Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier: l95woO+5SYSvBpIvhr8ONe2rGYlfLYf7aEdNroBVQjk=
Subject key identifier: 5B:E4:5A:00:C5:A1:8E:09:D9:7E:86:1C:27:DB:27:D5:AB:7B:89:53
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial: 019A4EF5059BE7F6784889B474E800EC11EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number: 065B
Signing time: Tue 04 Nov 2025 13:01:11 +0000
Manifest this update: Tue 04 Nov 2025 13:01:11 +0000
Manifest next update: Wed 05 Nov 2025 13:01:11 +0000
Files and hashes: 1: 1-i_f4gNCAnPwT26M-00faBCZ1ec.roa (hash: rf9DtMiWGOZOoz1U+iRouParfUgOp6ltk1lTfbvhGLM=)
2: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: gC086hV7Y3zGhCzcpSolyznltPh2gGKc9By8LRGu4tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:05:9b:e7:f6:78:48:89:b4:74:e8:00:ec:11:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Validity
Not Before: Nov 4 13:01:11 2025 GMT
Not After : Nov 5 13:01:11 2025 GMT
Subject: CN=5be45a00c5a18e09d97e861c27db27d5ab7b8953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:b5:d3:4e:50:22:a1:9c:2e:fb:44:8b:f0:
44:c5:63:11:64:a0:d8:8f:22:77:53:20:be:72:86:
de:ef:e6:89:39:a9:b0:c6:a2:3b:04:5f:d2:98:1a:
4e:80:38:83:22:f1:06:f0:04:1d:7d:9a:75:0e:8e:
bf:ac:0d:86:3b:b5:63:6e:77:85:54:82:73:60:e6:
6d:95:a0:61:a8:f9:79:0d:29:f1:2a:5a:73:2c:b6:
bd:1a:d3:4b:29:05:1e:1b:31:0d:05:c3:e4:d7:35:
05:2c:cb:d5:c4:2e:ff:3f:d8:66:34:c8:7e:07:04:
d4:6a:76:4e:a9:18:eb:ff:96:70:fd:3e:b3:49:00:
d5:5c:eb:fd:6f:e2:a8:17:0c:92:dd:42:6d:2e:25:
a6:21:87:65:01:7a:10:ce:68:53:74:51:51:63:b5:
4c:69:a8:5c:e3:0e:17:09:25:28:2a:fa:6c:bc:1e:
27:c6:71:9a:7f:8e:aa:23:3c:9e:5d:d0:14:6e:f4:
0f:ad:a3:13:c2:12:89:36:5f:ff:05:01:00:d6:6c:
00:b6:d4:ee:39:a9:4a:c9:ae:eb:2e:37:fb:a7:2e:
15:41:62:12:32:2f:03:b2:25:ac:cd:d3:f3:63:f4:
ba:64:3e:a8:74:68:d8:05:7b:b7:27:e2:4b:7d:4b:
27:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E4:5A:00:C5:A1:8E:09:D9:7E:86:1C:27:DB:27:D5:AB:7B:89:53
X509v3 Authority Key Identifier:
keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d6:fb:2a:f0:32:92:ec:8d:4e:88:88:e1:cb:66:5f:55:b1:
6f:d9:f3:fe:67:e3:7d:19:37:c5:a5:7d:21:f8:e2:99:62:d1:
90:c0:12:53:86:69:52:0f:5a:ec:09:96:cb:86:a0:29:ff:ed:
4e:46:ae:c9:0f:0a:6c:6f:94:21:a9:7c:fe:7a:da:56:8d:27:
e6:b5:58:89:18:45:5e:13:be:cb:a0:14:18:67:6f:1d:e7:70:
16:94:01:75:4d:8a:2a:ba:f7:4f:15:d9:7f:2f:22:67:b7:dd:
c2:56:6c:6e:8a:52:29:a2:0c:37:fe:ec:06:c8:5d:7c:c9:e9:
48:6e:e5:c3:f9:93:42:2c:21:b5:7b:3f:25:ee:c4:c9:84:0a:
af:f6:ff:db:5e:ce:f9:f6:39:3d:89:fc:7a:1e:6d:6c:34:78:
d1:bc:7f:7f:f5:be:7d:6f:bc:2f:e7:ea:51:eb:ec:09:5e:4f:
5d:a6:5f:ad:b3:57:8b:2a:63:2f:ca:f9:dd:c4:9d:83:3f:5b:
24:d5:c1:4f:58:4e:e4:c0:51:8b:d4:b0:6d:2b:64:e1:31:34:
b8:46:6a:d8:dc:57:02:34:ef:2d:2f:08:c0:ca:0f:20:0b:94:
ce:dd:3f:a6:d0:66:c3:de:fa:1f:35:8e:64:1d:b4:6e:df:00:
5d:4d:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:24:56 2025 by rpki-client