Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
File: hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft (raw, json)
Hash identifier: jZ098E3ulKLd7X+nxN/38W91YpHeGOeS2ZJ+ITdGFPU=
Subject key identifier: 1B:C8:B1:18:38:B6:8E:6E:B0:AF:EF:16:52:AD:76:A4:37:B9:5D:94
Authority key identifier: 84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
Certificate issuer: /CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Certificate serial: 0199FE10100EF1C2D38EF57519F2DB1ED16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
Manifest number: 12BE
Signing time: Sun 19 Oct 2025 20:01:29 +0000
Manifest this update: Sun 19 Oct 2025 20:01:29 +0000
Manifest next update: Mon 20 Oct 2025 20:01:29 +0000
Files and hashes: 1: hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl (hash: jVT2gJ+FO+bPeY0NiB2gVLyFgXVRIClVbIoPD8tl4jg=)
2: pNHLiZosFPLwAP2_39dVXVedoA8.roa (hash: 21Dk8gbrcOnUWwtpjgoXFZDgkCZkwg2MK05wmg5NEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:10:0e:f1:c2:d3:8e:f5:75:19:f2:db:1e:d1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Validity
Not Before: Oct 19 20:01:29 2025 GMT
Not After : Oct 20 20:01:29 2025 GMT
Subject: CN=1bc8b11838b68e6eb0afef1652ad76a437b95d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:22:1a:74:74:1f:b4:a8:9e:3d:9e:48:54:
ff:81:5b:9b:f2:e7:15:66:b1:2f:c7:26:21:0b:79:
2d:63:74:7d:c3:db:5b:b9:95:fd:53:4d:ae:20:cb:
73:95:8f:5a:32:e1:a5:2f:21:89:b5:79:8c:b3:70:
bf:6c:6b:db:ed:32:0e:7d:80:93:59:ff:c8:39:72:
d2:4c:d4:95:69:f5:7d:52:19:ba:03:8a:98:cf:f8:
44:51:ea:a4:86:11:db:cf:f0:0a:77:3c:1c:02:0d:
39:76:60:16:e7:81:cf:50:0b:d1:ee:48:22:53:2f:
b3:18:1d:b4:fb:10:65:18:80:a4:6a:1b:cd:a7:48:
a1:85:7f:9d:65:24:2c:a1:f3:5f:4c:a6:31:ef:45:
7e:29:ce:5b:3e:83:cf:d9:47:41:01:b0:72:04:86:
ca:0b:64:75:3d:91:ca:96:5d:99:6b:a2:ec:f9:42:
ca:7e:0c:61:24:66:69:65:65:45:7f:6f:e0:36:dc:
fd:ef:0f:1b:69:35:86:a4:a6:be:f8:40:3f:b8:09:
1c:62:df:94:b0:76:8d:43:a6:02:72:6b:2c:84:46:
bf:7e:0e:ba:94:72:ea:3f:8f:9c:b3:ca:21:1f:67:
74:a6:87:e2:e3:a5:8a:ac:d5:20:4f:4c:51:bb:4d:
b4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C8:B1:18:38:B6:8E:6E:B0:AF:EF:16:52:AD:76:A4:37:B9:5D:94
X509v3 Authority Key Identifier:
keyid:84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:df:ce:54:78:33:00:7b:67:22:3e:c7:97:75:26:83:9e:b5:
11:35:d7:0a:f1:16:c4:00:aa:fc:b5:d6:52:a4:aa:b9:4f:db:
86:1e:3c:70:b5:1d:42:11:76:34:00:2a:23:a5:0d:30:12:e0:
fc:76:3d:af:2a:59:10:9b:78:54:3f:f1:5c:b8:2b:be:48:b7:
e4:1a:84:2e:e7:84:ef:04:32:20:dd:f0:e7:79:59:57:7c:6f:
ec:f5:47:86:78:e6:b4:88:21:82:f7:3b:7a:c0:34:dd:94:50:
54:18:51:7d:ca:f0:4a:c6:5f:b4:68:17:e2:2c:dd:b4:8c:35:
99:e4:d5:ca:b1:af:d8:a2:d2:e5:79:3d:3d:18:32:8c:1e:ee:
09:b4:2e:3d:d7:eb:96:8b:35:e7:a7:25:a3:53:c4:3a:9a:c5:
43:a4:1c:c3:f1:e3:c5:b9:0a:65:b2:18:24:c0:c7:2d:aa:19:
f7:2a:1b:9a:bd:e6:00:82:23:3e:80:99:d6:8b:4e:72:a3:bf:
02:23:9c:1c:9e:b0:8b:e1:8d:98:0c:d0:56:98:e8:48:b5:d1:
d2:05:69:7f:83:0f:39:27:c1:16:11:29:35:3a:11:34:4d:39:
e0:e8:8d:0e:2f:dc:60:5a:f7:76:f1:a6:57:16:40:6a:01:87:
20:e0:d0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:51 2025 by rpki-client