Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
File: hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft (raw, json)
Hash identifier: 7lU3mHX9I42fyycL/Slrg8Ulph90mTpDEsdVp27WuPY=
Subject key identifier: 1F:0A:B9:5B:CD:6F:92:2A:91:80:51:6F:A9:68:17:29:5A:20:F5:4D
Authority key identifier: 86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
Certificate issuer: /CN=869ab33046862ab58405e5e927ddf41272dfc714
Certificate serial: 019A4EF57979B59B2279753CF8B5CFC2E02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
Manifest number: 04FE
Signing time: Tue 04 Nov 2025 13:01:41 +0000
Manifest this update: Tue 04 Nov 2025 13:01:41 +0000
Manifest next update: Wed 05 Nov 2025 13:01:41 +0000
Files and hashes: 1: hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl (hash: OL8IccxIVEYAiyxMI2wTTc1gA+xk9fBftpQ2alDcBPw=)
2: p8T_kCS-MYJ8fc4C7hUc5E1T1qg.roa (hash: CHS1S8lMOJ2pkxab6trVxWbo2qQA5JXICjYrqXb1IdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:79:79:b5:9b:22:79:75:3c:f8:b5:cf:c2:e0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869ab33046862ab58405e5e927ddf41272dfc714
Validity
Not Before: Nov 4 13:01:41 2025 GMT
Not After : Nov 5 13:01:41 2025 GMT
Subject: CN=1f0ab95bcd6f922a9180516fa96817295a20f54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:31:f3:18:eb:69:ff:a0:ac:0f:b8:a4:43:
7d:cc:e8:6e:89:19:0c:1c:58:6f:0a:ef:a6:ec:64:
61:0c:83:98:b5:15:8c:51:17:73:e5:d4:48:41:de:
ae:d3:cb:5e:6a:4d:7d:d1:5c:d6:05:2b:08:99:cc:
9c:eb:47:25:a7:73:83:84:15:d5:ec:d0:5d:b6:11:
cc:da:f2:82:8e:6a:f0:68:65:c0:d1:d5:9d:fc:f8:
41:01:13:8b:3e:69:13:10:ab:15:42:66:b9:9b:88:
91:51:ee:4c:57:4c:9a:77:0a:73:6c:bf:38:b6:a6:
92:e0:d0:a8:89:40:b7:78:35:7f:90:74:7c:f9:d0:
fa:39:88:65:85:22:18:f1:4e:49:b5:d0:93:31:c9:
72:bb:9f:f0:e2:cb:7d:4a:26:ef:fe:fe:87:5c:3c:
86:19:48:5a:24:59:7a:a2:74:1c:e9:fc:f2:21:64:
25:ba:84:c3:be:fb:e9:cc:b9:c3:65:d2:bc:cc:43:
73:56:14:da:b2:3b:56:e0:4d:2a:fa:1d:04:4b:89:
22:fe:92:9c:b7:c3:1f:16:4d:03:39:23:56:05:33:
da:a3:11:b5:d1:1a:88:42:7d:67:0c:31:5c:dc:19:
ae:4f:f6:9d:0e:38:1c:ed:fb:94:0f:87:91:05:65:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:B9:5B:CD:6F:92:2A:91:80:51:6F:A9:68:17:29:5A:20:F5:4D
X509v3 Authority Key Identifier:
keyid:86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c5:13:d8:ed:98:ed:74:25:3c:40:61:e6:65:be:c3:45:31:
e2:f9:77:b3:26:f5:8d:7c:77:48:38:a6:34:e8:b3:0f:a8:a5:
9f:ce:48:d0:60:03:18:f8:93:a5:48:c3:f9:c5:61:99:a8:7d:
0a:6a:63:43:90:68:10:0d:4d:55:5f:6a:80:11:6b:d4:bb:4b:
a1:d0:9f:53:37:fc:e1:e9:52:f5:69:92:65:95:59:72:b2:1b:
70:9b:cf:1e:71:99:a5:5f:e1:e6:06:be:45:0d:3e:80:b2:28:
f6:29:31:d1:01:ee:31:cc:0b:a9:ea:d1:26:05:ba:08:26:1b:
37:0d:c1:86:32:eb:6e:4e:3a:e3:a6:c7:3e:37:dd:5c:fa:6f:
df:26:e5:bf:38:33:a7:9f:c8:6b:db:9a:83:f6:84:32:04:84:
a8:fd:16:5f:8e:70:90:75:ab:a2:2a:e5:1c:a4:45:5c:05:81:
c3:f6:ba:57:8f:a0:fc:09:e4:45:fb:fe:2b:8a:07:f9:e4:94:
93:15:fc:5c:f0:ee:69:fb:a6:87:ca:19:5c:2b:c4:2f:f7:1e:
a5:aa:48:3b:7a:59:1e:87:9d:67:64:a5:7a:07:9c:b1:c6:59:
d3:01:71:2d:60:7a:94:a5:1d:cc:52:dc:7b:08:16:c5:22:73:
10:07:9c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:07 2025 by rpki-client