Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier: 8hQMDog/Or3cutAC93f+07bn1/52ArQ+Z8cGwEv6EZY=
Subject key identifier: A7:55:9D:50:E7:04:D0:5D:F9:EB:D0:CC:C0:1C:9A:BA:43:FE:82:0C
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 019A4E866A5CFF3A4B363C24509D19184B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number: 1079
Signing time: Tue 04 Nov 2025 11:00:23 +0000
Manifest this update: Tue 04 Nov 2025 11:00:23 +0000
Manifest next update: Wed 05 Nov 2025 11:00:23 +0000
Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: 4m+ahx/ghetILG0UhnpJ/hv1yG9qSCQ476bRTthju6A=)
2: LjvscEK241_TnXIZYmD9gfa2eq0.roa (hash: 0euqfqSMh1dqgtwiYuyK1jN/xv8/2F/xzn29uxLt1Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:6a:5c:ff:3a:4b:36:3c:24:50:9d:19:18:4b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Nov 4 11:00:23 2025 GMT
Not After : Nov 5 11:00:23 2025 GMT
Subject: CN=a7559d50e704d05df9ebd0ccc01c9aba43fe820c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:66:9f:67:5b:3a:7c:48:36:95:9e:23:3c:
c1:59:ab:42:71:05:71:af:42:b1:10:2c:14:38:ac:
a7:8a:66:b1:9f:42:b3:88:70:26:02:71:c7:eb:c3:
04:85:62:4e:d9:98:f2:07:fa:10:d9:85:50:ff:56:
af:d5:89:54:ac:a9:06:0b:c0:4a:e9:3f:bf:25:e5:
bd:49:ca:0b:08:b9:2b:25:79:f5:a5:3f:b2:da:cd:
8e:5d:37:2d:52:de:28:e3:75:fe:a8:b0:fb:86:31:
88:1f:e1:03:63:19:84:a3:aa:f5:9e:5f:18:ac:96:
1d:4d:4e:ff:ae:a1:df:58:c8:9f:ca:95:ed:a3:e7:
f2:b9:7c:e4:45:72:8c:11:a3:6b:19:be:9a:bf:bc:
43:fa:34:58:29:18:a9:a2:f4:55:98:6c:f7:b4:aa:
65:e5:b3:71:df:9e:5f:6e:74:69:3a:74:5d:6f:c8:
2e:4f:8a:7b:05:73:a3:7b:ed:89:60:82:64:5f:8d:
09:61:86:77:bc:bc:93:d3:3f:28:86:f9:9a:64:e9:
49:b2:c3:a9:d2:21:d8:69:ff:3f:d6:83:7b:22:64:
19:02:50:94:90:0e:91:e8:da:79:16:bd:c1:cb:80:
72:30:f8:80:93:d2:2c:a7:8d:d5:af:f4:2c:3a:22:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:55:9D:50:E7:04:D0:5D:F9:EB:D0:CC:C0:1C:9A:BA:43:FE:82:0C
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b2:d7:67:11:b6:fe:03:d4:da:f2:db:21:72:bf:bb:e4:8f:
7e:ec:9a:56:72:a8:1e:8d:3e:28:bd:09:b3:e0:4c:bd:90:6c:
57:85:e7:33:75:90:9b:84:69:f1:08:a8:1b:9d:ad:1e:b6:e9:
80:3b:e4:e3:a7:d8:c8:79:8f:72:b1:a4:17:c7:d6:e7:d7:1f:
8c:87:a3:40:0c:8b:0c:b6:03:28:8e:7e:aa:6e:38:6d:17:47:
cc:74:bb:69:ff:4f:96:d3:11:e1:56:05:08:5c:a7:66:64:7c:
95:68:64:28:fc:f3:a6:55:5c:f2:db:6f:b5:38:46:25:03:a7:
33:0c:9f:a0:f2:2c:81:59:cc:ca:f2:e9:86:12:29:2b:5b:ea:
fb:e6:c4:f7:eb:6c:7c:d2:d3:44:88:57:5b:0d:dd:6b:a2:70:
c8:eb:45:af:65:45:9a:4e:ab:bf:a9:d1:e0:a4:96:72:6a:4c:
e9:a0:01:25:d5:51:2a:9f:13:7a:7c:a3:23:82:0f:c4:76:85:
44:6b:cd:c5:10:5d:9e:4d:ab:a4:7a:09:1e:a7:bb:76:43:21:
22:5c:67:c3:08:f7:ef:41:96:03:60:cd:dd:be:fb:8e:3a:e6:
f3:0e:5a:57:2c:87:81:46:25:75:cc:83:f7:76:e6:73:25:ff:
69:55:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:36 2025 by rpki-client