Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: vXeH9v2m0LBjdGqCGIJ7lRiTcJNKaVY/77F0KN1Vbig=
Subject key identifier: 3A:B8:62:F0:28:FF:84:91:65:AF:F3:0C:61:F6:68:D1:1E:F4:2B:34
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 019A541A7AD9DA2CFE884224DF37EEBED16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 4A
Signing time: Wed 05 Nov 2025 13:00:12 +0000
Manifest this update: Wed 05 Nov 2025 13:00:12 +0000
Manifest next update: Thu 06 Nov 2025 13:00:12 +0000
Files and hashes: 1: VApcgRE4jCfqWsVvaGSgipYw68w.roa (hash: A0jt937wu1wIoLHac2gn8nLqE9B73D2kq/AGcMo7Moc=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: eQA6rJQCXg3CTtvZfQdYudT4rQSx28jIHUndqnR9pLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:7a:d9:da:2c:fe:88:42:24:df:37:ee:be:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: Nov 5 13:00:12 2025 GMT
Not After : Nov 6 13:00:12 2025 GMT
Subject: CN=3ab862f028ff849165aff30c61f668d11ef42b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b9:8a:58:cb:0e:1b:40:c6:15:f8:5f:b8:a8:
25:b6:06:3c:b3:40:56:3c:b4:19:74:88:04:66:5b:
02:1a:c7:2f:fc:ab:8c:18:94:a1:75:85:67:be:99:
ba:84:bd:4c:4a:2d:91:af:f4:46:5c:1c:b1:1b:86:
05:3b:6c:8e:74:a2:39:14:64:20:50:1c:25:2b:f6:
0f:28:89:d5:77:b2:e7:f1:00:c4:e9:20:10:a6:0a:
ae:67:66:7c:e0:55:70:8f:31:69:91:00:dd:3d:7f:
53:04:9c:21:c2:55:58:d6:bf:59:f3:92:ab:43:42:
8d:f2:6c:76:3c:74:75:5d:87:ee:fd:c0:a8:16:f6:
e5:25:17:55:71:d0:20:a3:d3:1b:06:9c:2d:8b:20:
bc:84:2d:e0:d7:2a:9c:bc:4d:5c:83:5e:46:d5:b7:
3e:20:74:27:b7:9a:37:77:70:a9:1c:ac:2a:04:88:
9b:44:ce:47:30:3c:ae:f8:c7:58:f9:ac:f0:5d:10:
c5:87:ba:e2:95:ae:8e:1a:32:6e:5b:89:bb:9e:fb:
17:bb:82:c4:bb:5b:9c:72:5c:c7:38:9b:69:00:91:
a9:c7:4e:a4:c4:fe:74:a8:fc:d9:26:7f:32:10:71:
af:0d:69:f2:22:38:6a:44:01:d9:ca:42:88:62:40:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B8:62:F0:28:FF:84:91:65:AF:F3:0C:61:F6:68:D1:1E:F4:2B:34
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:38:0f:27:ee:a5:02:cc:2e:d8:52:61:f7:4b:6b:91:60:a8:
fd:64:09:3d:ef:75:3d:bf:c8:e8:bd:89:35:0f:08:d6:2a:f5:
bd:42:06:c7:d2:b5:ff:c2:2a:23:42:14:53:1b:ce:a4:a5:5f:
9d:d1:c3:a2:92:7f:4f:40:23:db:eb:1a:a6:e2:29:22:27:f2:
db:36:f7:f4:47:e7:a7:b9:f0:6c:af:6d:6f:07:ba:bf:df:f7:
44:ff:2b:c3:fe:25:66:61:8b:6c:83:9b:24:97:d1:a9:51:db:
89:bc:23:ff:10:25:90:ac:64:ac:23:88:66:2f:5c:08:79:94:
83:7f:79:17:3e:a8:4c:26:2b:55:ab:a5:40:94:a1:1d:ac:3c:
e7:d8:fe:44:73:f0:18:e3:01:47:7a:ee:15:59:b9:95:4b:9b:
21:99:86:61:a3:bc:ab:5a:c8:f9:18:66:88:d1:d3:29:c1:22:
2a:c2:d8:24:17:78:c7:b9:10:93:95:3b:5d:76:bf:a9:a2:90:
da:92:31:81:77:d0:5c:6d:ea:03:99:f1:32:62:8e:8d:f1:37:
be:d7:40:ba:b3:de:ab:40:09:01:e0:e5:1e:b3:a5:ce:b3:8d:
17:b2:7d:13:12:39:03:08:0b:93:7c:87:2e:96:3b:46:dc:12:
84:4a:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:14:43 2025 by rpki-client