Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: l5O3Y0tHaC+0crmcj3nwAvxyMiTHN9oC+o4d8b6Y5NI=
Subject key identifier: 05:BE:11:CF:09:3E:9D:32:F7:46:1F:F5:33:27:DF:79:27:13:44:78
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 019A5074B47579454AF3B2FADAFE12F90CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 20:00:16 +0000
Manifest this update: Tue 04 Nov 2025 20:00:16 +0000
Manifest next update: Wed 05 Nov 2025 20:00:16 +0000
Files and hashes: 1: 4NKKaipkT34nKtWhfa19D74f25c.roa (hash: YTaiys0RSHABRCWEassKEE2Fqko+03tYIMHlBHkZyig=)
2: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: ce7zwgzqXU9PJe0WLNbRxqq2aVPaT5u8KLJUYycAtCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:b4:75:79:45:4a:f3:b2:fa:da:fe:12:f9:0c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Nov 4 20:00:16 2025 GMT
Not After : Nov 5 20:00:16 2025 GMT
Subject: CN=05be11cf093e9d32f7461ff53327df7927134478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:55:5d:5c:99:75:90:db:33:68:be:8a:8c:
58:3d:7f:6e:c3:13:f9:6e:cc:44:9f:e0:86:63:fd:
cb:a3:c6:dd:7b:2f:e3:6f:58:1f:f2:6e:ea:4a:b1:
07:5b:f1:3c:34:2b:34:8c:27:ee:00:42:25:f0:19:
ed:13:93:db:40:72:98:ee:00:8d:60:8c:cf:32:a0:
46:b1:db:4e:a1:64:2d:18:7c:b8:2c:ae:ea:0b:9b:
e9:64:ab:b4:2b:6b:b8:dd:88:5f:65:45:29:13:00:
e9:ff:6a:3f:7c:cc:7a:33:dd:f2:2d:99:44:0d:87:
a9:80:dc:ae:70:56:e2:11:74:99:19:89:4b:95:23:
03:ea:be:1e:ec:54:aa:46:c1:eb:15:d0:d5:13:01:
4e:55:1e:37:72:9f:4a:15:c7:43:3d:3c:76:f9:5f:
f9:33:43:1d:0e:55:95:29:a1:17:b9:6f:47:ba:e9:
71:85:8a:a6:87:bb:3d:81:cf:97:01:2f:e6:be:a3:
88:c3:bb:63:2a:c8:93:11:94:8d:8f:49:f2:d7:90:
39:b9:d6:81:b5:cf:00:a4:99:0e:b7:31:dd:2b:c1:
79:11:b4:4b:66:65:57:98:fc:37:32:4d:4e:bb:16:
d4:ca:93:69:03:86:15:11:a6:03:0c:33:58:f7:60:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BE:11:CF:09:3E:9D:32:F7:46:1F:F5:33:27:DF:79:27:13:44:78
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:00:fe:68:e5:3a:40:86:7a:e1:78:02:58:ff:bc:d7:03:ce:
c4:f9:30:58:c2:6c:f6:e3:65:a9:56:db:a1:80:d4:49:86:cd:
69:e7:c8:42:ad:6b:77:c2:46:03:cb:37:61:ef:f4:3c:90:7e:
ad:89:32:fe:c0:37:85:25:89:4d:6f:25:b4:fe:7e:36:9c:bb:
32:35:4b:f3:ce:20:c7:d6:e8:6b:58:8b:ec:6a:ea:d3:60:a4:
4b:a9:88:33:73:d8:49:0b:b4:47:8f:c6:aa:4c:96:2f:c9:fa:
2c:3b:2e:3d:76:e7:c3:63:5e:dd:fe:73:ff:26:74:c1:ab:25:
0c:02:c9:27:95:d6:af:c2:d0:7c:0f:b3:5a:b7:51:2f:bd:d1:
ef:fc:f3:59:77:57:49:a2:21:01:00:24:38:ce:8a:28:a1:68:
39:a6:b1:20:57:92:c6:53:84:b7:02:84:96:fc:b2:30:92:e8:
4a:5f:c3:07:bd:86:3d:d0:6c:1b:8c:80:09:14:41:29:c7:58:
f1:11:38:76:da:17:36:5a:15:41:eb:fe:03:26:ba:3f:87:ca:
13:ca:81:42:82:56:79:32:87:c2:4e:cb:58:84:e3:9b:46:88:
4a:aa:56:3d:2a:4d:5f:4e:b1:8a:fc:12:c0:39:35:fd:58:1c:
b7:6b:96:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:18:00 2025 by rpki-client