Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: HeGoWgg/QYQPxAzf5bk8+2yU8ubvOIUk4UfZxALO/aY=
Subject key identifier: 37:A9:5A:A6:EC:C7:DF:49:EF:BA:31:C3:CC:3E:E7:3D:A1:F1:1A:74
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 019A4F6282CD01DBCF7833D96EF9E2F57048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 0771
Signing time: Tue 04 Nov 2025 15:00:47 +0000
Manifest this update: Tue 04 Nov 2025 15:00:47 +0000
Manifest next update: Wed 05 Nov 2025 15:00:47 +0000
Files and hashes: 1: Z7UyGu5eAyy6eE2IZXWBPwAGCsY.roa (hash: 69ViYIsd0St7iG615BWi/I8unIJ08lLoNoGfAWMd13A=)
2: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: CToS+40qEupJm61nbGkSNJy5XgjGrTqIsHrkSElKjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:82:cd:01:db:cf:78:33:d9:6e:f9:e2:f5:70:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Nov 4 15:00:47 2025 GMT
Not After : Nov 5 15:00:47 2025 GMT
Subject: CN=37a95aa6ecc7df49efba31c3cc3ee73da1f11a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:d1:12:bd:be:fa:6d:6d:e0:28:32:7e:36:
6a:4f:8e:ea:07:f5:5e:ed:cd:6b:10:18:0e:b7:27:
f4:e9:44:59:cf:86:b2:03:dd:0b:15:ad:9a:eb:92:
0f:59:a9:ed:fa:69:28:f2:11:33:e6:1c:17:3b:3d:
49:d7:88:fe:cf:0f:77:f9:ad:00:e3:82:12:0d:62:
be:99:91:96:23:bf:b4:f6:77:19:cc:dc:b9:26:2f:
c8:65:1f:0d:5a:52:d1:e0:02:f3:61:9e:9c:34:d9:
37:d8:05:70:32:1a:2b:fd:c9:8b:1a:c7:d2:32:ec:
21:46:34:a3:99:8d:3c:e9:4d:c7:b8:75:6a:35:ae:
b2:d9:d9:c9:d3:f3:67:cd:1d:05:9e:7c:47:55:22:
1d:d7:27:e4:44:f9:8d:46:01:30:f4:87:37:d2:4a:
63:e5:f0:3c:95:7c:4d:e5:6d:8d:0b:79:67:ee:9d:
2b:15:45:6b:67:db:49:08:48:52:75:ec:16:ce:cd:
97:8c:5c:9c:78:b2:03:73:bb:fd:fa:57:ee:f0:19:
71:91:59:1e:e6:c2:f2:f8:c2:45:ed:53:b2:ec:0c:
61:a1:75:5c:6b:39:3e:0e:58:da:85:e4:bb:6a:00:
e6:27:e9:f1:4a:99:a4:c2:45:19:08:f6:7a:66:8d:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A9:5A:A6:EC:C7:DF:49:EF:BA:31:C3:CC:3E:E7:3D:A1:F1:1A:74
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:45:60:6e:9a:4d:2d:ea:76:dc:26:c6:73:69:4e:b4:2d:dc:
b9:4a:6d:c3:73:bd:d0:b3:50:98:76:b9:59:cd:93:f4:b5:8d:
6e:7a:8b:92:70:91:ea:16:7b:ef:13:e4:14:d1:d3:b5:a6:e3:
4f:e1:ad:28:d4:20:4a:61:80:2a:7d:21:1a:c7:18:d9:65:29:
24:d7:0f:c6:59:43:c7:ab:ec:e2:89:5f:4d:d2:0a:73:a7:bb:
cb:64:3e:c0:a5:3c:f3:0b:8c:24:47:92:04:7c:01:cc:83:17:
f5:51:96:47:28:c9:4d:30:0e:77:9f:6f:a1:f2:b9:d2:93:d4:
ba:dc:86:0c:99:29:d6:b1:dd:03:66:31:66:96:93:fd:d1:6b:
bb:8f:fe:ce:ff:e4:6d:b7:64:91:e6:81:67:61:8d:52:2b:33:
7e:a8:f4:79:51:45:35:1c:76:e9:0a:42:bd:d2:5c:48:c9:af:
d9:d0:67:1e:76:90:a5:a3:d3:03:d9:f4:72:17:d6:68:ce:2b:
22:d0:2a:24:94:42:df:b3:38:d4:78:23:62:6f:1d:2a:a9:ab:
ea:0c:4c:a6:e1:05:3c:c3:5b:ef:df:cc:7c:dc:0d:e7:97:87:
30:58:07:e8:90:a4:1f:7f:94:42:98:99:5c:b5:7c:47:c7:fc:
e1:fb:29:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:26:08 2025 by rpki-client