Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier: 1qvtG49pxOakS14jAcX4mE+0bDqGSp5DVDfqDnIA4DY=
Subject key identifier: D4:D6:E4:E2:47:4A:C5:BA:2A:A9:49:E8:69:6B:EF:04:CC:96:41:78
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 019A4F62CE3D271EA5BFCA9D506B51657C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number: 07B6
Signing time: Tue 04 Nov 2025 15:01:06 +0000
Manifest this update: Tue 04 Nov 2025 15:01:06 +0000
Manifest next update: Wed 05 Nov 2025 15:01:06 +0000
Files and hashes: 1: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: uMGWBps+wZJsH1gqoGuIZwnpxYIgfQRfg13UVF+3T80=)
2: iDoekYbnPiOIxLiqr48QVJjIZ7I.roa (hash: BFGeDsq9cIJPFhHXYs9ml2z2YYV20g/bd7ZbGgfmSrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:ce:3d:27:1e:a5:bf:ca:9d:50:6b:51:65:7c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Nov 4 15:01:06 2025 GMT
Not After : Nov 5 15:01:06 2025 GMT
Subject: CN=d4d6e4e2474ac5ba2aa949e8696bef04cc964178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:a4:ac:ce:f5:c5:80:01:e5:f0:4c:33:c9:
ee:2f:51:d4:75:0d:7e:50:a0:56:df:ed:c6:9e:a1:
5c:0e:94:0a:3d:69:8d:02:76:48:2d:31:f8:e0:04:
76:4f:2b:da:a8:c3:fe:8f:f2:3d:84:32:ae:c3:01:
fb:d3:fa:96:f5:1b:c3:98:ca:23:99:3a:5a:36:35:
7a:e4:03:8b:73:aa:75:4f:0f:69:a7:a1:85:0e:3c:
61:5b:ba:e8:29:5b:f6:90:73:03:f9:5b:d9:90:0c:
85:a3:c5:8a:af:c9:6e:44:5d:5d:20:e6:2d:d3:b8:
f6:96:72:fc:d1:b3:2b:04:5a:0d:fe:81:b5:d9:9b:
67:6a:32:d1:f8:e9:7f:b4:42:51:41:e2:f4:e2:75:
33:c9:44:fd:be:15:50:25:bd:95:d1:72:9c:09:e7:
20:8b:00:3e:e6:9f:c4:1f:fc:5f:68:a5:66:1b:50:
2f:83:5e:8e:44:f3:4e:91:66:de:44:ba:b9:6a:5c:
38:97:7f:5d:31:b9:16:64:41:dc:07:86:c6:73:ba:
f3:d2:30:41:d4:ac:bd:33:4b:1d:df:cb:e8:90:d7:
19:8e:08:3f:2f:3e:1d:78:e3:e5:96:97:a2:e3:8f:
40:59:e2:67:b1:74:1d:d9:cb:3d:a7:e4:b7:3d:b5:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D6:E4:E2:47:4A:C5:BA:2A:A9:49:E8:69:6B:EF:04:CC:96:41:78
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b5:ef:ec:a7:22:c4:b4:3a:00:f4:5e:69:6e:50:9e:ec:ca:
92:97:3a:da:05:3c:57:e2:1e:7b:16:ab:b4:7a:e3:86:df:d8:
7e:4b:bd:6c:80:a5:85:b1:38:7b:75:fc:cf:46:cd:29:a7:97:
ac:d8:1b:c5:d8:bb:98:cd:fb:81:50:eb:c6:29:83:c5:0a:52:
ca:0b:eb:1e:55:95:18:ac:38:70:71:b1:fe:26:46:70:a1:69:
f4:ff:d1:0e:3e:e8:43:fe:95:22:d9:39:31:ab:dd:b4:2d:9a:
83:ac:f2:cb:08:53:ad:3e:54:11:a7:d9:cd:54:85:40:4b:98:
e5:f8:56:9e:5f:3b:c1:1d:2e:f3:3d:99:62:df:7f:6a:73:b2:
ae:e0:42:8e:c1:49:a6:3a:ee:2e:2f:82:60:0c:4c:b2:1a:dd:
3a:74:24:06:23:56:12:74:b7:7b:51:68:68:b0:81:48:51:56:
43:fa:0d:3d:6d:d3:8e:3a:44:ab:66:dc:2a:e1:e2:61:d6:01:
6c:90:52:28:35:a2:ea:99:10:4a:c2:3a:36:f6:fa:2c:f0:5a:
38:25:af:4d:22:f6:c9:78:02:d9:bd:0a:3f:0f:2a:2d:eb:c5:
e7:c4:3d:55:22:a0:bb:7c:1d:c5:ad:d0:ae:51:dd:ff:92:05:
c0:d9:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:59 2025 by rpki-client