Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: xG6LzCwtw2pZh+fSm0fsKTCjFskQDGszssTtFqhAYGU=
Subject key identifier: F5:A5:FA:EA:4E:4D:8D:D8:8F:38:D7:E2:0E:96:D8:78:78:90:1D:DC
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 019A4D742BBF903EDF108DDBFC15B785DCC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 05FB
Signing time: Tue 04 Nov 2025 06:00:50 +0000
Manifest this update: Tue 04 Nov 2025 06:00:50 +0000
Manifest next update: Wed 05 Nov 2025 06:00:50 +0000
Files and hashes: 1: KG6jzdyZvsoXu639b6uxjJ94LA0.roa (hash: zuHbXITXPWpIjm5UWYo1gnuNJcxQg0P5glow8hcHCUc=)
2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: cvbo5xRkdZY/pLaMoTT7+z+bhX4P9nBFFsnHKma/+nI=)
3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:2b:bf:90:3e:df:10:8d:db:fc:15:b7:85:dc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Nov 4 06:00:50 2025 GMT
Not After : Nov 5 06:00:50 2025 GMT
Subject: CN=f5a5faea4e4d8dd88f38d7e20e96d87878901ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:38:8f:ca:fe:49:4c:e4:21:1e:0a:63:5d:
50:2e:1d:33:a0:50:3e:0a:15:d3:d1:10:b8:57:6a:
dd:b3:e8:65:b1:e5:ef:55:a7:dd:90:6f:a3:65:a7:
ff:9a:9f:3a:be:f0:54:19:70:f0:e3:a6:3d:f0:01:
f3:4a:4f:c9:56:d7:c8:e8:58:6c:74:bb:6f:66:09:
1d:7b:11:35:23:a9:e4:f3:d0:ce:96:07:10:1f:1b:
fb:80:ef:ea:bc:54:0e:f3:af:e5:28:cd:a4:c6:a2:
44:81:7a:00:87:aa:91:15:79:be:f4:8b:cb:90:bc:
b2:c0:69:bf:21:24:77:ff:56:b4:e2:6e:0c:5f:e3:
a6:47:a9:b5:fe:f7:56:ad:a3:41:a8:9e:5b:8e:15:
22:94:3c:9c:7f:99:bc:c4:b9:fb:7d:39:77:13:c9:
55:2e:4b:c7:0a:8b:f8:33:68:65:77:d5:62:45:95:
6e:7e:f9:17:9c:dd:0a:a9:d4:5c:94:7e:18:fd:73:
d2:0a:2d:30:fc:f5:f4:2d:fc:ea:57:ef:bd:b0:ef:
b7:38:f1:d4:af:ae:eb:f4:64:ed:15:55:a2:40:b7:
a2:85:f6:da:4a:be:b0:9a:8d:21:1f:62:20:5a:05:
5d:92:a6:49:8b:7f:5d:89:49:b5:59:68:57:4e:6f:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A5:FA:EA:4E:4D:8D:D8:8F:38:D7:E2:0E:96:D8:78:78:90:1D:DC
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:9a:c4:a9:af:f4:4f:b4:2c:8f:2d:29:31:6b:31:66:65:83:
1b:75:bb:41:02:a2:f8:a7:c6:20:fe:ec:a8:52:df:65:f3:a5:
cc:2f:84:12:44:51:7f:75:cc:0f:3c:54:03:c0:6d:70:be:76:
36:da:2f:a0:78:8a:9b:a7:58:87:11:0a:e3:71:79:8c:91:86:
f9:dc:bc:15:a5:52:59:9b:24:fc:40:61:4c:2c:f6:d0:1c:03:
f5:85:5d:d6:13:f6:15:1c:3a:da:e4:4f:8d:2b:1f:9c:ec:6a:
49:c2:c6:af:c9:33:d1:ad:6a:99:a5:9a:60:b9:07:f7:43:bf:
eb:60:2c:c6:9d:dd:76:fe:0b:08:e0:5f:1d:33:34:02:bf:e4:
fd:ce:e5:86:c2:43:20:56:f0:26:b1:8f:6f:80:ca:28:23:0d:
5a:7b:3f:b6:2f:4d:7a:86:96:61:72:39:53:1b:f8:eb:13:62:
21:cd:ac:73:7a:ee:58:29:dd:5c:b6:29:00:b0:7d:ac:ae:dd:
fc:f9:38:f2:17:b1:29:28:7a:65:f0:0f:61:ba:ae:cb:ac:ba:
a4:e3:0b:c2:2e:36:7d:cc:bd:9c:17:00:79:74:e2:da:fb:29:
78:f9:5d:fa:93:37:c5:a2:04:cc:69:3c:5f:65:b0:60:40:62:
26:d2:54:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:47 2025 by rpki-client