Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
File: hEoXkcsH8dhhI8Y9w63P11TbEBs.mft (raw, json)
Hash identifier: 06mC3nmpz0h2TQt9FIECHOITGwqEJ7RV0cuse5SZhR0=
Subject key identifier: A1:E6:07:C8:D5:44:D1:CA:F0:24:0E:F7:ED:60:D8:03:C2:3D:DC:36
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 019A4F6228ED1D8AF6D90625A9498817EF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
Manifest number: 0B1E
Signing time: Tue 04 Nov 2025 15:00:24 +0000
Manifest this update: Tue 04 Nov 2025 15:00:24 +0000
Manifest next update: Wed 05 Nov 2025 15:00:24 +0000
Files and hashes: 1: Ihp0VP8oRNeTGrBSGwpts6D1JhE.roa (hash: Qldf3LszJ2g2XwaE6LEoxPc+aR59tijRa50IN/mT6PY=)
2: gi2zaUr2ngLXfM8NV7jNPdt_PFI.roa (hash: pPPLz9b8ntu+6vKYV+GHcDLfS03p/6Pt+aGjIk5ADdw=)
3: hEoXkcsH8dhhI8Y9w63P11TbEBs.crl (hash: 7MK+0KWrdch1MqBy4q8oU+Il4+KNIGygFWhtgGle1tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:28:ed:1d:8a:f6:d9:06:25:a9:49:88:17:ef:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: Nov 4 15:00:24 2025 GMT
Not After : Nov 5 15:00:24 2025 GMT
Subject: CN=a1e607c8d544d1caf0240ef7ed60d803c23ddc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:76:74:4b:ea:52:e3:d0:4b:b1:08:36:e0:
19:e1:99:f9:5b:4e:56:71:4f:e0:db:30:37:09:c8:
27:c7:8c:a3:63:e0:61:d0:cf:0e:a0:5f:0a:86:de:
2a:7c:f5:7b:b8:fc:dd:e2:ae:7a:36:96:19:bd:5b:
08:8e:33:f8:ad:ce:c6:89:15:b2:e7:a5:46:6c:cd:
3a:2a:63:04:37:47:b9:91:64:ff:89:04:9e:31:8f:
00:00:7e:f1:bd:e7:44:92:12:f0:73:1d:72:8f:4b:
d3:15:65:57:b9:3a:ac:ba:cd:4f:24:5d:bc:a6:aa:
4b:05:b1:20:17:7f:e9:8f:90:ed:52:2f:b0:26:50:
79:91:0e:a5:a0:7b:a5:70:32:90:a9:88:9e:ca:70:
ca:4b:b2:c6:3c:6a:ae:8d:f3:1f:27:ae:25:8d:2e:
7e:02:be:51:33:61:64:87:2a:ad:f6:87:f4:04:19:
13:13:44:2c:e1:b4:76:44:bf:1b:fb:bd:6f:6d:67:
75:38:9d:c9:33:74:02:3a:6b:bd:03:1c:78:8b:08:
76:c6:a6:3d:37:3e:e0:c0:bf:e7:04:fc:e9:41:25:
d9:39:e1:42:0d:f3:e4:b2:96:b8:75:da:d8:ec:a8:
30:8e:27:67:02:29:68:71:2e:dc:73:35:55:fb:27:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E6:07:C8:D5:44:D1:CA:F0:24:0E:F7:ED:60:D8:03:C2:3D:DC:36
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0c:e1:6c:93:b1:e8:0a:09:58:a8:71:1b:e2:ba:f0:e0:35:
b1:ee:4a:96:9b:68:e5:74:8c:d0:1c:75:68:99:c0:9a:01:24:
a6:8b:ef:15:41:53:3e:c2:35:30:bb:78:8b:79:33:bc:9e:5c:
28:d2:dd:d2:3b:8e:f8:94:ba:3e:5d:70:ec:e5:ef:80:90:1c:
56:07:a0:0b:21:9b:e6:4c:e7:08:9f:2a:19:55:1e:72:98:93:
85:be:9d:f7:f6:19:d9:99:19:a2:0d:ec:b1:f2:80:96:6f:46:
42:f4:88:0d:1a:19:e3:c5:73:b5:2b:2f:1b:72:3e:cb:8c:2a:
1f:c4:d7:d0:9c:12:24:9b:5e:4c:d2:6d:7b:69:7c:f2:98:7e:
9b:f6:ce:c0:f4:f6:9e:41:22:14:09:20:ae:b6:76:d2:1f:8f:
16:14:fc:57:d9:14:f4:4c:77:be:35:c5:2d:93:cc:f8:3b:51:
96:40:7c:86:c6:af:ef:53:7e:36:ed:ac:66:c5:36:92:76:00:
18:08:32:04:0c:73:30:9f:7f:4c:14:af:a7:9f:69:49:c5:89:
68:91:eb:92:c0:53:98:b4:fe:4c:37:36:2c:4b:50:15:89:dd:
64:93:fb:c0:dd:c9:56:37:15:50:33:19:b5:67:72:6d:e5:78:
23:89:6c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:45 2025 by rpki-client