Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File: hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier: Yg6yE/X+vKQtfgRFweDBpo4ciAylGT3gH6+xPc4WtZ8=
Subject key identifier: F5:11:D8:41:0D:B9:C6:7E:7C:67:1A:BA:55:A5:53:1B:42:E5:32:DE
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 019A4E4FC171BEE938DA320C14E1A94935BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number: 114F
Signing time: Tue 04 Nov 2025 10:00:40 +0000
Manifest this update: Tue 04 Nov 2025 10:00:40 +0000
Manifest next update: Wed 05 Nov 2025 10:00:40 +0000
Files and hashes: 1: 0pi9IaQq2fBWcGfcpKeC_IHzvEQ.roa (hash: 7NVRHz/yavsbwJXBgfeDxYrCqDuUxp9nZbgGaZLZ9oA=)
2: 3wW5MOLSStojI9xiPbeDzYTIyjU.roa (hash: 2XAYsLytjrXYCpBJtfGxqKAam2Z4NRRhSRFoEEd4Llk=)
3: bpfV9qpUqRU7ZbL5m4qH_-0K2rg.roa (hash: 4P0zOtuiLjjQhgT/25d48jeUAEanfYakXWIUUX0ljiU=)
4: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: noAB12pX4sMkJCLoLLeGtTH2lzNVmANgYJFOYAq/WFs=)
5: mPqcgtGb2yf9In758ERINrkMypo.roa (hash: NIdkZJadBz8qYXRNbhuo0LCb4YMZcnXeOqxZtSChOrc=)
6: yXjHrq-s43_JYr0rLELUWWQUfRw.roa (hash: 4zzMUSCqPCS+1DFvUjbQidVA6cErC1SxAP7lBmahGck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c1:71:be:e9:38:da:32:0c:14:e1:a9:49:35:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Nov 4 10:00:40 2025 GMT
Not After : Nov 5 10:00:40 2025 GMT
Subject: CN=f511d8410db9c67e7c671aba55a5531b42e532de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:d2:dd:ff:91:7b:27:4c:77:7a:87:ed:75:
89:14:d8:ab:a0:ca:bc:36:88:64:5a:d4:58:7f:4f:
71:87:93:53:04:f1:9e:03:7b:fe:98:4a:b8:0f:33:
61:c0:02:97:d1:15:8e:18:fd:41:1f:36:fd:13:c8:
50:73:5f:95:14:10:59:a5:e0:b9:f5:58:6d:3d:c5:
3b:4b:92:07:13:17:b7:b3:5f:70:5a:3b:ec:c0:03:
e0:a5:3d:d2:69:d2:3d:3f:3b:a5:30:e6:6f:09:b0:
8a:41:81:88:3d:05:a9:c3:93:83:8b:28:2b:0b:12:
0c:7a:c4:33:ca:db:1d:c1:01:05:11:7c:fc:1f:ea:
05:73:ae:97:10:eb:dd:79:d2:8e:f5:d5:73:80:28:
d3:6f:45:54:76:0e:a7:88:b9:61:6a:09:52:1e:45:
c5:a2:04:2f:3d:12:f5:63:66:da:14:76:0f:cf:22:
a6:45:e9:f2:35:63:df:65:6f:73:b0:ee:63:67:d5:
57:b8:1e:74:78:8b:ea:25:df:91:8b:2b:52:1b:de:
58:de:2d:a6:de:b4:88:56:85:78:09:f2:eb:5a:5d:
8c:09:4c:c3:7a:b0:22:d6:6b:f7:fd:68:28:7f:b2:
ce:8a:65:b2:4e:62:cd:70:88:8f:b1:6c:7d:40:ba:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:11:D8:41:0D:B9:C6:7E:7C:67:1A:BA:55:A5:53:1B:42:E5:32:DE
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cb:14:99:d4:3f:79:73:c0:78:f4:a7:f3:27:73:f8:df:bf:
72:00:fc:8b:19:45:82:47:78:fb:13:d9:7f:6c:90:f8:7f:44:
7d:96:a7:d3:9e:66:ef:d3:55:f9:ce:d6:d1:38:2e:ec:2c:07:
82:7f:77:0d:2a:46:37:75:8b:a9:f8:37:c0:63:54:94:7c:ed:
be:00:c1:8c:c1:06:9a:63:ee:24:d5:f5:e6:2c:d8:cc:ef:81:
9b:0e:3b:ae:01:f4:09:5c:a5:10:a8:33:f2:9e:ad:16:7f:65:
5a:31:79:04:4b:60:37:c9:47:33:93:fe:7b:4d:b7:c8:81:53:
6e:87:fd:13:30:a6:da:98:96:89:f9:fa:6a:d8:69:fe:9c:b0:
8c:8a:b2:e6:eb:b4:dd:6a:99:e5:5c:2f:1d:98:e9:75:85:11:
4e:98:f5:15:05:1b:84:ef:9b:f8:37:cf:9a:91:c6:ce:3c:73:
86:db:e4:bf:0e:2f:a6:08:1b:e6:28:fc:eb:6a:cd:6b:d0:4e:
38:7c:3b:ae:91:41:bb:73:17:60:e5:da:0e:99:7e:e1:14:9e:
8d:fe:ec:e2:d6:c1:a6:38:5e:7b:d5:97:69:56:3e:9c:4d:62:
c7:06:61:e2:f9:33:58:27:5a:84:51:2c:51:82:c4:36:db:8f:
3f:d1:dc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:49 2025 by rpki-client