Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: se1zhutb5scuXWPfqIB/WoMCA3WxAPY9MXKffvvaMKU=
Subject key identifier: C7:4A:AA:ED:C8:A3:98:2A:B4:BD:BC:C3:97:88:AE:63:E8:B6:F8:3F
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 019A7225C2C187814A0F6C9B57463E2874F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: 2d0NREbfTK2FI7htmEEh4N4XLQs.roa (hash: EflrGXNj+c0/KROiAUAdkvP3FPssOcN4j+Wc2GCNRt8=)
2: RN4snQmQ10sMC0pt3uecgVuseDw.roa (hash: Sf04OwdvE8nAZA8tEzv2sgqcn/Ip+2j+x7sXM2qpNDA=)
3: TMFEuWpJtp-N546RTZSeOr_ihcc.roa (hash: 15tgIF1xV8iqz3lwud0LDIWMxNL1aGMOQ99+FVGNT5o=)
4: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: rqEWwvpy5vX4/OsW7rJ9pmLDcuMi+kQk7dRtOK8GkLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c2:c1:87:81:4a:0f:6c:9b:57:46:3e:28:74:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=c74aaaedc8a3982ab4bdbcc39788ae63e8b6f83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:c9:31:c6:73:8e:57:7f:e2:a5:8b:d4:da:
ef:9b:07:25:71:f1:d7:31:9d:35:f6:f6:22:e8:2c:
26:00:72:e6:26:0f:97:fc:7c:7a:7a:51:d6:b9:f0:
94:6d:59:bf:b5:e4:00:db:9a:83:09:4b:7b:5d:26:
3a:82:d3:1d:aa:06:c1:ab:45:ea:e4:25:d6:8b:f7:
20:fd:da:54:23:dc:93:4c:1e:14:52:5d:8f:71:fc:
18:93:ee:71:3f:dd:2b:8c:ba:55:fd:d3:ad:16:ae:
c1:9a:e1:a9:65:42:07:85:7d:4b:3d:91:63:bf:d0:
6a:88:70:4b:29:7d:ff:6e:89:c4:74:a8:37:30:f2:
d1:23:bd:39:3b:74:82:74:dc:9a:fc:23:e6:39:29:
65:43:94:80:15:aa:1d:36:21:b1:c6:f6:a2:ce:98:
70:56:67:2e:10:71:87:cf:6f:94:8a:84:30:f4:20:
6b:4b:fe:de:31:e4:5f:f2:bb:95:4f:81:ec:54:bd:
85:a2:f9:ee:32:8d:22:10:c3:e9:8b:ce:11:84:33:
3b:48:67:de:11:d7:66:55:5a:c4:50:6f:8e:88:b3:
42:40:4a:20:9c:63:b9:89:fe:8b:79:2a:fe:a1:7a:
1c:04:e4:4f:a5:03:79:fa:8e:20:9e:a2:d4:6b:ab:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4A:AA:ED:C8:A3:98:2A:B4:BD:BC:C3:97:88:AE:63:E8:B6:F8:3F
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6a:a5:d5:00:7d:a4:a8:43:4e:35:d7:46:76:ee:ad:d9:c4:
88:53:64:41:6f:02:4c:34:0c:77:f1:b7:60:bc:f3:c9:41:d2:
6d:e7:a5:e5:53:7b:db:01:ea:aa:a3:dd:23:43:5c:0d:06:14:
ad:fb:9e:4c:81:c0:ea:dc:a6:01:e8:f8:41:59:de:1f:84:b1:
63:69:4c:25:ed:ed:fc:78:ff:91:eb:8c:1a:07:a7:07:64:1d:
cd:82:a0:af:ea:6a:99:f4:83:55:eb:ac:8d:5e:67:c6:1a:d8:
f6:8c:c4:b9:8e:10:30:a1:55:db:b0:ef:55:0a:b2:48:3d:03:
3f:5d:79:3b:5f:5a:65:5e:a2:8a:8a:df:29:3d:9d:dd:45:81:
f8:10:e8:42:04:b1:9e:70:63:cf:56:1e:70:69:97:b0:b0:9f:
de:59:6e:ab:ab:54:67:a4:72:69:bb:d2:04:f0:55:48:64:d9:
cd:eb:6a:60:bd:12:69:e1:57:d2:c3:45:03:da:f2:f5:6c:87:
9f:7c:68:1d:84:a8:f8:21:0f:2a:eb:16:3f:51:13:50:1f:f0:
ad:b0:07:86:43:2d:0c:bb:cf:fe:7f:93:67:0e:33:8e:fc:0a:
91:bc:c2:49:aa:d2:79:3c:b3:5f:6e:b2:3f:2f:41:1a:e8:a6:
1c:77:61:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:53 2025 by rpki-client