Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
File: hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft (raw, json)
Hash identifier: E7bM+iK3/2VUr1Pbsw5n322nz8MTz20T90VYUGMcqSQ=
Subject key identifier: 2C:DB:E9:12:FD:DE:3D:46:17:8A:B2:60:53:D9:31:2D:0F:C9:94:CA
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Certificate issuer: /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial: 019A4FD09FDAE5DACD917BAFC77713FE36A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
Manifest number: 0A6B
Signing time: Tue 04 Nov 2025 17:01:03 +0000
Manifest this update: Tue 04 Nov 2025 17:01:03 +0000
Manifest next update: Wed 05 Nov 2025 17:01:03 +0000
Files and hashes: 1: hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl (hash: nVEBVzQhR5DD9RLk6kZGZgQk9NyJeXqC55TFxk2yXEY=)
2: nkA7CUcmlzAJuGx_3HjuUPjmAbc.roa (hash: FtjNcs/Ikv5rVNiwdDeOxS0oJdHrtBYVifsyHe4+WbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:9f:da:e5:da:cd:91:7b:af:c7:77:13:fe:36:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Validity
Not Before: Nov 4 17:01:03 2025 GMT
Not After : Nov 5 17:01:03 2025 GMT
Subject: CN=2cdbe912fdde3d46178ab26053d9312d0fc994ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:41:18:41:56:a7:07:2f:c3:ac:ee:85:14:
46:e3:4b:d0:51:9e:75:43:12:3b:2c:49:f2:1f:dd:
08:fa:dd:19:73:e3:ec:04:c5:97:a0:1a:70:1c:75:
09:fb:6f:0f:5d:a4:b1:f6:b1:64:5d:14:fb:8f:d1:
b4:6a:9d:71:87:a1:22:b1:5f:4d:59:a7:14:30:62:
d9:4b:59:94:fb:0c:f6:16:44:88:27:ca:89:0a:1d:
bc:aa:67:b5:49:b8:ef:1d:9c:7e:23:25:cf:08:8b:
bb:42:f4:7d:5d:5f:9c:74:ed:13:01:37:0a:3d:4e:
88:29:43:a2:9e:0b:94:b3:26:1b:22:25:8f:2b:99:
a9:5c:c6:18:0a:dc:aa:e7:d2:83:88:dd:93:a0:30:
8d:5e:7a:c9:8a:02:4f:06:de:e7:1c:56:c7:05:c8:
ee:ec:5b:a5:0c:86:40:ae:89:80:2a:dc:ff:65:1c:
c1:91:26:2d:60:c5:04:64:16:f7:48:d3:fd:93:36:
a9:ad:fe:1e:a6:78:cd:ca:64:5b:9e:ce:7e:ed:48:
10:f3:69:6e:a9:a2:1e:61:c0:d7:ba:fd:07:cb:53:
ad:3c:f7:3c:04:c4:06:57:47:f7:f0:58:7c:2b:20:
bf:70:af:75:e3:23:ba:d7:b5:a5:96:27:94:19:ac:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DB:E9:12:FD:DE:3D:46:17:8A:B2:60:53:D9:31:2D:0F:C9:94:CA
X509v3 Authority Key Identifier:
keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a4:b2:99:4e:24:1f:d6:33:7a:61:16:bf:6a:0c:e3:20:09:
b8:59:8f:91:6c:de:c6:4c:43:db:32:63:17:71:d1:93:98:f0:
01:7c:1c:1f:24:2f:7b:ca:83:b8:ce:bb:73:11:e1:d0:78:b2:
c1:0b:90:d9:5f:21:21:e8:9f:df:05:af:27:e3:91:b0:76:87:
a7:ac:a2:0e:ed:15:ff:63:89:b8:36:41:ee:a8:a2:4c:0c:6b:
34:eb:6a:e4:a8:f0:38:55:de:99:4d:76:b7:e6:12:7d:57:44:
e8:eb:32:3e:f4:b1:5c:5e:14:39:c6:78:4b:cc:27:eb:06:50:
5d:f9:f8:d7:ab:d2:86:f7:04:4c:f8:aa:19:36:40:3f:de:c1:
2c:43:01:c6:7b:4c:c3:71:7a:89:97:55:96:46:7c:ed:f6:fe:
cc:3e:16:09:d8:4c:5c:f7:1e:ef:c8:c9:d6:b7:45:6c:23:22:
f9:43:9d:e3:26:ee:6b:dc:fb:42:0b:c2:9a:90:9d:51:92:46:
8e:fd:4e:f2:e3:bb:58:a9:60:ee:4c:ab:62:75:1c:52:6e:e7:
e6:d0:33:e8:94:bc:0d:f2:e5:e8:8d:10:45:bc:20:da:2b:23:
54:68:ea:5e:76:41:cd:84:3c:b6:d5:10:e1:f5:f2:6a:bf:d7:
4c:3d:27:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:44 2025 by rpki-client