Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json)
Hash identifier: VjtRTsW1ZJLcgoCsoKlOaRGBMW2qYHYXSyA55BugMto=
Subject key identifier: 20:79:69:F3:9E:74:1F:FF:95:24:AA:7D:8A:73:84:1E:BB:94:FC:C8
Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Certificate serial: 0199FB4614E5C34D441675E6521C5EF4A3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
Manifest number: 02BD
Signing time: Sun 19 Oct 2025 07:01:38 +0000
Manifest this update: Sun 19 Oct 2025 07:01:38 +0000
Manifest next update: Mon 20 Oct 2025 07:01:38 +0000
Files and hashes: 1: JY1Ry82sD4kNWhz4gQuDnSIFpN8.roa (hash: 8elrrlaE2J0H4bGnc8sBg7PwEFKBgdvohUzIrvCFh2E=)
2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: uA5qhKZs/DDElT6mki9CQLb6lThJEzxHzvlyCOVjkQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:14:e5:c3:4d:44:16:75:e6:52:1c:5e:f4:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Validity
Not Before: Oct 19 07:01:38 2025 GMT
Not After : Oct 20 07:01:38 2025 GMT
Subject: CN=207969f39e741fff9524aa7d8a73841ebb94fcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:8d:8b:3c:2e:e9:70:97:8f:e3:dd:0e:65:
9d:14:18:c1:90:5f:59:7e:f4:bb:09:61:2d:f2:92:
d8:39:88:5d:55:b2:2b:e8:b0:0e:82:a1:85:3d:0b:
5d:25:b0:1c:6d:3b:b0:2e:ae:09:f1:8a:b8:7a:8c:
34:78:a5:bf:d1:2d:01:ed:60:9d:32:8f:0a:9b:ea:
38:a6:15:ad:e5:6d:2f:9d:97:78:47:38:f9:e9:33:
fc:b9:b4:18:ba:df:e1:1c:df:84:7f:e5:86:4d:4c:
50:d2:6c:df:83:1f:54:0b:0f:15:4d:52:b6:a6:35:
b5:8e:4f:04:39:31:9d:80:fe:52:74:e2:27:73:0f:
bb:d7:5d:ac:46:e7:40:f9:11:29:05:29:3b:02:21:
05:c1:0b:bc:8c:60:ff:64:91:ee:b8:27:35:5e:2c:
0c:f0:56:55:84:9a:73:db:5b:be:58:18:9b:f1:e6:
38:bc:8a:d1:3f:fa:8a:a1:ea:e3:3c:5a:1a:60:30:
7b:6e:0c:7f:16:85:42:42:df:a4:03:e2:82:a0:e3:
12:dc:aa:ce:88:6d:22:e7:52:44:83:f1:5a:7a:15:
42:81:7c:f7:e7:4b:e1:77:8b:90:8e:f5:da:e3:f8:
f6:af:ac:6e:06:e1:9d:78:7c:2b:cd:b8:50:a7:b3:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:79:69:F3:9E:74:1F:FF:95:24:AA:7D:8A:73:84:1E:BB:94:FC:C8
X509v3 Authority Key Identifier:
keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:52:56:70:0e:68:b0:68:51:63:5c:48:f8:55:1e:db:74:5b:
e4:73:eb:e8:28:36:13:19:f4:4c:cb:ca:21:a7:09:0c:c6:05:
1a:85:3e:56:5a:4f:7d:28:63:44:51:ca:04:43:dc:65:3c:6c:
7d:83:68:b9:19:63:cc:91:86:44:2c:06:d9:27:09:05:85:bb:
22:44:3f:b1:5f:1c:7b:b2:d7:33:b7:bd:38:e3:5d:62:98:8f:
02:7e:e1:e1:1d:16:09:59:31:cf:f4:cf:98:07:26:b1:ac:c9:
24:fd:01:76:0e:f8:d0:4b:a9:46:9d:38:13:ed:d5:12:b7:9a:
40:52:d0:29:5b:21:ac:ee:14:84:b6:58:37:bf:ad:7a:6c:2c:
37:77:ce:95:51:16:fb:4d:13:63:50:99:d2:60:b2:ff:27:10:
d8:3b:f0:45:ae:6f:03:a0:3c:9b:f8:e2:ec:21:50:a6:53:f4:
54:32:3d:1f:30:88:0d:00:de:d1:36:f4:a9:55:fa:0a:ef:b2:
a1:3f:2a:35:d2:d9:d8:7c:ed:f4:16:a0:f6:95:32:d0:be:1e:
d1:da:8e:bc:f7:db:c1:75:5e:82:7b:49:9c:16:91:ef:e7:7e:
ae:92:98:02:5c:f1:cd:e2:db:92:a4:2c:8b:fc:e7:50:ca:73:
6f:84:aa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:30 2025 by rpki-client