Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: G+4uzftN0BZoAko6mz2+NqZarjf0HWkmitGlcvTXZts=
Subject key identifier: DA:BF:D4:FE:79:A1:C2:09:97:4D:4D:8A:B9:9A:85:60:F3:CE:02:C1
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 019A50075CD81531587F4F53F5DC912F4112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 18:00:51 +0000
Manifest this update: Tue 04 Nov 2025 18:00:51 +0000
Manifest next update: Wed 05 Nov 2025 18:00:51 +0000
Files and hashes: 1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=)
2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: Ph8atad2Zkq8ViVflqOZIt0XkXaJUMFZXQVG4ccSrEQ=)
4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:5c:d8:15:31:58:7f:4f:53:f5:dc:91:2f:41:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Nov 4 18:00:51 2025 GMT
Not After : Nov 5 18:00:51 2025 GMT
Subject: CN=dabfd4fe79a1c209974d4d8ab99a8560f3ce02c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:46:64:99:30:39:20:3b:c7:43:b4:26:88:0e:
58:83:01:15:25:9d:21:5e:39:bc:cd:9d:6f:91:29:
0f:04:ad:2f:fe:e9:85:46:9d:5f:6d:3e:42:a1:cd:
f7:96:19:72:a1:a6:4a:e8:a2:7b:7b:b4:3f:a5:3f:
89:10:6e:f9:57:ed:eb:2e:c3:49:b9:bb:c1:64:a2:
95:d8:53:8c:0a:6d:2b:de:66:28:31:4a:66:30:14:
9b:7c:0b:48:0d:7c:2c:84:64:0d:0f:44:37:af:53:
de:3d:ca:98:32:89:32:67:9d:f4:7b:ee:90:dc:18:
bc:5e:24:ee:f8:9a:dc:a2:42:e9:dc:bc:7c:49:41:
74:5b:2a:04:50:33:d8:91:b9:31:70:5e:54:a8:41:
70:85:59:f8:78:80:cf:2d:6a:2a:a7:1b:cd:9e:5f:
b2:9c:65:99:55:3d:55:84:ef:5c:6e:41:96:d6:f0:
0e:47:f4:a0:99:dd:61:90:41:2f:52:21:01:8f:33:
0b:f9:ed:7d:3b:eb:36:54:a5:cb:41:e2:24:f2:ee:
f5:e6:ec:dd:16:29:be:4d:e9:62:a9:bd:99:c4:f5:
c2:16:92:e9:5e:4e:37:a5:8e:bf:66:0f:a2:f6:87:
9c:7f:50:55:71:42:1b:65:86:05:48:b2:79:cc:5e:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:D4:FE:79:A1:C2:09:97:4D:4D:8A:B9:9A:85:60:F3:CE:02:C1
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8e:56:d7:a6:40:c6:c2:8c:9d:20:0c:5a:eb:76:9f:9f:e2:
a8:81:72:9f:29:c2:80:42:3d:ce:24:4f:3f:e1:30:d9:58:67:
6b:14:ff:c5:72:83:51:bc:94:8d:8e:8f:46:12:ec:c4:f8:85:
c7:50:52:52:d9:29:82:c4:a4:ab:78:7c:88:43:fc:26:d4:83:
20:f8:0c:14:cd:a0:0e:33:68:1f:c8:1d:b4:54:4a:30:cc:2d:
7c:b4:0f:7e:bd:50:4e:c2:6e:4c:33:70:8a:40:9f:33:4c:5a:
0a:77:6b:59:2b:7a:70:44:99:32:72:33:c3:47:91:f3:f2:9c:
81:59:0b:3d:b2:9c:73:80:06:f1:a7:f0:5a:f4:ab:63:79:67:
9c:37:02:1e:3e:9d:45:f4:2f:07:46:6b:45:ab:47:19:37:48:
e9:d0:93:0c:6f:cf:f9:a8:c1:e9:a1:94:1a:11:1d:8b:9e:9f:
30:31:46:a8:dc:69:35:20:3d:2b:13:f8:c9:e1:15:f1:77:8a:
57:6f:ed:e9:6c:6f:49:03:c8:e7:0f:a9:59:8e:d6:8a:f7:8c:
f3:ec:b0:c9:9f:24:e4:cf:95:f0:a2:3b:e9:62:c8:45:ec:c3:
ba:44:a5:a0:fb:8a:4e:1a:a0:2b:c1:38:89:f2:7e:be:69:77:
61:d5:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:11:27 2025 by rpki-client