Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
File: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft (raw, json)
Hash identifier: v/tVgmNegyUa+C6/1Dae6UtPWMBWuat7kmxJiVa9pDo=
Subject key identifier: 5D:1A:C7:A4:47:90:A6:23:31:D4:F5:AB:4F:EB:36:39:E4:C4:4C:13
Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
Certificate issuer: /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Certificate serial: 019A4F62E014B9B6ABE90EDC30BAB3FA4058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:01:11 +0000
Manifest this update: Tue 04 Nov 2025 15:01:11 +0000
Manifest next update: Wed 05 Nov 2025 15:01:11 +0000
Files and hashes: 1: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl (hash: hxf6Lna0iX0ut50LIcsmeBIoL1U644Klhm+JXuppl9Q=)
2: gj7G_bFbDmDYpYp6GKUqBVaPkf0.roa (hash: 636LllEYf1p/aMnvVspv63btZ6guwyZEmYUh7DiMd9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:e0:14:b9:b6:ab:e9:0e:dc:30:ba:b3:fa:40:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Validity
Not Before: Nov 4 15:01:11 2025 GMT
Not After : Nov 5 15:01:11 2025 GMT
Subject: CN=5d1ac7a44790a62331d4f5ab4feb3639e4c44c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:28:07:4c:8d:d5:3d:08:df:df:30:76:eb:
76:df:98:1a:35:27:28:24:3c:77:f8:ad:93:1c:30:
07:ae:40:d4:ba:fe:02:e9:c4:13:a5:56:4c:38:59:
11:fb:50:ce:be:c3:ec:57:ea:3e:fb:44:12:23:ab:
c1:24:da:6f:06:0a:29:8d:95:5d:7d:07:16:c3:81:
db:31:d2:1b:e7:9c:61:29:c4:6f:77:be:4e:6e:d4:
09:3e:ac:93:9b:e2:8a:f6:0f:0b:df:19:f3:63:a7:
7d:d7:e2:50:51:e1:96:49:cd:83:cf:91:c3:0b:0e:
27:ef:a4:ed:35:7f:82:9f:2b:30:97:56:c1:ec:23:
c5:de:3f:9e:98:bc:48:b0:af:55:c0:2b:a9:6a:ff:
b3:af:13:0c:fc:26:b6:da:3f:78:f2:ad:3b:ab:f3:
0e:a6:94:a9:c2:25:89:4b:ea:89:a0:fe:a6:a3:1d:
bb:d4:2f:1b:87:67:c1:b2:0f:f1:35:a6:01:c0:f3:
3b:58:08:1d:45:fe:ec:c6:80:e5:37:b8:81:52:0c:
65:5b:a5:d5:01:a2:3c:fc:2b:2e:1f:ca:4a:c5:d3:
52:38:6b:39:a8:54:0c:5f:c6:27:53:7d:68:a9:15:
94:42:80:96:f5:ae:45:38:b9:00:2e:5f:d7:6a:6c:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1A:C7:A4:47:90:A6:23:31:D4:F5:AB:4F:EB:36:39:E4:C4:4C:13
X509v3 Authority Key Identifier:
keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d5:7e:14:c9:5b:0d:56:05:0f:c8:8d:e2:f4:7d:e9:71:f4:
f1:af:e5:dc:09:e1:e2:b2:f4:f4:0b:7c:f2:e5:26:75:1b:2d:
c6:a2:75:ab:21:33:ba:01:30:98:99:41:54:c3:a7:26:87:18:
c8:bd:61:f7:ca:ae:24:19:cb:63:9c:bd:a2:f2:8d:03:8e:c3:
c8:8a:e6:f8:51:4d:5c:95:55:19:94:72:02:c7:c7:f7:e1:d6:
04:cd:38:61:42:df:b4:92:55:a1:99:d3:90:fb:a0:15:fd:b7:
00:d5:1f:4d:4b:fb:e3:3f:a4:2e:bf:ea:c3:de:e2:7e:2b:eb:
99:ca:2f:29:ce:7f:b2:d9:83:b3:fd:63:ba:29:3e:43:81:ab:
ee:19:c1:87:90:8c:3f:7f:35:fe:bc:dc:2f:25:5b:d3:9f:b7:
d8:92:9d:b4:e9:fa:45:8f:10:e0:5a:b1:9e:27:17:c2:06:b6:
10:55:28:20:5a:d6:9c:f4:c0:cc:8a:75:d7:8d:da:a8:b5:32:
ab:1a:68:aa:27:62:2b:f2:a3:4f:44:48:82:5f:8d:3f:56:cf:
fc:61:1c:ce:b3:b0:6b:9f:9f:00:eb:b6:b5:0b:7b:9b:e4:79:
f0:8a:be:a1:63:5c:66:ee:4f:f5:e3:d6:b1:df:ca:64:13:63:
9b:db:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:14 2025 by rpki-client