Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: fPhksjwafqzJgmraQFMrAfZ82o2anZi1pMz74YaxHKY=
Subject key identifier: FC:C2:74:51:FA:08:28:C7:6F:CA:F7:92:07:75:22:56:70:4D:2E:BB
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 019A4D7469046ECE03877E841FD1A218C8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 1442
Signing time: Tue 04 Nov 2025 06:01:05 +0000
Manifest this update: Tue 04 Nov 2025 06:01:05 +0000
Manifest next update: Wed 05 Nov 2025 06:01:05 +0000
Files and hashes: 1: BYVEd7xc3EBzXbLQU0wScv8W8vM.roa (hash: eCnXcs4Xd2N+nO1T0PH3Iw+HOsHQZJC8Zr12UJP7ABo=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: 2IllGOCrDHxG9wY2OiZJnvT6G68eQh58+Vh4250/wbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:69:04:6e:ce:03:87:7e:84:1f:d1:a2:18:c8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Nov 4 06:01:05 2025 GMT
Not After : Nov 5 06:01:05 2025 GMT
Subject: CN=fcc27451fa0828c76fcaf79207752256704d2ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:3c:94:28:f0:09:dd:e9:b4:ee:f1:ed:73:
71:19:7e:5b:36:c3:18:de:83:88:13:a7:23:d4:74:
06:03:26:fd:e2:83:2c:60:c7:5d:7a:45:92:af:1a:
08:e6:bd:bc:3f:58:95:5c:cf:6f:01:07:fb:1a:f4:
26:31:66:9b:8a:93:3b:70:34:bc:28:2f:d5:a7:38:
33:df:58:94:33:97:be:a3:d0:bb:6a:b7:c3:c7:4e:
fe:58:d5:7b:6d:e6:1c:7f:55:8d:e8:3f:18:00:19:
31:4a:11:97:d3:ab:dc:ff:83:9e:b2:f5:78:11:e7:
9a:09:f8:f0:09:09:f0:da:04:fb:a1:e3:e4:d3:eb:
0b:17:ea:f6:3f:e9:b1:92:14:d4:ec:8f:22:0e:a4:
64:b2:16:af:97:31:47:f4:12:0a:35:98:16:45:fa:
85:92:3c:63:67:7b:bf:ec:65:14:86:6f:46:ae:34:
f2:56:28:95:b8:9f:ca:88:5f:38:58:6e:25:6d:8e:
21:58:0d:78:c3:0b:53:73:51:f0:50:ee:b3:c4:15:
0f:78:e0:2c:46:90:a1:8d:25:c9:e7:8b:d3:12:ba:
3a:0e:6b:71:51:64:b6:27:a0:d9:fb:1c:34:b0:af:
1a:94:60:95:07:4c:3a:77:61:c3:bc:ff:11:0e:ae:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C2:74:51:FA:08:28:C7:6F:CA:F7:92:07:75:22:56:70:4D:2E:BB
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:81:a5:3b:b3:93:49:81:e7:62:69:d8:3d:8f:b8:80:88:3e:
9c:2e:f2:61:1c:dd:b5:1b:5d:ac:45:e9:d0:9b:5c:d1:52:a4:
77:00:d6:e6:4a:e9:8d:91:ed:ec:e3:01:19:22:5e:bd:ee:10:
4f:57:82:bb:f0:90:f4:1a:59:04:b6:ba:b2:97:13:1f:4d:16:
89:94:f1:3f:65:52:0e:c8:61:b8:49:f2:d8:c9:94:0f:1b:cd:
10:ae:38:d9:f6:90:4b:5a:89:57:a2:3e:e0:be:65:2e:53:06:
c4:2c:26:e6:7b:12:62:db:27:c6:5e:8b:91:1e:28:e1:a4:09:
5b:c4:18:a2:d2:9f:93:06:03:08:95:f9:8a:a9:ab:3b:85:ef:
4e:73:f6:04:69:14:ae:8e:04:2d:61:07:15:ab:28:65:e9:e2:
e8:d1:43:ea:7b:a6:18:b2:47:db:71:e1:fd:ad:8e:12:78:52:
a9:97:87:64:9a:d9:56:cd:fa:3f:8f:56:8c:c3:ed:17:d9:db:
4f:f6:db:72:ae:63:b1:f6:0c:60:62:ee:18:c1:18:19:e4:d4:
62:97:12:45:ad:c0:ea:c3:20:47:73:a1:de:30:c1:cc:20:97:
f2:84:7e:72:53:9f:a6:4a:e2:d0:06:b2:d3:50:28:83:1d:28:
79:0b:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:07 2025 by rpki-client