Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: qzSeJxiuOQiu3gC/emc1WC4OT50jx5mKZR4i7WWcmzw=
Subject key identifier: F7:4A:D3:C7:65:F7:70:E5:5F:A9:32:EA:27:07:4C:9D:A5:95:61:64
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 019A4E4FEEC292DBB437E31FE74F62164885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 10:00:52 +0000
Manifest this update: Tue 04 Nov 2025 10:00:52 +0000
Manifest next update: Wed 05 Nov 2025 10:00:52 +0000
Files and hashes: 1: 8jvY6gdKf49fsHMa8JzUxLXy6Co.roa (hash: zq4v0B4wOz8tRoHJTPQ0OEhJqUOFXXY6z/cXiV3Bsic=)
2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: 8F/ej4r5wr/nOYHrUCkbeoM4iIzcqdJXOdU0ZgwFvBk=)
3: MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa (hash: 4xTLRWvAhNdFnC4rR2yT1xCAEdrH5/3kjyyJfVcTeSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ee:c2:92:db:b4:37:e3:1f:e7:4f:62:16:48:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Nov 4 10:00:52 2025 GMT
Not After : Nov 5 10:00:52 2025 GMT
Subject: CN=f74ad3c765f770e55fa932ea27074c9da5956164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:4e:08:3b:3d:78:8f:7d:31:4a:e7:f2:07:
2e:c7:48:2c:9e:20:ff:b0:c8:25:6a:2e:b6:8e:cd:
75:00:22:2f:58:58:ec:d5:68:6c:40:e5:96:4c:e4:
47:1f:e9:4c:e2:43:b4:e3:89:02:2e:e9:82:f7:43:
2f:a5:c2:3c:d4:17:c7:d4:41:81:8b:4c:a8:b0:eb:
5d:a8:5d:63:72:1c:d6:f5:46:db:b2:e0:87:30:0b:
b4:5d:6c:c7:83:12:91:6c:89:44:d1:c9:56:25:16:
43:89:0d:db:48:a9:b3:fe:ab:cf:d1:bb:c7:58:84:
ec:a4:df:14:4d:85:dd:9c:63:f1:5d:80:0c:4f:62:
ad:cd:c4:fc:5b:1f:7a:9f:73:2a:91:60:78:63:df:
1f:dd:4f:ea:05:15:16:b1:5d:a5:0e:ed:87:13:45:
1b:26:3b:31:11:55:03:eb:2e:60:91:13:69:b0:e5:
58:85:6c:7d:28:44:15:45:b2:69:9e:1e:58:db:cd:
ad:cc:6f:98:1b:d1:d3:aa:7c:48:35:dd:68:6a:07:
f9:37:c7:ee:db:e5:bc:a6:9c:c9:82:c1:27:26:63:
56:e1:ca:3e:5c:50:cb:80:39:e4:23:21:4e:ab:32:
a4:04:07:82:40:88:e5:c2:46:4c:17:b0:e9:bd:9e:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4A:D3:C7:65:F7:70:E5:5F:A9:32:EA:27:07:4C:9D:A5:95:61:64
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c2:c3:93:8e:be:91:c7:21:a9:f9:3e:6d:42:b0:b5:52:73:
26:2b:31:8a:d7:e7:40:77:2b:c0:ab:2a:e4:dd:d9:ad:b9:e9:
e5:bc:ba:32:b7:7f:87:39:0c:00:8c:30:ea:57:87:bc:73:15:
2f:3f:ef:b5:d1:62:59:c1:84:f8:e7:b4:da:c6:a6:54:d9:7a:
76:fd:14:60:47:9a:1b:92:0f:7f:3c:cd:27:10:be:ab:13:fe:
95:fe:0f:bd:7a:5e:dc:c1:2f:38:85:18:82:33:2a:d9:d5:08:
29:31:4c:cf:34:77:39:c8:0b:c4:39:45:a2:e5:a7:a6:1c:bf:
b7:20:84:30:9f:ce:e7:b2:5a:2a:a7:e6:9f:a2:77:be:d4:72:
3c:5b:26:5a:fc:8d:5a:2a:60:e0:ad:01:38:d2:9c:c8:8b:e1:
f5:18:68:24:f2:80:3c:1c:91:78:ca:5e:f3:61:ea:7a:b6:05:
10:5f:17:b1:67:f8:39:6a:02:fb:db:7e:f7:35:72:d1:f9:6e:
dc:91:a6:93:38:c1:54:ef:5f:3c:12:20:8f:5f:41:b5:62:a4:
fa:ec:06:e0:40:55:54:df:b5:7b:45:30:51:ae:8c:ba:12:fb:
f4:8b:64:04:2a:62:a9:61:61:33:ae:34:70:6f:36:05:28:10:
07:fb:2e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:55 2025 by rpki-client