Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: vkI/IrQdHEURqxJUYV6QFTOWnVU2Y0A1OqppaJn4xCA=
Subject key identifier: 26:7A:38:F3:E0:1B:8D:A8:D0:30:39:9B:31:74:FA:96:C4:6F:5B:34
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 019A4F61E8B7C02AF7B0985CF6603ABB4730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 15:00:07 +0000
Manifest this update: Tue 04 Nov 2025 15:00:07 +0000
Manifest next update: Wed 05 Nov 2025 15:00:07 +0000
Files and hashes: 1: 2d0NREbfTK2FI7htmEEh4N4XLQs.roa (hash: EflrGXNj+c0/KROiAUAdkvP3FPssOcN4j+Wc2GCNRt8=)
2: RN4snQmQ10sMC0pt3uecgVuseDw.roa (hash: Sf04OwdvE8nAZA8tEzv2sgqcn/Ip+2j+x7sXM2qpNDA=)
3: TMFEuWpJtp-N546RTZSeOr_ihcc.roa (hash: 15tgIF1xV8iqz3lwud0LDIWMxNL1aGMOQ99+FVGNT5o=)
4: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: p8IJ8zpLBSKeeYucOo36a3VnEcGgIS2vbnpaeGNj+f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:e8:b7:c0:2a:f7:b0:98:5c:f6:60:3a:bb:47:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Nov 4 15:00:07 2025 GMT
Not After : Nov 5 15:00:07 2025 GMT
Subject: CN=267a38f3e01b8da8d030399b3174fa96c46f5b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:b8:11:10:29:5d:d7:a4:1f:4e:7a:35:d5:
1d:a4:02:b9:4b:4d:be:49:3a:38:a6:cf:53:c4:e4:
c0:78:4e:67:eb:31:0c:3e:01:13:59:38:20:d5:cc:
79:95:96:95:6d:4b:77:a2:d0:49:69:22:a9:dc:8f:
67:16:9c:bf:dd:17:ab:8f:18:c0:0f:c6:18:21:e1:
02:bb:d8:be:cc:74:b1:31:b9:7b:60:b5:85:be:69:
bc:fc:34:7c:01:16:1f:69:79:19:fb:81:ec:12:f8:
25:9d:2a:b0:5d:d4:ac:0b:8c:fa:84:8e:c5:f8:8d:
e4:29:74:65:8c:0b:d9:a9:37:da:1d:66:3b:8f:20:
6e:b0:7f:0d:4d:31:bd:2f:6d:11:10:ed:64:cf:6e:
e9:2d:24:5e:90:8f:3c:97:28:61:ff:06:5d:8f:ac:
ef:c5:3e:3a:b4:38:de:de:e6:fd:d9:5a:35:f7:61:
a1:cb:19:98:a9:6e:e1:8f:a6:69:b9:99:f9:7b:45:
cc:0a:21:94:ff:cb:6b:40:70:81:be:55:86:f2:d4:
89:9c:ae:de:bc:7d:f4:13:c0:b0:4c:7c:8f:96:1e:
1b:97:9e:a5:07:7c:bb:80:94:b8:08:1e:6f:37:cc:
6e:5a:b0:e8:ef:89:06:32:a3:63:ce:63:b9:9f:bd:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7A:38:F3:E0:1B:8D:A8:D0:30:39:9B:31:74:FA:96:C4:6F:5B:34
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f8:ed:27:fb:f2:5d:46:84:91:9d:ac:57:b7:93:b0:4c:64:
57:76:a7:51:21:5c:d7:e3:a2:51:07:aa:e7:f8:5f:f5:65:f8:
90:bd:55:41:50:24:41:93:1c:2a:9a:94:f4:ae:e1:c3:53:2f:
52:09:96:ca:e2:b4:f5:39:26:88:79:84:4e:0e:5c:3a:b6:d2:
af:cd:44:d0:55:7f:b3:02:23:2d:fe:ae:54:0a:a9:24:6b:06:
10:43:14:c3:bc:40:b3:1c:c0:eb:f2:d7:ef:01:5c:ad:24:e9:
90:3f:94:88:77:ac:5e:86:5a:ca:a3:eb:12:ee:3a:ef:f1:02:
ef:dc:5f:a1:ab:c5:35:0e:1d:43:11:c9:9e:8a:df:cc:b8:01:
53:43:67:bb:ed:51:2f:6c:a0:bf:0b:cc:be:a1:dc:d4:29:fc:
4e:92:2f:7b:1a:c8:ad:ae:31:a0:5b:ff:0b:0c:fa:58:15:02:
9c:e3:5c:c7:1a:53:40:07:cb:9f:32:a7:12:ca:3b:d4:d7:a6:
c3:c4:36:9f:12:de:1b:05:a0:c9:2b:4e:77:b0:0e:3e:d3:12:
ca:c8:d8:11:df:7b:2d:e6:34:e0:f6:35:0d:8f:e3:74:c2:7b:
d0:e6:b7:ff:8d:8b:42:11:f1:89:b0:93:1d:57:4c:46:79:2d:
46:bc:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:57 2025 by rpki-client