Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: nX+3oJyoHHHRPXmCsXxIj2v3fAQmcmN4dp3QhIHPHAM=
Subject key identifier: 26:69:7C:04:D2:EB:FB:28:26:CE:5E:D7:F1:25:23:8D:F3:2F:80:6E
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 019A4F629F2FDE22CD499D5D75FBEF16C14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 11AE
Signing time: Tue 04 Nov 2025 15:00:54 +0000
Manifest this update: Tue 04 Nov 2025 15:00:54 +0000
Manifest next update: Wed 05 Nov 2025 15:00:54 +0000
Files and hashes: 1: bbcA4RxlQmcQjNn0rG4goHNMuOU.roa (hash: R2hOoSIVcz11ndb2ZPvvYv6Kv8fgZfMkny+ajnRe2GQ=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: Se53tP2b8jdNgCfX+XQtQeaiVJuCDMtSdVNFy9nIJCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9f:2f:de:22:cd:49:9d:5d:75:fb:ef:16:c1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Nov 4 15:00:54 2025 GMT
Not After : Nov 5 15:00:54 2025 GMT
Subject: CN=26697c04d2ebfb2826ce5ed7f125238df32f806e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:40:39:f2:23:85:47:56:06:fc:ca:02:ed:
bb:4c:71:49:a9:04:a3:59:cc:7b:34:e7:5c:50:0f:
6e:60:ac:c8:6b:51:02:c1:fd:07:26:4a:f1:a9:8e:
2d:b4:b5:79:96:fd:40:c4:da:6a:ab:94:65:6f:35:
3b:14:0b:30:30:bc:2d:ed:f0:c2:92:a0:ca:0a:db:
75:80:b1:c3:a0:b5:50:09:16:9f:83:dc:30:e3:38:
61:75:fe:65:1f:06:90:6b:c0:f0:7a:31:11:94:a2:
ac:ba:e1:6a:0f:13:25:7d:d7:44:09:98:cc:60:e1:
b0:18:58:cb:66:be:dc:7f:86:53:00:3b:e7:62:9f:
b7:34:02:d5:4c:fd:97:1d:6e:c2:20:f3:e4:c5:4f:
fd:39:6b:26:99:b3:ce:c2:c6:fc:a0:32:e9:26:a9:
b6:9c:f2:40:25:7d:3e:13:5a:8a:a8:97:09:8e:98:
b8:cc:42:b6:b6:c0:4b:49:d9:e8:4c:d9:af:80:01:
94:a6:28:9f:6a:c9:7d:2f:e8:9a:6c:86:03:71:74:
86:01:3d:93:cd:33:e5:20:be:17:ff:e8:16:ac:0c:
99:64:7d:85:03:76:55:a8:94:67:be:44:f6:41:7d:
9e:be:ef:19:d3:5a:bf:f4:8e:0e:c3:16:3b:d4:8c:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:69:7C:04:D2:EB:FB:28:26:CE:5E:D7:F1:25:23:8D:F3:2F:80:6E
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:67:da:22:ba:0a:d6:60:19:41:c4:66:ac:e1:b5:56:da:1d:
a4:8b:a4:f6:e0:0f:03:f8:b4:11:39:bd:0a:a4:4a:47:fe:7f:
65:89:8f:68:e9:32:be:01:af:49:e3:7f:eb:5c:d5:6d:c3:51:
7f:60:d1:4c:a7:c0:03:5f:61:29:1b:05:56:ad:43:d6:ce:68:
69:91:f6:04:1a:85:06:ad:ef:eb:54:29:76:f2:68:c1:22:b6:
bd:bf:c2:4e:44:60:55:f1:d3:94:bf:c3:7f:63:8d:92:8e:75:
ec:38:2f:32:73:4b:bd:f5:c0:99:0b:ff:52:12:c1:95:03:56:
39:21:60:5e:88:ec:fd:cf:5e:e8:ca:68:cf:bb:f5:c1:32:ba:
4f:b7:5b:25:12:4d:3a:d7:d6:e0:99:c1:fe:61:53:62:8b:b9:
f4:13:df:58:74:ca:ac:4b:2b:94:c3:67:49:40:01:83:e3:bc:
02:73:1b:9f:98:1e:77:a6:ff:f8:d5:16:f7:8b:f6:b9:7d:29:
c6:92:1e:4a:24:fc:1e:72:3e:aa:03:97:14:9c:88:02:39:b7:
23:9f:55:ce:83:7b:05:f4:66:bc:e3:cf:80:83:79:59:cb:70:
44:f4:78:a7:3b:e4:4f:8f:bb:aa:64:5c:41:91:49:53:21:1c:
a0:da:e9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:48 2025 by rpki-client