Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
File: HQHtI2TsgiZcaIaf5yvnVzGaMes.mft (raw, json)
Hash identifier: yRQCSe0y/MuI1LMaJaM3bGIpmD0+t44JhpnjWE0p0kQ=
Subject key identifier: FC:F3:77:39:71:3A:2D:39:D6:1B:D4:C9:11:BA:F3:64:FA:22:5D:B5
Authority key identifier: 1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
Certificate issuer: /CN=1d01ed2364ec82265c68869fe72be757319a31eb
Certificate serial: 019A4E865D820A5B124F24B454961466ECD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
Manifest number: 152E
Signing time: Tue 04 Nov 2025 11:00:19 +0000
Manifest this update: Tue 04 Nov 2025 11:00:19 +0000
Manifest next update: Wed 05 Nov 2025 11:00:19 +0000
Files and hashes: 1: HQHtI2TsgiZcaIaf5yvnVzGaMes.crl (hash: N6ncR4XnzY4+0aLpN+neBLiBgtYrVhOCQNL8+lAH4fo=)
2: VrKnPWUHZqDvzs6ur0GOjZl2i2E.roa (hash: mb8FZcI3peRcYmZtZcg+Q1vM47sFhZh3vrE8fwC75+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:5d:82:0a:5b:12:4f:24:b4:54:96:14:66:ec:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01ed2364ec82265c68869fe72be757319a31eb
Validity
Not Before: Nov 4 11:00:19 2025 GMT
Not After : Nov 5 11:00:19 2025 GMT
Subject: CN=fcf37739713a2d39d61bd4c911baf364fa225db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:42:64:1d:ba:5e:df:ef:3e:17:72:8e:6c:
ae:a1:e5:c6:d2:31:3b:aa:c1:61:6f:70:3a:ed:2c:
9d:a5:ef:fe:07:9b:3b:fa:3c:db:4f:33:87:cc:11:
2f:3b:87:fa:1d:76:e4:c6:3b:ca:32:74:a5:4c:22:
12:4e:f7:b0:38:c7:23:c9:31:3f:0f:ac:72:e8:1d:
d5:69:e6:54:82:d3:90:c9:0e:ba:e2:3c:d7:2a:58:
26:b0:4a:d5:d4:c6:e4:e8:5e:91:e9:ad:25:1f:52:
9a:2e:76:2b:ce:15:2c:2c:eb:e0:4c:44:2f:52:5e:
ca:85:11:c1:a0:09:a9:3f:4b:59:d3:8b:aa:04:67:
bc:8c:88:ca:cb:66:e7:15:dd:fd:3d:49:33:33:09:
5f:19:cd:95:25:c5:8b:d8:0d:09:89:aa:4d:f8:78:
35:fe:92:00:12:2f:b0:bc:e1:9e:18:2e:7a:ff:9d:
7f:e4:7b:4d:2d:41:05:f5:bf:99:4e:c0:4c:ed:9e:
ef:73:33:13:3f:06:60:6f:da:41:20:b8:38:d5:32:
f0:d0:0c:aa:15:75:3a:46:9c:08:78:bb:e4:7b:d9:
03:53:32:8d:bf:9f:7c:29:5e:b8:b5:2d:49:78:6a:
10:54:15:7c:b2:d9:39:34:89:f6:b5:40:fd:71:df:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F3:77:39:71:3A:2D:39:D6:1B:D4:C9:11:BA:F3:64:FA:22:5D:B5
X509v3 Authority Key Identifier:
keyid:1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1c:9b:b3:8d:b1:5f:4a:03:28:a4:76:47:a7:33:91:35:64:
46:ca:53:7d:f2:17:e0:aa:4d:5f:80:56:12:0a:f0:6c:cb:23:
58:b6:d1:0d:a8:0e:50:98:a7:83:9c:74:ee:a6:4c:53:06:6a:
9d:ba:4b:cd:0d:e2:4b:54:10:a8:47:ed:61:e8:88:5a:d4:af:
35:b8:d4:5f:1b:3d:ff:c9:67:38:f0:db:64:20:73:72:fd:e3:
ed:7d:e7:58:3c:ca:7f:38:c8:b1:4d:22:9b:78:5a:cd:36:de:
9d:92:d2:97:9a:fb:4f:76:26:59:07:b1:c3:c4:c7:b8:39:c8:
47:7b:82:ff:40:b1:f8:b9:df:70:69:b4:c6:d1:34:12:9d:a0:
8d:f1:05:1b:f8:dc:dc:6c:d6:65:f6:a9:b2:ed:bb:cf:f5:a2:
56:76:59:37:e8:7e:72:66:40:d3:f2:83:2f:a9:ae:8a:65:10:
b0:2d:52:49:5b:6d:60:28:cb:46:d6:76:21:e8:15:80:c8:46:
72:f5:c0:d3:5b:9f:8f:39:59:e4:7f:70:c8:48:99:c0:f2:37:
cf:d6:ba:4b:a3:19:20:1f:64:b4:6a:1d:20:ee:90:86:0c:45:
3f:ed:d9:70:23:02:f5:0c:bb:a7:5a:8f:fe:98:1d:f4:6e:b1:
38:49:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:37 2025 by rpki-client