Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: 2h2+SghKPFsPD3HKmoAwekpR46PYUeP+AreJnuhge5E=
Subject key identifier: 36:0D:91:53:26:07:4D:DA:D4:5C:14:F3:86:09:78:37:21:F5:F6:D4
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 019A51BE585E901A8FD391FD5C09115C0DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 0CB9
Signing time: Wed 05 Nov 2025 02:00:20 +0000
Manifest this update: Wed 05 Nov 2025 02:00:20 +0000
Manifest next update: Thu 06 Nov 2025 02:00:20 +0000
Files and hashes: 1: 89ZdTmp7S2NunnuoGSf_2vtgPY8.roa (hash: bPa9rSCPFw03d28VXPa3N71Ifao0FpVDusG0bNmLxwE=)
2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: vDNMA4MMYPjB4bVNw5vrB7K3UHXfSuDgA8ekoBBilVg=)
3: f9__0EOOD2bbqws_SYovsEadu64.roa (hash: rdpqu3t3b72JgKQs0LjFSsEK4eL5Gx3rtjq221xpO1U=)
4: fTWM1zKEU10CvPHR7x8xLqGMmBk.roa (hash: SLdOjrmdsiTj6gBhRX9Fmq3urmuPys2J1yZIBUXb9kE=)
5: kc5iSTCS2Wj8DpgYXFD3Z8kI0-w.roa (hash: uGP+3hnsQtTfTdEoExGqurh/AYLhmRguK0+ycdKSTRo=)
6: ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa (hash: 52z0loKl64IpfsA33HSHXJF3VKeUhqS7Sku5ZE137X0=)
7: rZWoVR8go-ETzcAh50MLSM8Nmkw.roa (hash: cgavxAlOshWtjoy57HjDWJFVrT3Fp0YJu3pSKWnrDaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:58:5e:90:1a:8f:d3:91:fd:5c:09:11:5c:0d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Nov 5 02:00:20 2025 GMT
Not After : Nov 6 02:00:20 2025 GMT
Subject: CN=360d915326074ddad45c14f38609783721f5f6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:6f:7a:c3:3a:e6:2a:16:1c:23:b1:e0:45:
ec:f0:53:0d:2e:e2:3e:00:bf:fc:b7:fc:f4:67:e2:
58:6d:84:9d:f6:ac:cf:ca:86:60:f7:8a:a6:72:6a:
df:16:db:c4:4a:0f:6d:37:96:c6:5f:10:4a:47:a7:
c5:69:ca:99:18:0f:21:92:05:a8:00:a1:21:71:7d:
31:e7:9f:44:07:d2:71:0e:ae:2a:f2:61:40:81:f4:
6a:8e:2f:9b:b0:58:23:0f:d0:f9:58:98:42:2c:24:
a6:23:e6:82:14:7f:c4:5a:e5:1e:65:3b:33:a6:16:
1e:b8:8c:b6:14:52:d5:78:82:bd:75:ec:8e:0f:24:
7c:01:61:cd:20:c1:65:0b:8a:38:8c:3e:14:33:e2:
49:a4:66:9f:e9:96:09:c8:08:2c:b8:98:a5:a4:eb:
3a:10:4f:17:83:bd:78:2d:35:03:00:63:3b:83:12:
29:f5:b5:48:36:8e:c1:46:b7:01:57:c2:61:45:44:
b7:fc:f9:75:34:b6:4d:a4:f9:ee:34:30:55:f2:0c:
7d:70:49:05:b1:4b:5f:a3:be:a5:27:fe:f0:23:80:
34:57:47:3a:fa:8b:ba:a8:81:f2:85:5c:1e:5a:42:
08:9b:91:55:0f:8b:30:b4:38:9f:eb:ef:e1:57:63:
c6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0D:91:53:26:07:4D:DA:D4:5C:14:F3:86:09:78:37:21:F5:F6:D4
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:4c:ef:44:f0:07:3f:71:51:3b:82:20:98:41:f4:b8:d6:a5:
9f:9e:f5:b5:60:a2:7b:26:43:72:89:c9:a9:5b:9c:d2:7f:e6:
c9:9e:12:3d:c7:db:2c:e8:c3:84:3d:11:d8:3c:ab:f3:38:de:
4e:4d:b0:d6:3f:e3:d0:f0:2c:a4:b1:7b:58:85:1e:d6:b9:86:
cc:8c:35:70:42:87:9f:20:30:ba:ab:0e:eb:94:3d:7d:cb:c7:
90:41:a0:88:9c:d0:ef:3c:d7:bd:10:49:aa:35:04:53:49:59:
09:d3:4a:8e:15:fc:8d:32:d1:48:f2:62:4b:5c:31:68:26:f8:
4e:1b:0e:e4:27:ac:5a:3f:39:ff:8b:6a:bc:cc:70:21:d4:30:
c9:61:41:e7:48:8b:2e:c0:3f:3e:71:df:ea:aa:a0:ef:ec:ff:
06:c8:5f:5c:cf:d0:a0:41:4f:03:9e:5e:5f:54:85:05:69:56:
0a:21:62:7b:c7:93:7a:74:e7:dc:5e:55:45:de:c5:f0:0b:1c:
ff:41:bf:c4:3b:b7:37:b4:4d:0c:b7:ff:7e:5e:1b:ff:81:8b:
51:39:de:c4:b2:ea:ea:57:7b:a5:47:09:0f:bd:a0:cb:1f:ac:
8b:d6:22:cb:77:97:71:2a:bb:3a:84:67:84:7d:ac:67:7c:a0:
46:fc:c4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:32 2025 by rpki-client