Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: vOAo6yzrrtYcoiw4OQwIuPj6XQfY+WjlOY9SL4OwBfU=
Subject key identifier: 52:42:9C:AD:2E:57:93:A2:6E:32:FA:00:DC:4C:E3:AF:81:05:51:EA
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 019A51194A309A7210584030BEB9206F1810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 13B7
Signing time: Tue 04 Nov 2025 23:00:03 +0000
Manifest this update: Tue 04 Nov 2025 23:00:03 +0000
Manifest next update: Wed 05 Nov 2025 23:00:03 +0000
Files and hashes: 1: D3bRMlTDClBFr3S51rSxiY9VG9A.roa (hash: aR3n5btl/hz9D4qsdHX0kbRtCNTOPvoaLGVTTlP76Qo=)
2: ZxguzW17xFrUP53FIAJUfjkeqvQ.roa (hash: Sn/df7xibUqHylpF6Ngt+9h48Sxd84uF3fpZ9SuTgf8=)
3: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: Uvr74JEufWS9yaD6DdglSXuzj1e25b7jhHLuMsKXAmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:4a:30:9a:72:10:58:40:30:be:b9:20:6f:18:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Nov 4 23:00:03 2025 GMT
Not After : Nov 5 23:00:03 2025 GMT
Subject: CN=52429cad2e5793a26e32fa00dc4ce3af810551ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:1f:fc:d8:8c:70:8b:37:12:1a:5d:88:f9:
b2:41:a5:ba:5c:1f:fa:8a:22:b8:c1:a9:ed:d4:80:
f8:9f:f1:77:cd:d3:e1:4b:b3:26:3b:ec:11:0f:d8:
5e:d2:f4:85:3b:13:f2:fb:35:1e:d2:c2:55:1f:09:
4c:3a:58:ac:81:90:be:54:c3:fb:53:f6:fa:37:51:
f2:34:2e:5a:2c:d5:50:b2:00:ff:26:ad:90:c9:d2:
98:88:e6:4f:38:15:e8:2d:d4:d8:3a:a0:07:9a:e5:
56:a1:16:e4:a3:14:fc:4d:b7:1a:94:da:b0:f0:3b:
c6:93:6c:38:76:4d:5d:51:11:5f:62:72:ad:5b:d6:
d1:e3:7c:d1:86:c1:02:75:9f:b8:82:ce:f2:32:a5:
18:27:c7:91:08:28:de:5a:ca:95:eb:58:e4:b6:90:
9b:a9:4f:ef:bb:d8:86:a1:de:d3:de:5c:c2:4b:d8:
48:f4:fb:0f:61:8f:a0:1f:8d:4b:c4:de:f7:12:39:
83:f8:25:d4:00:f9:17:79:ee:97:6f:66:56:4a:8d:
3c:7b:21:7b:7b:29:8f:0f:81:29:69:4a:5e:3a:f0:
a0:4c:dd:47:5a:65:4a:17:bc:53:10:e1:f2:4d:68:
16:21:ab:2e:6f:c9:ac:37:d7:0d:94:2e:19:9c:2c:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:42:9C:AD:2E:57:93:A2:6E:32:FA:00:DC:4C:E3:AF:81:05:51:EA
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e5:27:35:95:bf:fd:10:8c:bc:05:76:2d:f8:81:54:af:e6:
5c:87:e4:98:6d:38:30:03:a4:a9:b2:ad:e7:74:7e:ab:de:02:
1b:fb:bc:cf:0e:ea:57:da:07:40:e7:b0:22:9a:01:69:32:ba:
5c:b2:f8:ce:a4:be:5a:9c:5f:99:c5:00:ca:d3:4b:41:2c:02:
7e:15:83:ba:73:3f:89:4d:cd:90:7f:29:68:9a:b1:54:92:25:
70:d6:c2:f3:31:65:70:d6:b0:81:eb:62:cf:77:ec:81:25:b7:
e1:f9:4e:e5:15:eb:ca:d0:cf:c5:89:e3:bf:97:6a:52:8c:a8:
14:a6:a5:3c:ee:e0:36:46:e2:db:a9:3d:2b:97:64:68:36:2a:
ce:e3:21:09:2d:5f:83:7a:ea:8f:82:dc:61:49:58:93:65:49:
69:24:74:c0:18:c7:9d:c4:f5:95:f5:05:b1:e5:0f:9f:91:7a:
79:64:22:e3:a1:bb:41:cf:66:f6:a6:ca:27:23:1e:2c:5e:ec:
0f:06:c3:15:9e:da:c9:ae:e7:d3:5b:e7:30:c6:ae:2f:10:5b:
88:12:5b:6a:d8:23:ae:42:59:f0:6a:a5:ec:fb:21:6a:e5:c7:
74:17:34:f0:85:8e:47:4e:02:7b:bb:e7:2c:ed:85:44:15:5e:
c0:80:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:38:18 2025 by rpki-client