Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
File: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft (raw, json)
Hash identifier: RJ7SwigW6or0jfhwzJOA9k4E9y0ncrxKuafashq4Egs=
Subject key identifier: 1E:02:0E:75:43:E8:F8:EF:84:0E:81:64:E6:22:79:AA:4A:88:DB:58
Authority key identifier: 85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
Certificate issuer: /CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Certificate serial: 019A4DE16779A8C4AE05CCB4F79A7B3EC869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
Manifest number: 0738
Signing time: Tue 04 Nov 2025 08:00:08 +0000
Manifest this update: Tue 04 Nov 2025 08:00:08 +0000
Manifest next update: Wed 05 Nov 2025 08:00:08 +0000
Files and hashes: 1: 5RI4SZ7klYwbXOltWz9mLe7dxD8.roa (hash: GWR45JMOb96igm8o2PgndioWHr8iBdYB9L2Wx8rR7YM=)
2: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl (hash: t5qIoGth8Yc+rV4z6A8wq7vVITYWgmC10biFvm5tha0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:67:79:a8:c4:ae:05:cc:b4:f7:9a:7b:3e:c8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Validity
Not Before: Nov 4 08:00:08 2025 GMT
Not After : Nov 5 08:00:08 2025 GMT
Subject: CN=1e020e7543e8f8ef840e8164e62279aa4a88db58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:2d:97:5c:1c:0e:c5:89:93:fe:e9:b4:99:
45:85:24:1a:67:3f:af:e3:a9:ad:61:6c:2b:9e:98:
ec:a2:20:ea:0c:84:b6:fa:8d:89:86:46:d3:f8:30:
5b:7b:d0:73:19:5d:84:93:45:f0:c4:95:98:e2:3f:
ba:7f:45:ab:81:ba:7d:2e:92:48:20:f0:be:06:16:
f4:19:fb:18:24:4e:af:b2:9a:74:91:ce:74:c0:6d:
f5:e2:30:2d:7c:41:99:8f:43:04:06:77:49:3b:b9:
13:09:c6:9b:9e:2b:f8:97:7a:62:7b:fb:6f:da:72:
f1:82:b5:81:a0:63:bc:4e:dc:68:fd:94:e3:7c:67:
4e:f7:1e:0c:a0:16:4f:35:8a:97:55:b0:91:21:d7:
85:f2:b8:23:b3:18:fe:de:98:7f:4e:8f:f6:2d:c6:
9d:ba:2f:42:42:4f:99:85:33:cc:17:68:20:98:7b:
f1:8c:db:a9:7b:3a:93:f0:05:ea:c9:47:62:a9:b2:
6f:ff:a4:07:8c:bb:f5:1c:60:78:1a:a8:df:97:b1:
ba:b0:50:80:bc:14:8b:11:6d:16:5b:dc:27:86:e4:
47:98:40:76:a1:4e:7d:7b:71:92:ae:7b:7e:e7:63:
f8:c9:d0:82:3f:8d:d0:1d:14:e8:84:04:38:04:d8:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:02:0E:75:43:E8:F8:EF:84:0E:81:64:E6:22:79:AA:4A:88:DB:58
X509v3 Authority Key Identifier:
keyid:85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a0:ff:0e:27:07:65:a7:92:99:e3:07:30:18:0e:40:5b:25:
89:ec:89:3e:8c:34:f9:bf:2e:32:52:a7:cf:ed:aa:da:e9:e2:
5c:8a:fa:98:ed:4f:b4:41:a3:5e:2c:85:09:de:30:d7:a9:92:
c8:80:c8:7a:ea:82:1a:7d:bd:3e:73:c1:c5:98:c8:75:cb:a2:
82:e9:94:28:d7:6c:c9:5f:30:6f:3b:e5:6b:01:57:d0:6c:8d:
56:c1:0d:7a:3d:6e:9f:0e:e9:86:80:7d:63:1d:23:3d:e1:a4:
80:0b:08:57:a6:1d:d6:48:c7:09:89:bf:11:54:2d:f7:e8:02:
9c:40:fd:c5:aa:76:a7:26:64:0a:89:82:e3:ac:25:e7:53:f1:
2d:69:34:94:3d:be:46:64:d5:ab:46:a8:23:4a:5b:f5:53:46:
a5:58:7b:ec:a3:a7:00:a6:fb:34:55:ea:88:44:b3:38:c5:ec:
5d:95:3c:53:be:70:a3:1f:4d:c2:22:77:fd:89:79:46:61:9e:
e8:38:2a:d2:3d:44:40:af:67:eb:62:b9:22:a5:22:23:d0:99:
52:62:c6:bc:4a:f5:8f:fb:7b:22:26:20:8c:7b:cc:eb:04:db:
33:51:05:8d:56:99:fd:cc:e9:9d:22:60:31:f8:3f:ee:fc:20:
7f:bd:09:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:29 2025 by rpki-client