Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier: uZvT2xhNS+3+onfP4sLFzPBfmAZkAiTbc8E/mcGuQnI=
Subject key identifier: F4:91:1A:22:67:84:05:D8:99:52:B9:A5:4F:1B:4A:8A:79:9D:A4:10
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 019A500752908673577EB4E5051836FAEB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 18:00:48 +0000
Manifest this update: Tue 04 Nov 2025 18:00:48 +0000
Manifest next update: Wed 05 Nov 2025 18:00:48 +0000
Files and hashes: 1: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (hash: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=)
2: Y2TFuYLjHOh19Nsn9IXR0BXi0GA.roa (hash: EGQLXveu0rNxAJdauUxs2BGnjI8o9tZmq21wSdM7BEk=)
3: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: lnN8WEAqGbQAHLNmAxY/WtCiIElF+b/PzahDfoyIJnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:52:90:86:73:57:7e:b4:e5:05:18:36:fa:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Nov 4 18:00:48 2025 GMT
Not After : Nov 5 18:00:48 2025 GMT
Subject: CN=f4911a22678405d89952b9a54f1b4a8a799da410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:ce:09:99:fe:35:37:6c:ab:96:3e:99:d7:
be:b4:c5:55:4e:5c:54:49:35:56:c1:75:96:65:f1:
4c:e4:2a:12:d6:9c:2f:15:9e:9c:b1:fa:11:7e:88:
88:01:61:fc:68:42:d5:5c:96:d2:04:e9:f2:63:ce:
b1:e6:75:f9:bb:43:3f:9d:07:44:4b:a7:5d:6c:93:
62:70:c8:17:d5:0e:97:66:36:ca:94:31:0f:dd:94:
76:ea:c9:77:47:7b:ba:d8:14:b1:e5:f3:5c:67:c2:
6e:d8:76:8f:32:3c:af:b0:36:60:33:1f:c9:96:9b:
34:0d:e7:e1:80:01:ae:37:c5:6b:d3:50:27:8f:f2:
09:c5:d3:c8:c4:6a:53:2e:09:a4:a6:44:a5:2b:bf:
34:a1:2d:ca:b5:a9:06:ac:bd:ad:d2:4d:71:03:49:
97:5c:d4:4d:a1:a2:fa:43:51:8c:66:d9:01:5b:65:
a6:71:f3:fd:29:49:e6:76:d0:82:00:9e:21:33:15:
a5:f6:3e:c9:8a:1a:d3:a9:3c:c5:6c:b1:3c:88:f8:
02:56:fd:71:ff:09:9d:43:d6:c4:ad:99:e0:52:2b:
89:b7:fe:1a:f5:1d:0c:10:3e:cc:8b:89:e3:08:09:
10:e1:1a:b6:d4:41:8d:56:d7:71:4c:bf:40:c7:83:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:91:1A:22:67:84:05:D8:99:52:B9:A5:4F:1B:4A:8A:79:9D:A4:10
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:13:03:99:3b:b2:1c:05:32:40:e1:af:9e:ab:2f:6d:ef:77:
74:53:9c:e9:96:b7:4d:dc:f5:a1:f6:5f:d2:2c:ab:c1:ff:4a:
14:cf:d0:ad:af:a2:37:09:11:35:3b:f5:42:b5:de:19:29:8f:
80:b4:e3:5b:4e:2c:db:fd:37:5e:36:f5:ff:16:88:50:6e:a0:
4c:01:73:24:1b:9b:72:92:19:6a:2e:92:0e:06:70:3a:9e:7a:
e1:21:26:73:56:42:b1:4e:33:68:c6:a0:79:af:97:2d:55:6f:
7d:a5:bb:0b:57:57:86:52:09:1a:ff:de:0d:fa:eb:36:56:14:
03:6a:e6:2f:b8:ee:fc:81:4b:8c:cf:bc:75:69:4f:65:8d:3b:
5c:1f:eb:54:38:b7:66:56:af:e0:7a:ae:82:d3:6a:88:4a:53:
28:5b:e5:df:1a:21:d6:39:74:46:96:f1:3f:34:69:8b:88:ee:
9c:d3:a2:57:3f:20:e1:c2:85:17:84:b3:b6:05:bf:5c:f4:1a:
d0:68:9b:2a:8a:de:61:7a:ca:b5:c9:4f:4d:c5:b1:a7:67:12:
50:f6:1b:55:ba:a5:b9:3d:67:82:14:31:d2:76:04:ff:79:2f:
4e:70:6b:f2:e3:b1:99:35:fb:2c:72:2d:19:00:91:3b:4d:d3:
9b:6d:ad:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:21:48 2025 by rpki-client