Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
File: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json)
Hash identifier: 05QI4JF07Rs1A/QuDKo+t2eo1UF6CwFUUEZTMJA/L1A=
Subject key identifier: 7B:7E:BC:9B:95:7D:82:38:13:94:43:4D:10:2E:ED:CB:D7:DF:0C:55
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial: 019A503DBFBF9EB3CC652BE576C6F2EF62E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
Manifest number: 101B
Signing time: Tue 04 Nov 2025 19:00:15 +0000
Manifest this update: Tue 04 Nov 2025 19:00:15 +0000
Manifest next update: Wed 05 Nov 2025 19:00:15 +0000
Files and hashes: 1: a7s4IVc6pbucBFcHXkR0racHnFI.roa (hash: 8KV2P9IHJpLQQ3jZXVSSowUOoz10VVeNpPastctIMEs=)
2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: C2IsJvFRfVjHfjk9Y384FQG/jIHQ8fY4l9Jsf2LSoj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:bf:bf:9e:b3:cc:65:2b:e5:76:c6:f2:ef:62:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Validity
Not Before: Nov 4 19:00:15 2025 GMT
Not After : Nov 5 19:00:15 2025 GMT
Subject: CN=7b7ebc9b957d82381394434d102eedcbd7df0c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:83:a9:53:78:98:31:f2:3d:8c:fe:e9:ff:
14:dd:e2:52:bd:31:c9:15:1d:8c:91:6b:4a:8b:5a:
f9:e5:01:34:4e:5f:e9:39:99:40:4b:c9:9d:64:1a:
1a:71:f2:21:1a:47:32:5c:e7:37:39:02:7a:c9:d8:
7f:2c:85:73:43:fe:b7:b7:24:aa:bb:06:43:74:8c:
53:b8:0d:db:38:96:c3:7d:c5:c6:bf:6e:d9:23:17:
c3:35:b4:d5:1d:b3:d5:94:01:42:f3:a7:21:5e:6b:
fa:28:40:d7:b0:22:08:3a:6a:fd:a3:0b:19:e6:52:
6c:da:a9:6f:07:a6:ff:be:99:63:38:a2:58:46:ba:
ed:01:61:aa:2b:1d:2a:b8:2c:9e:30:11:a6:3f:25:
f4:57:67:8b:11:d0:f1:0d:55:a4:19:3b:b2:74:15:
f6:4e:ee:78:81:c5:35:dd:c5:80:fc:77:f7:80:f3:
e1:8c:a8:18:fc:91:90:62:76:5b:08:70:81:fd:00:
5a:ae:36:fd:08:e0:26:e0:e2:ea:e4:ad:26:3f:31:
39:bb:41:c6:b4:96:e9:ad:a7:82:f7:3a:1f:18:44:
1b:48:1d:95:61:c7:67:07:f2:be:e4:c8:13:f8:3d:
7d:4f:1c:ad:47:21:18:43:94:7b:e1:ef:21:c0:71:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7E:BC:9B:95:7D:82:38:13:94:43:4D:10:2E:ED:CB:D7:DF:0C:55
X509v3 Authority Key Identifier:
keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:41:e9:60:ce:e0:b3:a3:10:2f:69:65:ad:11:09:7d:b5:47:
cb:af:d0:3e:6d:d9:fc:49:05:bb:aa:5b:9e:14:3a:e3:a0:bb:
a5:aa:08:08:ef:69:c8:92:df:eb:57:b0:81:ee:42:64:72:1c:
57:68:9a:75:06:a9:e2:0c:60:70:3e:00:e2:c8:19:41:a5:e0:
ff:0c:02:86:11:19:05:10:98:5d:03:1a:50:b8:0c:e9:a6:ce:
ea:de:3c:47:29:ce:8b:85:73:1b:f3:58:da:a6:ca:7d:a7:c0:
10:ae:04:fc:d1:25:ad:0e:5a:52:db:b8:99:02:b6:81:74:5b:
a5:ea:d0:a4:22:b0:78:75:aa:72:f3:a4:31:34:48:19:eb:0b:
c0:5b:41:f8:f8:a9:1d:f1:78:e7:76:32:21:e1:41:a7:c3:8c:
8b:ba:73:85:ff:63:9e:e6:26:b6:7a:0d:f4:c6:0c:fe:b9:e8:
3f:db:e0:89:74:d7:f4:97:a4:77:13:5f:d6:17:ba:60:4f:e4:
fd:3b:b4:a8:0c:37:ef:ba:61:91:da:71:ec:c5:72:21:88:67:
3e:63:2e:03:67:b5:8e:20:da:f3:96:26:fd:32:f4:b7:f9:ef:
48:90:38:b7:cf:ec:c8:ef:55:19:03:dc:1b:d7:a5:84:6e:b7:
ab:2e:e1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:01:37 2025 by rpki-client