v3 Authority Key Identifier:
keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:66:78:b7:49:de:34:1e:61:2e:2f:96:c3:ca:64:8e:46:5d:
4b:bd:d1:c8:26:ba:7e:59:a7:aa:c6:65:7a:93:6d:2e:6d:c1:
ea:6c:bc:62:8b:27:5d:5b:3d:cc:bf:27:1f:97:3f:a5:1c:4b:
52:b1:4a:a2:ae:ec:52:c5:5c:ac:b5:31:a9:1d:34:f4:63:4f:
20:7a:66:67:61:d4:05:a4:73:e3:52:6f:b7:20:27:8f:da:fd:
02:6f:4e:8c:04:45:7b:fd:d6:4a:ec:14:8a:0a:cb:dd:88:e6:
8f:7b:56:a4:b3:ef:f2:0c:42:fe:d6:bf:e0:d6:28:ed:ae:3d:
31:b0:a7:68:ca:54:16:3b:a9:31:f6:6b:4f:93:3f:01:bc:e9:
49:82:9c:7b:ce:5a:9d:11:02:da:71:cb:15:87:69:77:12:5c:
98:f3:ca:a5:59:a0:a3:43:9e:d3:65:a3:4c:bc:04:c4:f3:0b:
db:e4:06:39:8c:a7:5c:1f:a5:94:7d:f9:27:e6:f7:7f:bd:a3:
a6:f9:e0:a2:ea:00:d4:f3:bd:f2:98:e8:e7:05:d9:a2:f6:6e:
b8:a2:fa:12:74:b9:9c:a9:cc:9d:b7:be:f4:f2:73:c5:53:20:
7e:de:1d:20:10:46:cf:0e:1b:9b:2f:34:35:d5:46:0d:bb:22:
a4:74:80:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:39 2025 by rpki-client