Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
File: hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft (raw, json)
Hash identifier: OeCapG61dQcgUljK04jGRmm8Gf0OQOvPo4aApZd/GfU=
Subject key identifier: B2:E0:18:16:61:81:F7:FD:F2:35:24:30:A1:F3:FF:D7:CE:A8:AF:A3
Authority key identifier: 84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74
Certificate issuer: /CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74
Certificate serial: 019A4EF4DE55F28993E99A9EFE13F97833B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
Manifest number: 1149
Signing time: Tue 04 Nov 2025 13:01:01 +0000
Manifest this update: Tue 04 Nov 2025 13:01:01 +0000
Manifest next update: Wed 05 Nov 2025 13:01:01 +0000
Files and hashes: 1: hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl (hash: 20Rtys/ZEqoY8drcu/JZ/tyNbLtvarBfJJxb6/E3XNE=)
2: lJmvvXMVP9NKaYHWsyd-BJftiCc.roa (hash: eBBiq38eKi7tQKUMPizst8SumCc0cZEMghR739L+M0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:de:55:f2:89:93:e9:9a:9e:fe:13:f9:78:33:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74
Validity
Not Before: Nov 4 13:01:01 2025 GMT
Not After : Nov 5 13:01:01 2025 GMT
Subject: CN=b2e018166181f7fdf2352430a1f3ffd7cea8afa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:73:b8:5b:5c:47:6d:c7:11:9c:c4:7a:56:
1a:2e:3a:32:2c:ef:05:00:fa:ef:e8:00:7e:aa:81:
c8:a4:a6:71:ec:96:59:98:80:a9:19:b1:da:2b:4d:
7e:39:9c:ae:33:ff:d1:9a:37:ef:ef:11:7e:3d:aa:
5f:d5:a0:33:61:ff:2f:05:4f:84:73:51:df:f4:78:
5c:c7:af:c8:58:0c:0e:cc:aa:78:ff:72:95:73:fb:
f1:0b:fe:cb:dd:9c:39:79:f0:9e:a8:4c:f8:a9:f9:
c7:4a:17:fc:06:44:18:c4:b4:53:e6:22:7e:9f:74:
b5:b7:d9:f9:87:51:90:8b:cd:2c:c7:9c:02:50:07:
3e:7d:32:2a:ab:79:c3:6e:85:8b:8c:b1:b4:89:a5:
76:a8:5f:fc:3e:de:49:f6:ba:4f:6a:91:bb:d2:38:
69:c1:42:7b:fb:83:01:e2:fd:44:3c:09:0f:80:34:
dc:20:fb:78:16:f4:2d:32:9e:b3:03:b8:c1:c2:bb:
25:7b:e6:1e:59:2a:67:72:09:63:48:94:2f:1e:df:
c0:b8:ae:f1:8e:3b:b1:69:24:1c:2d:cf:2e:7e:11:
a5:7d:02:8f:4a:c7:34:70:1b:a6:6f:75:c1:19:7a:
0e:ec:ef:81:6f:73:25:da:c3:1c:8d:b8:6c:c4:1f:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E0:18:16:61:81:F7:FD:F2:35:24:30:A1:F3:FF:D7:CE:A8:AF:A3
X509v3 Authority Key Identifier:
keyid:84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e0:3a:7e:8b:09:39:dd:ba:3e:a2:8e:ae:ea:8f:7f:f2:5d:
eb:6a:06:e4:6a:7e:70:80:68:08:47:c9:88:dd:25:de:17:77:
39:47:3a:75:d3:99:1a:e4:a0:03:b5:d3:33:80:28:73:55:72:
43:8b:fd:cd:f2:df:81:7e:d1:d0:06:6f:60:22:39:78:d6:b1:
c6:0c:c4:83:d8:7a:36:47:e0:7b:50:01:23:fd:62:80:80:0e:
37:08:84:66:0a:87:8a:0e:40:b8:3a:be:79:09:0f:e8:7a:b4:
3e:de:51:46:53:ec:9f:35:ea:cc:c3:79:11:d0:4e:40:3e:0a:
98:e3:74:77:44:33:44:7c:03:9b:11:8a:af:df:cf:23:35:ae:
44:8a:aa:df:a3:c7:74:15:0f:6d:c0:35:a6:64:05:3b:d8:5a:
57:9b:b8:e9:2b:32:e0:d6:e2:8a:b7:b5:b6:aa:d1:c0:61:82:
df:0b:71:1c:57:94:18:5d:45:e7:66:8a:2c:74:0e:8a:d6:d1:
22:70:8d:ef:d1:c7:26:e3:00:60:60:ba:f0:9d:4e:b7:ff:f8:
07:8a:48:32:4b:4c:0a:86:7c:e7:d8:6e:84:98:a2:5e:0c:56:
a3:a1:a7:45:31:9f:95:7d:f4:8e:3d:d2:5a:89:e9:44:f7:f3:
89:90:87:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:52 2025 by rpki-client