Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
File: hpPf7hdoc561l2wkW1rQBbMljsY.mft (raw, json)
Hash identifier: diKfBUVdPA/Y1NjReoxop2p7i7WwIQVN52iyNCYGbh4=
Subject key identifier: 5D:C9:3E:18:46:60:4D:52:01:6B:95:23:7F:E1:2C:FC:6A:98:49:E2
Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Certificate serial: 019A533EC2BB80CBFF2C3F84A920100D8303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 09:00:13 +0000
Manifest this update: Wed 05 Nov 2025 09:00:13 +0000
Manifest next update: Thu 06 Nov 2025 09:00:13 +0000
Files and hashes: 1: heJEz4aIV8pCovQNxPGHm98CLzg.roa (hash: oSOD/5s+DowUJTv2duSzog5oYqkTO1A7yRox3C69klU=)
2: hpPf7hdoc561l2wkW1rQBbMljsY.crl (hash: 0zXMvn0iBpB+rKDUbrW12N57TxniBfSBUqM0hhK2Bg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:c2:bb:80:cb:ff:2c:3f:84:a9:20:10:0d:83:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Validity
Not Before: Nov 5 09:00:13 2025 GMT
Not After : Nov 6 09:00:13 2025 GMT
Subject: CN=5dc93e1846604d52016b95237fe12cfc6a9849e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1e:94:3e:20:51:5f:d6:7e:ee:0f:76:20:18:
1e:b4:a4:58:46:9b:45:b8:d7:04:44:3a:84:1d:d2:
c8:e3:15:6f:0e:a1:0c:d0:73:46:18:35:24:8e:96:
21:96:36:54:d5:97:ee:58:1a:99:1b:cd:f2:e9:4c:
e9:6d:23:b8:21:62:e4:3d:44:28:55:3d:dd:8f:7b:
6a:77:bf:02:dd:f3:92:2c:26:28:3a:7c:8e:7a:00:
6e:c3:55:f2:32:cd:f9:7c:85:b8:d2:68:ab:44:49:
f9:f5:b9:17:58:c7:4f:20:f9:64:54:3a:76:d7:2f:
aa:23:44:1f:6b:30:56:b9:bf:a9:8a:b3:b5:87:6d:
b5:16:59:e1:5c:50:ba:db:a9:0c:8e:1d:6e:96:6b:
75:dc:57:3e:53:02:19:04:2b:e7:7d:20:32:be:f3:
a9:23:7b:72:97:fa:e8:67:22:8e:56:b3:c6:de:97:
5b:fa:09:90:de:dd:7e:fd:4c:77:e9:16:38:6f:6f:
42:6d:ba:7d:4f:67:14:a6:c7:a2:58:b1:84:66:9d:
57:a9:3a:13:8a:94:14:9b:57:08:ec:e7:04:31:1a:
b5:12:07:04:14:51:e1:a3:51:0e:a4:82:90:ff:d3:
49:0f:15:91:0a:4a:1c:18:83:14:b2:dc:50:59:b4:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C9:3E:18:46:60:4D:52:01:6B:95:23:7F:E1:2C:FC:6A:98:49:E2
X509v3 Authority Key Identifier:
keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1b:f8:e7:90:b0:45:c6:7c:93:8d:eb:3a:6b:ce:54:82:1a:
2e:e0:ef:19:bf:db:61:a9:11:0c:ab:20:f4:89:bb:15:4b:23:
20:15:f0:37:2e:3c:cd:af:86:d1:6b:18:c9:d4:93:eb:b9:ff:
43:ed:df:7f:8a:01:35:de:c5:76:c9:ac:31:4c:07:51:11:d5:
ff:83:e6:18:be:c2:e7:7a:c6:02:07:b4:c0:32:6a:61:22:47:
05:31:a1:be:7c:98:e1:b4:2c:e8:ee:6c:37:38:b9:03:6a:76:
2d:1a:ef:c7:54:3c:2f:00:d2:e0:f9:7a:04:14:03:90:62:e7:
ef:8b:25:97:f1:cc:f7:f4:2e:17:d3:e3:f3:bd:7f:95:f9:1a:
af:0a:b6:9b:ab:75:61:15:e9:03:01:af:54:a2:56:5a:19:f3:
3c:9b:66:84:a5:6e:42:d2:6f:b5:d2:33:0b:b1:ca:bb:39:7f:
91:ea:6e:c0:a5:39:5d:12:46:f9:50:6b:98:40:26:08:2c:21:
1d:ee:e2:13:47:b2:84:34:49:3d:99:d2:c9:c7:33:4c:62:4a:
29:24:25:68:9f:ff:6e:33:e4:22:36:61:bf:e1:7c:13:fc:f4:
27:dd:ea:fa:76:fc:42:6a:cd:72:55:bd:3e:a6:37:94:9e:f0:
a4:dc:16:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:08:00 2025 by rpki-client