Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier: caEP6uPqsrMi0dJgaWNtMuvRQE6eImXcZGRyzgMD4Us=
Subject key identifier: 7B:37:AA:A8:69:E7:BB:2D:6C:E9:D6:57:46:C0:07:2E:95:5E:98:6A
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial: 019A4DAA62CE990820337C6D9FC30E207C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number: 0386
Signing time: Tue 04 Nov 2025 07:00:03 +0000
Manifest this update: Tue 04 Nov 2025 07:00:03 +0000
Manifest next update: Wed 05 Nov 2025 07:00:03 +0000
Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: HnnsvG9TdNVhDkK0GHrqNWtrQ4UQSlbl2WqpWUIpoHk=)
2: tVaiZFiLINawsOK82OFMO15DejQ.roa (hash: 8nEDMZ8EuVxpyIr0H29BICF51Bn0ST34hEU28E7vWbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:62:ce:99:08:20:33:7c:6d:9f:c3:0e:20:7c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
Validity
Not Before: Nov 4 07:00:03 2025 GMT
Not After : Nov 5 07:00:03 2025 GMT
Subject: CN=7b37aaa869e7bb2d6ce9d65746c0072e955e986a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:e9:01:4f:ba:9b:83:19:82:2c:3d:a6:48:
ad:d6:0f:f6:6f:de:c5:d7:4c:b8:1b:7e:76:df:4c:
94:31:7e:68:41:9f:5d:a6:1a:bf:53:a9:db:b7:eb:
d0:e3:b7:31:17:04:e8:06:b3:9d:90:52:b8:83:e8:
fe:ca:39:ac:0f:cc:b3:f1:53:f8:11:c8:b7:e5:28:
70:b0:e0:1a:eb:7e:8b:b1:9e:24:4f:b1:f7:08:07:
fa:49:fd:20:71:c0:8b:08:f2:27:f4:e4:3f:dd:69:
2b:41:bc:11:52:28:f5:2c:ee:b8:de:c2:4c:67:04:
21:4e:04:fd:36:29:0d:61:50:a7:f7:25:0c:6c:e1:
27:d5:13:c7:3e:39:d8:2c:1a:bc:0e:f0:b4:ea:ff:
c2:32:db:87:bf:bc:d3:15:0c:64:ac:61:05:a7:4a:
90:23:43:ce:26:e4:5a:d3:a9:25:b0:cb:04:d0:86:
80:43:e9:6b:3c:da:bb:be:25:d6:06:dc:85:9a:ee:
07:3e:ae:a2:c1:13:38:bc:50:80:78:5b:b1:9e:d7:
33:b9:e9:71:32:13:f8:bb:80:29:04:c7:a2:e7:10:
af:dd:cd:50:d3:3b:3b:b2:a1:9a:91:fd:f3:40:92:
f4:84:a4:09:4a:7b:3a:77:d4:e3:e5:42:9a:31:d4:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:37:AA:A8:69:E7:BB:2D:6C:E9:D6:57:46:C0:07:2E:95:5E:98:6A
X509v3 Authority Key Identifier:
keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f2:25:87:38:76:af:91:ea:3f:87:e4:3e:79:5c:ef:9c:ac:8e:
eb:68:a3:68:9c:2f:50:5f:d5:da:4a:a4:8c:84:7a:c1:6e:0a:
c5:83:a0:04:4b:03:c2:ab:29:85:ba:94:79:e5:9b:45:73:93:
3f:02:a7:c2:03:28:e7:ad:ba:bf:39:51:3c:af:cc:52:52:f8:
08:f6:b3:db:81:7d:f2:6d:32:a7:aa:da:7d:89:d8:bf:41:49:
d7:40:63:df:01:38:32:51:16:1b:4b:fb:50:62:6d:3a:ed:8d:
92:a3:c8:c1:cb:50:4f:af:bd:93:fb:99:95:16:30:88:bb:46:
4c:1e:57:48:6e:6c:1a:33:40:e6:f3:df:28:6c:e3:80:51:52:
98:f1:57:1e:6e:57:8a:8c:54:55:90:ed:78:65:d8:8a:c3:ec:
7e:ec:41:c3:6d:6f:f1:82:dc:db:34:d7:d9:df:1d:78:52:f6:
b3:1a:be:bf:8a:ca:03:2e:3a:b6:a0:b2:91:b2:27:c8:d5:a3:
c9:91:5c:09:cf:5f:ef:fa:21:ab:38:2d:b6:f9:d6:da:55:e6:
09:6e:31:d5:8d:cf:90:8a:09:6c:f7:b6:8b:54:22:1b:45:bf:
d7:35:03:4d:92:a7:7b:70:a3:44:d7:41:c6:02:8d:52:07:8b:
ea:36:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:38 2025 by rpki-client