Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
File: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json)
Hash identifier: OZxhHL3nXhs5DcwTq5sG+bszZDUqhKm6WHKRDL7DgTM=
Subject key identifier: 32:BB:FB:68:67:F6:CF:55:EE:AC:E4:06:B4:9C:C5:C6:6F:9D:87:7B
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial: 019A50E29A1597DB7912EF596075B2954546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 22:00:19 +0000
Manifest this update: Tue 04 Nov 2025 22:00:19 +0000
Manifest next update: Wed 05 Nov 2025 22:00:19 +0000
Files and hashes: 1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: aSdEfGvmxRYy+UXgbSgAqkCciOwXGfyDZAG2vpAGCK8=)
2: PsjhieTymPBMhbBeD2G4Eb2tiXM.roa (hash: bN6R2jhfh/x3ks5vaycX08tQPelsEHr78ADbPw3Z954=)
3: b_wZ8vjY3m-nqcgia8Q1-09feRc.roa (hash: tIRWyoM1DUPvrXEJ2hmu6whNi1gGh3fnMsdJLxUNaQ4=)
4: db-V4RFiWk-DRMRx23Yi5GGB828.roa (hash: nklnqznrcypY4CcHnGmzs30m8K1faHbW1Og3XBCrp1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:9a:15:97:db:79:12:ef:59:60:75:b2:95:45:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Validity
Not Before: Nov 4 22:00:19 2025 GMT
Not After : Nov 5 22:00:19 2025 GMT
Subject: CN=32bbfb6867f6cf55eeace406b49cc5c66f9d877b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:74:5f:7f:7a:6c:c2:70:bb:a4:69:be:f4:b6:
af:40:d6:81:19:04:94:0a:08:ea:47:88:d1:d9:1a:
2f:fe:4b:6a:72:2f:f8:d2:20:7d:7f:03:b8:b8:a4:
97:d6:75:67:23:6f:9b:e0:71:91:2c:c1:bd:85:21:
85:c7:1d:f9:3d:f5:b9:ed:c7:ba:44:8c:ce:28:f1:
5a:4a:41:39:97:82:34:13:de:bd:9a:93:43:6b:50:
b9:19:2a:86:fc:db:30:81:4f:63:46:3c:d6:ee:44:
23:9e:65:ef:b4:a2:44:03:75:60:5f:90:c6:20:91:
dc:93:e0:75:51:84:a0:bc:d4:c7:5f:90:42:67:ed:
6d:f5:ac:fe:1d:fd:61:8c:5f:d3:09:91:09:92:e9:
0f:1b:19:6f:a7:e3:06:c5:4a:fd:27:89:52:45:7a:
a4:29:92:bc:9e:81:61:77:cc:c1:a7:a8:37:43:e6:
7d:6f:34:ae:a1:fe:8d:1b:e8:f0:5d:21:a2:38:84:
84:83:69:ae:30:79:2e:6f:86:76:d1:1b:a1:ee:12:
bd:61:89:01:0c:fc:d6:2b:25:09:25:6b:01:91:04:
03:a6:67:f9:38:f0:d9:81:c3:76:5d:6b:5e:a0:12:
2a:61:99:b2:da:3c:18:37:aa:a7:91:91:5a:97:68:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BB:FB:68:67:F6:CF:55:EE:AC:E4:06:B4:9C:C5:C6:6F:9D:87:7B
X509v3 Authority Key Identifier:
keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:dc:d1:6f:54:93:bc:47:2d:ae:e9:a5:87:58:d0:49:77:fc:
1c:32:32:c3:aa:da:53:aa:a9:12:65:95:62:92:bf:39:81:72:
6f:cb:cd:80:6c:2b:53:87:76:99:cf:8d:bd:1b:b3:35:6b:d3:
b5:0c:74:cf:e1:64:ba:81:ad:36:50:a2:3f:6a:48:60:1c:5a:
dd:fe:3d:19:ad:54:10:4f:6b:4e:29:61:03:73:00:a6:97:fd:
07:db:b3:77:b6:fd:b0:9e:48:f0:bb:a6:d4:e0:5f:c6:66:c5:
58:7a:bf:16:d0:e7:29:22:e7:ce:c4:f9:8a:7e:1a:ab:27:42:
6d:15:48:1d:5b:e4:26:89:d6:b6:ce:88:f4:ba:c0:2d:dc:72:
ab:6e:05:8e:72:4d:f5:7a:e4:bb:1a:07:cf:1a:b3:3b:24:c2:
14:81:4c:4b:db:41:02:ae:9a:9d:98:e1:d5:0c:e6:38:2a:3a:
60:2b:ca:4e:4b:cb:46:f2:07:4f:7b:de:3e:19:ab:55:07:76:
8e:00:ac:09:7f:fe:8d:3a:09:d3:54:75:e3:61:1d:a2:ff:8a:
95:9b:e8:fa:17:67:1e:69:03:ed:55:58:91:9b:61:3b:53:38:
49:d5:44:b9:0f:b5:d0:2a:c8:c0:17:3f:af:b2:7c:22:d1:91:
8e:40:0e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:04 2025 by rpki-client