Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier: IBfs0PEkut8zetP1zSFsccAMCmpTKOhbMMgJO9NZQD8=
Subject key identifier: 6E:0E:37:F2:89:CD:CF:3C:29:6C:D2:64:60:9C:94:A8:44:D4:47:26
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial: 019A537603826C0D248B558F217096AD67C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number: 0DF3
Signing time: Wed 05 Nov 2025 10:00:34 +0000
Manifest this update: Wed 05 Nov 2025 10:00:34 +0000
Manifest next update: Thu 06 Nov 2025 10:00:34 +0000
Files and hashes: 1: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: p5mk9KD/6PY1R+Ad3Npwgz/nOAwtsjlDLh+Dc9i6P/Y=)
2: lE0Hn99x0fhwc2jXac5uga-vHXs.roa (hash: iA0oHrpgL6CqGZiYUNOViB4cOKniJ8+iyJSulMgnLyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:03:82:6c:0d:24:8b:55:8f:21:70:96:ad:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Validity
Not Before: Nov 5 10:00:34 2025 GMT
Not After : Nov 6 10:00:34 2025 GMT
Subject: CN=6e0e37f289cdcf3c296cd264609c94a844d44726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:86:db:52:bd:77:16:10:1e:ae:6b:fc:e8:
13:20:31:84:3b:f4:6e:a9:1b:4c:e1:d3:d3:88:91:
93:c8:99:83:97:9e:64:2e:60:f0:d1:71:48:2d:7c:
4c:7d:b5:2f:61:86:3c:5a:38:4f:4a:da:1c:00:fb:
98:67:bd:21:2f:fd:24:2c:e9:74:79:cd:de:20:8a:
48:e0:1a:4f:9f:c1:1d:ab:5b:fe:53:20:21:bb:f6:
43:38:8b:e7:0d:35:9c:b3:be:6c:e9:c8:a5:d7:cd:
c2:f2:8c:1e:fd:ee:dc:02:51:e9:07:75:30:b5:13:
15:fb:d2:cd:5b:81:0e:ed:1f:d4:2c:c4:00:14:8a:
96:c2:51:bc:74:8a:7b:aa:0f:a0:03:28:26:7b:d1:
03:7b:10:dc:bc:84:d0:b5:34:06:79:61:bb:ed:2f:
b9:7c:20:aa:5f:aa:79:8f:18:a2:00:27:68:73:bc:
14:e2:c1:f5:29:71:f6:c4:6f:0c:27:c1:23:90:98:
23:a3:85:a1:33:60:ee:9e:ef:0d:8a:d7:f3:89:52:
f6:cf:e9:c8:15:25:8e:d3:67:f0:89:e9:75:0a:0b:
b7:37:93:4f:69:4a:41:7b:4f:7c:44:02:dc:f6:b0:
e1:6d:30:7a:0a:79:15:f0:42:fd:c5:74:0a:be:9c:
bd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0E:37:F2:89:CD:CF:3C:29:6C:D2:64:60:9C:94:A8:44:D4:47:26
X509v3 Authority Key Identifier:
keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:99:b7:f3:5a:65:1d:c4:b8:5d:b5:3e:d4:ba:5c:65:67:4d:
1c:86:1e:56:47:0c:11:d6:67:67:6b:d6:e9:91:c9:49:53:50:
95:ef:92:53:44:6d:50:fe:6c:21:fc:d0:c4:d1:e7:04:fe:90:
e0:9c:d5:3e:4f:8a:8d:1d:9a:6b:95:0f:50:08:5f:df:10:e2:
50:81:e4:51:c8:82:51:e0:e3:c9:16:ad:2c:ea:b9:83:96:6b:
4a:2f:da:ed:9d:9f:3b:53:1a:3e:6f:c6:23:79:07:6f:40:72:
88:77:9a:b4:c4:13:9f:07:39:5d:75:56:4f:85:c0:55:41:8c:
ef:de:9d:24:44:f8:f1:7d:8d:b1:9f:11:eb:49:0b:ba:ba:3c:
95:a2:a9:d1:d3:ce:d0:50:be:31:45:33:b3:d9:83:19:7d:22:
61:3a:07:a8:c6:22:1b:30:da:33:33:93:ee:07:e3:42:97:d8:
3f:71:fb:02:bc:7d:b0:3e:92:99:7b:d7:ad:c7:d7:b4:e7:65:
0e:21:3d:59:2f:8d:84:b4:98:30:c6:1f:bf:8c:03:b0:45:4a:
db:19:d1:11:03:ec:a6:37:3f:bb:5b:bb:9a:13:e7:d4:3b:95:
ee:38:4c:9d:48:d7:06:90:ef:fe:b0:b1:ff:70:cf:66:2d:6e:
7a:9f:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:30:18 2025 by rpki-client