Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: vthFaU1ZqZi5A0JtViVYKAowLsvh/fSjY3QUuLYZH8s=
Subject key identifier: 2F:11:7E:A1:98:38:9C:56:A1:0E:87:CB:40:BF:2D:1E:DC:F6:68:8C
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 019A4D740C97B8D9ADE523CC35448A4B2033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 06:00:42 +0000
Manifest this update: Tue 04 Nov 2025 06:00:42 +0000
Manifest next update: Wed 05 Nov 2025 06:00:42 +0000
Files and hashes: 1: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (hash: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=)
2: UNDXrDbQNDGfw9Atw8J1Rhg9324.roa (hash: wsuYDSHLl9ueT9Z/8hPQn0p6GzwP0XVwWj6eE/OeB10=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: alAApG078PAJIKY7Tdx/1e4YhyIacPyifDWBahQbG94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:0c:97:b8:d9:ad:e5:23:cc:35:44:8a:4b:20:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Nov 4 06:00:42 2025 GMT
Not After : Nov 5 06:00:42 2025 GMT
Subject: CN=2f117ea198389c56a10e87cb40bf2d1edcf6688c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:2e:d5:db:d7:3f:20:65:a0:44:86:a7:a6:
91:58:57:d6:75:ea:b7:d7:6c:06:1f:87:78:6b:0c:
a8:2b:60:40:de:ce:a7:0e:5e:6e:b3:6a:f5:ee:01:
ca:76:08:4e:77:b1:5d:69:5c:bb:09:d1:ff:ec:76:
0e:b2:07:5e:fe:75:33:29:f1:31:20:bc:ec:c1:c5:
5b:c7:84:a4:c1:2e:72:1f:b8:ac:4b:40:7b:13:04:
fe:aa:e4:3d:06:ca:2d:7f:f2:3d:31:b4:bc:55:1d:
bb:de:74:29:e2:05:45:10:0c:01:d9:b2:c6:79:63:
74:40:8b:3d:13:e5:84:6b:84:ad:0f:b4:25:84:db:
03:47:b7:2c:ac:97:8a:12:1e:92:71:35:87:8c:36:
ff:ae:b7:60:f7:ab:67:1b:a7:81:a4:a6:1d:a2:4d:
a9:15:ad:25:58:4f:45:e2:3d:fe:c7:9a:0c:ea:62:
06:83:de:00:56:43:ec:85:7a:05:25:a7:31:cc:a9:
b3:cb:b9:5c:c8:a4:63:d8:19:af:a1:cd:96:a1:f0:
a3:18:02:24:31:d2:d0:0d:39:82:7b:50:ce:8b:83:
99:a2:46:04:eb:ce:81:85:da:49:99:3c:57:ba:ce:
c1:a0:54:33:99:a7:1d:11:c8:a3:57:6e:65:aa:59:
97:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:11:7E:A1:98:38:9C:56:A1:0E:87:CB:40:BF:2D:1E:DC:F6:68:8C
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0e:67:2e:a8:58:3a:57:b1:2b:56:83:78:b3:33:dc:4a:d0:
9f:8a:37:ad:5d:90:81:94:61:d8:03:7c:b9:b4:5c:e5:f7:48:
98:7b:74:bf:6c:4d:fc:61:fb:b9:bf:3d:d6:0b:e4:07:d1:ed:
8c:37:51:68:ed:38:4d:18:f0:47:5f:f3:4f:af:33:5b:ee:a8:
13:c3:1c:5c:a1:ad:0b:0d:7b:2c:f4:02:7e:8a:b7:17:05:64:
e0:5c:cc:7e:ee:c1:ca:b4:4d:a3:1c:2a:52:7a:35:d5:04:7f:
d9:3f:b2:4a:55:58:ef:f9:28:4e:6f:79:8a:9c:93:a2:df:73:
ea:3a:bb:9c:94:a0:7d:ba:4a:c4:e8:2f:10:3c:a8:e8:37:a4:
d9:f3:f3:34:04:c4:04:20:5b:49:2d:23:41:cd:51:d8:7f:cc:
4c:5f:1e:d5:7f:d0:6c:aa:95:1d:41:29:d8:eb:04:71:d4:5d:
28:df:e6:e7:2e:be:6e:62:c0:e2:89:fc:39:3f:ed:d3:85:12:
ef:6d:05:5e:d7:3a:84:de:82:72:dd:e7:f5:5f:17:d9:a3:0d:
df:51:52:1b:57:e2:b1:31:b9:12:63:29:33:e3:da:5f:a0:cb:
15:ad:e9:a9:72:ad:50:ba:4a:36:cc:0b:24:78:2a:b2:a9:77:
b8:6d:e2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:43 2025 by rpki-client