Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
File: hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json)
Hash identifier: QLEY3hhZQFiTJOdiQv97XZrG581ZDpO4H3cGsnWMfD4=
Subject key identifier: FB:EB:C9:90:F1:58:C1:88:8A:0C:AF:9E:62:DD:7C:EB:23:54:A1:89
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 019A4DE1A1A7B136C22503B1B56EA7B2A2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
Manifest number: 1238
Signing time: Tue 04 Nov 2025 08:00:23 +0000
Manifest this update: Tue 04 Nov 2025 08:00:23 +0000
Manifest next update: Wed 05 Nov 2025 08:00:23 +0000
Files and hashes: 1: IDSoal-WPRQg2kggJnZlgyY7mtI.roa (hash: juWvqJns3UfT6SO2SE3jBpIvpwCfu+sMyWgDyL3Cs3I=)
2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: anoRMKlU4QWQWQwjrlzsVIBZxFE+m1w4bsaxziHDegY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a1:a7:b1:36:c2:25:03:b1:b5:6e:a7:b2:a2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: Nov 4 08:00:23 2025 GMT
Not After : Nov 5 08:00:23 2025 GMT
Subject: CN=fbebc990f158c1888a0caf9e62dd7ceb2354a189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9e:00:b1:93:d9:6d:67:0a:c1:74:18:fa:57:
88:ff:e5:aa:fb:dd:c5:77:3c:94:66:80:37:48:81:
93:34:21:bc:e1:7c:65:1b:6d:d5:24:46:4a:b6:db:
1e:11:a0:51:c5:8d:5f:23:71:9b:95:60:b1:15:b4:
e9:54:bb:e7:9d:29:47:35:2f:f2:2c:51:7b:c5:ed:
aa:17:4a:57:0c:7c:2b:28:c3:3d:54:d8:89:88:4e:
66:e6:26:27:39:d6:d9:78:6c:3d:25:0f:d8:c3:fe:
3b:d5:c3:84:08:9c:30:8f:2d:29:48:51:da:61:e0:
bc:ff:6e:52:11:03:d0:89:41:ba:ca:20:77:5f:5a:
ef:85:36:c4:27:09:8a:4a:ab:df:f5:7f:ef:43:5a:
08:01:16:e0:c8:22:40:5f:ca:7e:9d:4f:2a:ba:46:
71:6f:16:b6:b6:33:a4:c3:d3:0d:89:a5:22:ae:93:
c8:f8:bd:13:88:13:a3:42:49:8a:b2:3b:bf:02:7f:
16:29:f1:54:ed:4d:8f:1d:e7:7e:94:44:93:78:52:
6a:08:4f:46:b0:f7:6a:f0:bb:03:b8:29:79:c4:10:
23:f7:9f:3b:f7:69:d8:95:ef:8d:b7:1e:f6:3e:cc:
b7:02:7c:3a:65:15:f9:42:18:f8:a2:67:45:a6:de:
25:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EB:C9:90:F1:58:C1:88:8A:0C:AF:9E:62:DD:7C:EB:23:54:A1:89
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4a:09:fa:0e:7e:92:50:94:e9:ce:21:9c:16:ce:85:6a:12:
ce:42:d7:9e:d2:39:e6:ef:2f:c3:68:c3:ec:b8:e0:62:d9:1a:
81:f3:37:b6:d2:6b:e2:db:ed:ed:df:70:94:cd:12:f6:8f:b3:
2d:c9:ac:34:fe:ee:9c:44:53:1a:0c:63:39:fc:29:ae:63:f2:
e9:cc:dc:92:25:b4:a7:01:e6:d4:e4:cd:c7:4c:ea:94:02:55:
9b:df:a4:5a:89:63:d2:1e:4d:27:30:3c:82:b4:6a:68:73:d2:
cd:1b:d4:ef:8e:d2:6e:bc:13:2c:a3:13:b0:c4:d4:6a:ea:46:
e2:36:a6:b2:06:57:7e:31:92:fd:cc:22:41:c1:68:0a:d6:5d:
86:cc:f6:a2:bf:8f:4e:8b:05:d7:2c:b5:e2:d5:fd:b1:78:08:
11:f8:8f:10:ff:6f:11:d0:5e:2c:92:a8:07:7d:11:fa:07:51:
b0:43:0b:a1:8f:a7:3e:aa:f9:6f:43:ef:16:96:68:9f:5c:38:
c7:1e:86:04:f8:0d:78:3f:5c:db:26:a0:b1:db:ca:7c:bf:50:
60:02:c3:eb:a4:c5:20:7e:09:1f:28:dd:10:f7:04:13:92:17:
01:8b:40:04:88:b3:d4:11:2c:37:17:99:0a:fe:26:05:38:95:
3b:8b:7b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:09 2025 by rpki-client