Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File: Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier: 9nZMKYun4oDv/+c9kdGTtQ0fk3yyjs/GAJIRQrmLta4=
Subject key identifier: 95:6B:98:69:03:43:E0:9B:CC:BE:62:1B:70:29:D2:94:4E:84:70:AE
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer: /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial: 019A53759EB84F13A03AF40AE7912D7ACF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number: 025A
Signing time: Wed 05 Nov 2025 10:00:08 +0000
Manifest this update: Wed 05 Nov 2025 10:00:08 +0000
Manifest next update: Thu 06 Nov 2025 10:00:08 +0000
Files and hashes: 1: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: aQt4t2xdTXeJyYFxN06Km3Wjw3Bgku2fRWGi2JVOYjE=)
2: dOirMHERf2S7XaVhDBj8pRwQyLU.roa (hash: RUHnPEXdDgz2x6FeuZ8yiEPV6rqAxw/OAxkwBlLK73U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:9e:b8:4f:13:a0:3a:f4:0a:e7:91:2d:7a:cf:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Validity
Not Before: Nov 5 10:00:08 2025 GMT
Not After : Nov 6 10:00:08 2025 GMT
Subject: CN=956b98690343e09bccbe621b7029d2944e8470ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:40:85:54:6c:ad:0b:41:d5:ae:8c:c5:53:
a8:e7:ac:a8:39:df:19:77:07:82:fb:19:62:6a:d8:
f8:43:8c:70:79:8a:a3:ca:15:ef:fb:9a:f4:96:3f:
c3:3c:12:cb:e8:62:ed:bd:0c:e7:17:b8:ad:1c:8e:
8c:08:6c:27:7c:18:87:8e:ec:cf:ea:04:15:42:e5:
7d:5b:55:5f:62:42:43:66:c3:ac:55:63:82:4e:99:
56:54:66:8b:c5:9c:0a:a1:3c:a0:fa:7d:57:b8:af:
a9:ad:40:73:3d:28:ea:f7:ea:41:5e:9b:8b:77:7b:
31:11:d8:65:1b:fb:01:4a:dd:92:a1:df:f2:d3:6a:
3f:49:fd:eb:39:5a:d1:14:77:15:c2:10:9f:6e:c6:
1d:c8:84:f8:25:5a:3e:80:c5:94:be:6b:54:65:c3:
b5:32:e0:e7:a4:a9:fa:50:ef:d2:11:bf:de:92:c8:
4d:01:7d:40:29:9c:99:ce:3c:ea:a4:61:fa:5e:ee:
79:1b:88:c5:35:b8:ae:ce:84:be:9a:53:f9:9b:24:
90:5d:bd:5f:91:23:91:33:53:d6:0e:6f:75:48:d0:
a3:78:fe:cd:e0:df:af:8b:6e:9e:af:92:6c:99:18:
64:1e:97:af:59:65:33:4d:5f:b1:f7:a2:df:e2:a8:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6B:98:69:03:43:E0:9B:CC:BE:62:1B:70:29:D2:94:4E:84:70:AE
X509v3 Authority Key Identifier:
keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ab:a9:21:f2:75:bb:4e:66:06:f0:dc:94:ae:4a:73:03:e1:
ee:b1:0e:33:68:21:d3:43:14:a1:06:a4:77:2f:4f:1d:3b:fe:
1d:06:3e:d2:43:c6:af:c6:f5:93:ea:de:d2:6f:fc:48:a9:4f:
07:98:be:9a:a7:a6:7e:e6:88:e4:23:68:b6:32:79:c6:21:d6:
5f:f6:94:c7:fc:ea:74:e2:91:ca:fc:f2:8d:23:27:c4:8e:a6:
80:ad:bd:5d:c4:3d:24:0a:1b:8f:a5:e5:1f:67:53:1b:81:bb:
37:e4:4b:f4:e6:f2:68:ab:fa:1e:87:f8:65:7d:31:15:8f:45:
58:6e:5c:35:6a:1c:ce:6f:9e:fc:66:3b:5b:30:1b:2f:99:4e:
f3:7c:67:39:6e:9c:b5:ea:29:81:d6:d9:1b:a1:6d:24:72:8d:
5b:46:cc:27:b7:92:37:cb:ff:95:7a:23:88:70:42:c7:64:2e:
18:9d:de:fb:9c:23:1a:f8:9d:76:83:01:97:99:7b:5f:47:62:
d2:1a:24:5b:48:9c:6f:05:70:eb:06:ef:1d:95:1b:2d:48:95:
0e:80:93:2a:07:2b:1f:19:1a:a7:67:83:d6:b7:ae:6f:5b:76:
50:73:e4:78:c2:3f:58:15:af:35:c4:a5:06:77:9a:08:e9:57:
59:d6:1f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:23:35 2025 by rpki-client