Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
File: HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json)
Hash identifier: J5P3XqUbCw4W0pqs74QfHnd5f4PpFLFAufTo7R5gycM=
Subject key identifier: DA:0D:57:CF:92:98:EF:0A:E4:FB:F9:F7:2E:18:87:EE:71:27:8D:95
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial: 019A4F98E2DA97D273BDE6CBAE0D8FE46BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
Manifest number: 12DB
Signing time: Tue 04 Nov 2025 16:00:10 +0000
Manifest this update: Tue 04 Nov 2025 16:00:10 +0000
Manifest next update: Wed 05 Nov 2025 16:00:10 +0000
Files and hashes: 1: ACKW9RfobgNxFmGLo0q9xAh_d6k.roa (hash: sd4MSbt7R4RMvGdT2hp/M6b7EN9LmdrjGUMed4jtMaw=)
2: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: SG0WiY2mEU9wNNYGTH0BhyMG8TdqzbJ7MF9+24TsmQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e2:da:97:d2:73:bd:e6:cb:ae:0d:8f:e4:6b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Validity
Not Before: Nov 4 16:00:10 2025 GMT
Not After : Nov 5 16:00:10 2025 GMT
Subject: CN=da0d57cf9298ef0ae4fbf9f72e1887ee71278d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:f5:43:61:52:08:cb:6e:c8:22:2e:43:d9:
bb:8a:64:d1:e7:5c:fd:b6:36:e3:49:19:d3:3d:b6:
5e:04:f4:2a:4e:f2:7a:20:12:af:6d:9d:de:77:f9:
5b:d1:f1:3e:75:de:e2:56:b0:cb:f8:c0:15:c6:7f:
dd:7b:22:5a:18:95:e4:5e:52:74:26:01:81:1e:bf:
ed:ac:f0:38:7a:56:20:12:c1:55:35:63:1b:16:8a:
31:5e:79:0c:43:d4:7c:eb:f4:25:3a:a5:f8:7a:52:
93:2d:8e:b4:40:f4:58:56:e1:b4:c7:98:26:f2:65:
ca:8c:fa:73:9e:0d:02:54:e3:20:c4:6d:f3:61:1d:
ec:1f:4c:ba:92:ee:27:1c:eb:27:92:44:57:94:46:
01:c9:ac:3c:22:96:08:7f:76:9a:c0:8a:de:ed:7c:
0b:cd:82:aa:e2:b9:5d:c3:aa:85:16:bd:42:e0:af:
a9:53:89:fd:23:4a:a0:a0:bf:37:cf:40:98:fc:1a:
9d:3f:13:9b:66:25:7e:b9:da:35:a4:59:5c:0a:0b:
dc:96:41:ff:e3:d9:dd:f3:ba:64:b7:2c:55:d1:4a:
16:78:dd:71:a9:69:d5:39:15:05:5c:2e:00:e6:c4:
b3:21:ae:47:a4:63:8d:72:1e:18:52:5c:e6:7f:03:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0D:57:CF:92:98:EF:0A:E4:FB:F9:F7:2E:18:87:EE:71:27:8D:95
X509v3 Authority Key Identifier:
keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b8:41:0f:7a:8e:bc:53:85:15:fc:5a:70:cf:26:29:16:4b:
f1:64:47:2d:a6:2a:f5:c0:97:51:34:1f:7e:84:21:71:57:a4:
aa:d0:00:b2:50:95:97:66:0f:0d:d2:76:f7:25:3e:8a:80:8b:
ae:2f:53:ea:29:92:67:0a:24:cb:55:89:c4:64:d8:b3:b6:3f:
09:68:cd:50:63:ac:72:04:f7:7f:4a:55:aa:07:ef:70:9a:b5:
52:5c:1b:24:ca:d9:46:ca:f1:94:a9:df:09:b9:f1:c7:eb:d3:
78:b8:a1:3f:9c:46:e2:2b:78:2e:08:82:9d:47:30:51:4e:dd:
b9:3b:3d:cd:ac:f5:85:7b:b1:4c:2d:01:32:44:01:fd:5f:7c:
6c:42:99:b7:ff:fd:eb:9b:fa:03:dc:d0:31:58:3d:ea:6f:64:
67:69:5d:86:5c:12:85:59:a4:12:3a:9c:e2:1b:04:30:f0:d1:
66:4d:e2:a6:1f:6c:a4:88:18:8d:00:67:92:d6:cd:7b:8f:9c:
ff:a2:99:43:04:c5:cf:44:a2:3b:33:70:af:c8:93:e7:e0:65:
69:fc:68:06:cc:7f:b7:79:15:3b:a6:68:ce:37:9d:21:74:db:
75:dd:c1:81:c8:1e:55:c8:ad:c8:8e:d6:d4:96:69:5f:c0:8a:
aa:22:e6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:43 2025 by rpki-client