Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: fvFrptVb0A/HF1FGIKU4LMw57te8eIYAFIJ8dpN7AaA=
Subject key identifier: 83:39:FF:30:96:2F:12:B9:57:DE:7D:B6:BC:5A:31:9C:64:95:4F:5B
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 019A4EF538112FDE5830A854799084E920AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0A25
Signing time: Tue 04 Nov 2025 13:01:24 +0000
Manifest this update: Tue 04 Nov 2025 13:01:24 +0000
Manifest next update: Wed 05 Nov 2025 13:01:24 +0000
Files and hashes: 1: DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa (hash: 8RXEuua3+kjX3w/tgAeEmHPIo5ag+CZK8+TQCcaqfCg=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: fQdi2rEzUKYfLCtLyiDOpv5zpnbYiYtB2hqmDCF/aVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:38:11:2f:de:58:30:a8:54:79:90:84:e9:20:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Nov 4 13:01:24 2025 GMT
Not After : Nov 5 13:01:24 2025 GMT
Subject: CN=8339ff30962f12b957de7db6bc5a319c64954f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:d6:13:f0:88:58:20:b1:65:c4:a0:ad:4b:
22:b5:3b:70:a8:c3:16:16:6c:db:4b:3c:ad:e9:3b:
d0:e2:5e:a1:e9:2a:9c:75:e4:0b:5f:c0:f9:80:8a:
d4:fb:cf:c1:df:0d:f4:42:c6:e6:5d:55:80:61:6f:
08:b0:ac:ee:72:ff:b8:f8:cb:af:8c:62:ac:e0:54:
57:4b:d1:d4:67:af:dc:0f:a2:d6:6d:1c:ed:7b:ec:
31:7f:b7:62:83:e9:d9:09:61:7a:14:4d:4f:73:c3:
5c:94:5e:4d:0f:e9:4e:df:e4:0d:35:0b:13:f4:ed:
73:25:cd:28:a6:0b:d1:2d:36:57:fc:2e:1a:25:02:
bf:cd:5d:9c:62:c8:08:ba:22:29:87:da:82:82:e8:
99:0c:ba:13:1b:0a:4f:fe:e7:f1:69:57:6b:56:30:
d6:a2:b4:cf:9a:5e:15:29:3a:a7:ba:96:14:64:19:
79:ff:42:96:be:c1:76:d2:91:ee:d1:8c:b7:c4:4c:
0e:07:6e:6a:fe:f8:61:a3:78:0e:9f:45:a7:9b:74:
7d:72:2e:71:39:b3:05:b2:f4:c0:d9:ee:8d:df:d0:
73:3c:6d:25:93:76:74:1b:f0:b9:72:f7:72:e7:37:
25:71:15:d2:5f:f1:fb:89:ea:01:fb:34:98:b5:ca:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:39:FF:30:96:2F:12:B9:57:DE:7D:B6:BC:5A:31:9C:64:95:4F:5B
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:ef:dc:fe:90:5a:e6:ab:71:3c:5c:a9:f4:be:5e:85:69:2f:
a2:1c:49:77:be:00:80:fa:c3:0e:27:33:ca:78:15:79:21:70:
52:9b:cc:3c:89:16:82:6b:66:16:a5:fd:8d:a4:64:96:0a:0a:
11:65:ff:c3:ca:ce:67:38:01:bd:be:8c:23:c0:cf:01:6d:37:
08:71:0c:15:1d:03:20:6f:d1:e2:42:b4:ef:10:1a:8a:71:9a:
08:46:92:f7:29:3f:20:3d:0c:f7:74:fc:19:be:d4:82:e6:df:
cc:c7:a4:b5:de:72:a8:7f:c6:83:68:bb:2f:20:3c:74:12:5c:
7c:41:14:01:f1:0f:75:29:35:ba:65:82:91:6e:33:b0:c7:87:
99:66:7e:c6:a1:ea:58:f8:d7:91:d4:ac:97:fc:9b:c4:cb:fd:
f6:a3:01:09:46:b3:74:f3:b7:29:85:1d:45:15:a0:73:85:77:
7b:e8:f0:a2:c9:76:bc:07:14:a7:dd:09:bb:64:90:a0:6e:8e:
c3:82:12:6e:60:47:3e:99:5a:a8:32:b5:fa:be:54:28:01:d0:
1b:06:82:62:a4:b7:97:d2:5e:0b:5a:9e:ec:97:79:57:5e:01:
a4:e6:b2:ce:14:7e:e6:63:69:bb:45:3a:e7:93:18:4c:ad:85:
f2:93:89:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:29 2025 by rpki-client