Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
File: rHpOXEMf9seeT1vRtGsF-fRBEM4.mft (raw, json)
Hash identifier: /k5m3kqUHvBz9QdEPFvKpwC17T9hEht5rutiujCALUY=
Subject key identifier: FA:BA:3D:DF:7B:91:FC:6B:06:7D:13:1C:69:FA:38:9E:58:B1:10:16
Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Certificate serial: 019A51513BC7C0CD7BE677D97471FBF8193B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
Manifest number: 0DAB
Signing time: Wed 05 Nov 2025 00:01:09 +0000
Manifest this update: Wed 05 Nov 2025 00:01:09 +0000
Manifest next update: Thu 06 Nov 2025 00:01:09 +0000
Files and hashes: 1: YFU0rK0Che90IboZIqxr-FhxEZs.roa (hash: +N2ECLyQEU3So4t+LKUIhIdvw7PoPWjMAcQERFvIBbI=)
2: rHpOXEMf9seeT1vRtGsF-fRBEM4.crl (hash: s/AxFedEBSTGf4wry34a9s5UTO1XI7T6iR90WEGkT68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:3b:c7:c0:cd:7b:e6:77:d9:74:71:fb:f8:19:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Validity
Not Before: Nov 5 00:01:09 2025 GMT
Not After : Nov 6 00:01:09 2025 GMT
Subject: CN=faba3ddf7b91fc6b067d131c69fa389e58b11016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:3a:e9:10:56:f7:40:c1:ae:e7:5d:f8:b6:
62:78:5f:05:2b:16:35:f6:0a:a5:2c:90:67:e9:d6:
41:e6:5c:7b:a9:82:96:9b:ac:78:a6:48:b6:dd:7c:
33:30:03:13:5b:94:bb:8b:7b:c4:6d:0b:3d:af:93:
58:75:ad:40:20:59:d2:cb:f4:23:77:0f:82:92:35:
27:8d:a6:f8:ff:6c:76:94:81:72:ba:83:42:e7:e1:
b7:90:bd:ca:b2:b0:65:11:63:8a:a2:ff:c1:14:9a:
2e:a0:d3:ff:0b:8a:9f:84:48:ec:67:48:9b:d9:d0:
52:a8:6b:68:ec:dc:e3:2e:a0:7a:1d:86:b0:75:67:
b1:69:4b:a6:c9:d7:6a:e9:fc:d5:91:d4:a2:89:cf:
cb:04:43:53:a7:64:7e:cf:42:a6:d2:7c:c3:96:97:
ae:98:30:43:ae:3d:b2:49:d8:cb:45:01:1e:5f:a0:
6f:c2:08:56:bd:e9:9d:b7:87:a0:85:4d:f3:02:1c:
da:85:72:ad:7d:71:d0:2b:84:83:51:a0:f0:bb:75:
80:78:23:77:9e:be:dc:c8:19:f3:bd:ee:f5:8f:43:
51:fb:80:7f:1c:24:eb:60:5f:2c:ad:13:2b:95:2f:
97:5d:7e:d6:1c:5a:fc:2e:db:8c:4b:26:48:81:db:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BA:3D:DF:7B:91:FC:6B:06:7D:13:1C:69:FA:38:9E:58:B1:10:16
X509v3 Authority Key Identifier:
keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4f:99:07:e1:48:89:c8:3f:4e:a6:49:10:01:73:f0:f3:63:
a2:33:83:8d:a4:32:13:d0:11:94:a9:39:a8:04:52:44:de:3d:
e8:f7:7a:86:30:4a:76:a9:17:e1:38:44:3b:ce:fc:ab:8c:63:
0b:70:1f:2a:3d:92:1e:a6:b0:93:2d:df:b5:46:e9:99:2f:ea:
64:f5:15:6b:ca:a2:28:ff:83:c6:d9:34:9b:3f:3f:52:f2:89:
74:60:ae:5c:e2:c9:f4:4d:a0:82:dc:90:41:b8:8b:be:17:f8:
35:79:28:15:d3:ae:62:2a:29:4e:29:0c:aa:8b:ab:06:48:52:
16:f7:df:bb:f2:b0:b0:4e:e2:65:a6:6f:34:62:06:e5:a3:81:
b9:fc:e7:12:e7:40:86:c0:90:4a:fb:03:75:d4:a4:ac:9c:0d:
71:06:8b:12:36:42:3f:c3:a5:af:e0:28:ee:fb:4a:79:2f:a0:
16:6e:22:e1:83:b5:fe:6d:04:ca:29:5f:18:19:5c:5c:55:ae:
5a:bd:58:6b:ba:b6:7a:65:b8:a8:92:5e:e4:21:63:ac:3b:62:
45:2b:73:98:4c:87:13:50:ac:08:40:38:d9:f3:40:73:3f:5a:
3d:a7:bb:49:b7:63:2b:8e:6b:a2:cd:9c:c4:65:dd:e0:d0:2f:
08:cb:a9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:58:33 2025 by rpki-client