Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File: hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier: c0mpnJzU3be0EefQA8s90tvAYKtFLP2i4OMhAGgY74E=
Subject key identifier: 90:26:E8:00:3F:3B:78:92:A6:D4:E8:AE:91:9E:51:EC:AA:B6:6D:9E
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 019A4E86D31F43823157EC10AD5600842F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number: 100D
Signing time: Tue 04 Nov 2025 11:00:49 +0000
Manifest this update: Tue 04 Nov 2025 11:00:49 +0000
Manifest next update: Wed 05 Nov 2025 11:00:49 +0000
Files and hashes: 1: CikwBtDrpk_Y04YCbOYT8RF-nag.roa (hash: FALNdfrlSyLhlDyqgC3nieyWRWeKqBpM0mehDp7pdN0=)
2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: xvPaiZM4GQAcwI5sB+OUVeObA5me6xNS3wMB+d1lyAg=)
3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:d3:1f:43:82:31:57:ec:10:ad:56:00:84:2f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Nov 4 11:00:49 2025 GMT
Not After : Nov 5 11:00:49 2025 GMT
Subject: CN=9026e8003f3b7892a6d4e8ae919e51ecaab66d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:55:03:c4:a1:3d:e4:a5:c1:6a:3e:67:08:
76:54:ce:c3:9e:34:dd:4a:b7:a5:ed:8b:40:5e:b6:
bc:88:c2:5f:01:96:e6:91:1a:62:ae:1f:40:86:c2:
09:ad:79:f1:1b:64:ce:b9:da:aa:2e:13:04:b7:67:
e1:cf:d3:07:21:d8:97:77:d8:5c:16:aa:20:44:07:
2a:0f:4d:c2:1b:29:f7:9d:a4:77:31:be:40:8f:62:
f3:b2:e4:88:f9:85:11:90:90:18:14:3a:42:83:07:
73:d9:3c:79:be:9f:d6:1c:ba:17:0c:d4:0a:e8:d0:
b9:81:a5:37:25:51:03:28:bf:43:c6:83:cc:c4:7d:
19:30:4f:1d:16:60:7a:dd:67:3c:ff:9b:5c:0f:13:
e8:fe:8f:48:0b:8a:df:39:9b:da:28:9f:7d:72:aa:
0a:ee:9f:cb:0f:85:95:e2:5b:eb:30:de:38:61:d8:
1b:06:0f:1f:9e:e2:27:16:bf:88:e2:05:8c:4d:e3:
52:d8:f9:a6:c6:fd:14:13:6e:33:21:f0:05:05:29:
74:c9:28:40:8b:03:4e:b6:20:78:3a:4e:9d:ec:df:
b6:0a:11:23:9b:8c:91:20:47:63:1b:4a:c9:da:2f:
e6:35:39:0c:10:68:11:d8:ff:24:18:15:93:ac:78:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:26:E8:00:3F:3B:78:92:A6:D4:E8:AE:91:9E:51:EC:AA:B6:6D:9E
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ce:c0:c3:dd:d8:9a:6d:c7:bf:e4:1b:7c:58:e6:3b:9d:35:
96:64:57:52:5f:aa:69:55:8e:99:d3:16:42:32:e6:0e:f2:d9:
9d:fc:a8:44:0d:29:a9:c8:a0:ee:4b:8f:22:18:af:7b:e4:fc:
ef:6a:a2:54:e6:55:33:dc:11:b3:ff:af:15:5c:0e:a3:bc:69:
77:80:c4:e1:b3:0d:c5:1a:64:8d:89:ea:5f:8c:af:08:d1:dd:
69:15:e4:32:83:70:c0:9f:68:c4:56:42:1a:f2:fc:fe:77:20:
66:17:36:47:79:c1:c4:cd:58:04:8d:56:15:63:20:e4:ec:11:
37:a6:ca:ec:8e:fc:f6:20:1c:6e:96:7b:6e:52:dd:a4:38:51:
76:31:3e:95:d8:cb:cf:3d:41:f0:7f:04:54:5c:75:43:a2:7f:
0a:15:26:af:ac:f6:fd:14:e6:31:a5:b4:b5:3e:1d:92:56:b8:
94:5a:55:f8:58:00:1b:e1:84:1f:b1:e9:c2:8f:de:f5:ff:c6:
55:5a:56:68:98:1b:73:ae:82:10:9e:57:65:3e:8b:dd:99:d9:
db:29:cc:06:bd:8e:5f:90:0e:dc:9f:c5:fd:98:02:0b:fb:9b:
f8:82:bc:0c:17:c0:63:07:a4:34:2d:29:e8:ea:2a:39:8d:d7:
00:19:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:31 2025 by rpki-client