Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
File: hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json)
Hash identifier: rB0bC7h+juMmVFsf9DOH4ftZPTx/cbgTh65up4W+Omg=
Subject key identifier: F1:9A:DB:16:26:A0:AE:EF:7E:44:67:49:36:DE:AD:94:C9:2F:46:C2
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial: 019A4DE1F20963FEE96F52F06B6F407D5929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
Manifest number: 0E32
Signing time: Tue 04 Nov 2025 08:00:44 +0000
Manifest this update: Tue 04 Nov 2025 08:00:44 +0000
Manifest next update: Wed 05 Nov 2025 08:00:44 +0000
Files and hashes: 1: 574W7z-0GVSyQ6o383reYXA7QZc.roa (hash: 7oxCz8Z8dYajS9esPzPSpl386CuN+PzQh5YVWvXB59o=)
2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: N+OHIByisl3P3YKhcA4C3gGuZcoA9cdQHT7OgO84aJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f2:09:63:fe:e9:6f:52:f0:6b:6f:40:7d:59:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Validity
Not Before: Nov 4 08:00:44 2025 GMT
Not After : Nov 5 08:00:44 2025 GMT
Subject: CN=f19adb1626a0aeef7e44674936dead94c92f46c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:82:0c:cf:69:78:46:08:f5:52:00:cf:71:
a0:d7:52:47:1c:49:da:b5:48:eb:4e:8f:ed:ee:f2:
62:9d:23:f0:51:f7:a2:d7:42:cd:65:08:30:6a:37:
c7:b5:d0:70:46:d0:3a:26:b6:b9:44:c5:80:5f:32:
88:ae:85:cd:a8:66:4b:98:36:fd:e9:30:7f:2f:84:
b8:4e:b1:88:80:23:e2:72:d3:36:b9:8e:6e:fa:4e:
2b:8a:e4:b7:e5:2f:9e:8c:c4:6a:51:f1:cf:26:5b:
f6:14:e3:8e:7a:e1:b8:31:c7:40:43:fa:47:76:23:
6d:c7:3c:78:91:5a:c0:a6:65:04:07:09:ec:79:0a:
0f:a2:54:c0:1b:b7:ec:b9:a6:fe:b8:4e:07:ce:b1:
c3:fb:d6:6e:21:31:bf:67:97:c8:5d:0b:74:ba:b5:
62:0c:7c:df:69:8c:1c:7b:b9:29:6b:8a:ec:03:d2:
0b:2c:0f:83:f6:d4:95:63:ab:f3:06:cd:fd:7f:16:
ca:59:dc:01:d0:a3:39:12:1f:a8:41:5f:62:66:09:
76:29:b2:5d:5c:77:bc:7d:5a:17:11:c0:ca:88:90:
46:c9:3b:01:ed:2e:d9:e8:ca:b5:d7:ba:86:05:5f:
85:7e:35:95:80:4c:9b:f2:26:b9:50:d4:28:c4:98:
34:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9A:DB:16:26:A0:AE:EF:7E:44:67:49:36:DE:AD:94:C9:2F:46:C2
X509v3 Authority Key Identifier:
keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3b:7d:19:28:2e:d2:c2:91:71:23:c0:2e:4d:3e:eb:74:17:
86:28:23:6e:ec:55:49:9e:31:aa:9b:9b:c0:4f:04:9f:66:09:
94:00:58:b3:7e:49:87:fc:61:f0:16:bf:bd:2a:9c:cf:24:cc:
1e:32:a4:1d:85:eb:9a:59:7e:03:e6:4a:5c:ad:1f:15:9f:80:
08:0e:6f:d7:b5:a9:e2:56:95:ae:a7:09:5b:83:79:23:f9:3a:
d0:34:26:cb:d0:bb:79:23:6d:2c:9b:9c:f4:0f:5a:00:48:6e:
cd:69:d7:87:70:2e:c2:0f:ee:d4:4e:7e:87:98:25:0b:e0:10:
1f:d0:6f:8e:93:99:b8:bc:ed:00:0a:c7:c6:f4:f3:e9:c5:66:
26:9b:16:88:37:37:d5:3b:3f:a9:3a:f4:10:74:70:91:a4:13:
8e:18:fd:84:b3:6a:c3:50:10:7d:67:05:c4:0e:cf:d3:84:90:
33:88:02:46:1f:9f:aa:f5:ee:af:80:71:9b:b7:7a:12:d1:d2:
76:bb:8d:ff:6c:18:0b:f5:9e:0f:a0:43:3a:c4:94:d4:e7:af:
79:fc:65:77:17:17:04:32:e0:21:f2:66:ac:96:a2:be:4f:32:
f4:f2:5c:2b:67:4d:f1:4c:c2:e8:06:6d:81:9e:4d:ff:dd:e4:
a9:3e:b3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:01 2025 by rpki-client