Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File: hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier: gSHhe5zVsz6ocIxKUc9Cv2FEUk4CUKqpTRxZOwywDzA=
Subject key identifier: D7:21:1B:45:34:3B:19:90:01:C7:F4:2C:86:D4:DC:C8:6C:D1:EE:23
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 019A714A4367C11A54411D9C62AC930D1088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number: 101F
Signing time: Tue 11 Nov 2025 05:01:23 +0000
Manifest this update: Tue 11 Nov 2025 05:01:23 +0000
Manifest next update: Wed 12 Nov 2025 05:01:23 +0000
Files and hashes: 1: CikwBtDrpk_Y04YCbOYT8RF-nag.roa (hash: FALNdfrlSyLhlDyqgC3nieyWRWeKqBpM0mehDp7pdN0=)
2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: lrWb+SSsB4Uy8FoZbvdgEBwiA44wtc+vlsx2ODW5lHM=)
3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:43:67:c1:1a:54:41:1d:9c:62:ac:93:0d:10:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Nov 11 05:01:23 2025 GMT
Not After : Nov 12 05:01:23 2025 GMT
Subject: CN=d7211b45343b199001c7f42c86d4dcc86cd1ee23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:e1:6d:13:ec:9f:35:69:81:bd:e7:f9:0c:
7a:6a:75:8c:2d:82:62:a3:4a:e5:21:1d:b7:33:d2:
a8:c4:34:24:88:32:1b:72:4d:31:e6:ab:85:b9:b7:
30:d3:78:c8:7d:c8:c7:31:a2:66:25:9f:2d:42:ba:
5c:49:2a:2d:24:3f:0c:06:91:90:06:18:64:a5:cf:
36:73:98:da:6f:70:46:e7:f0:21:43:30:5c:5b:5e:
5f:19:dd:34:09:92:4b:04:28:bf:fb:8d:d3:b6:81:
7f:b1:f0:a5:5c:08:d7:de:c1:d1:58:86:04:0b:46:
67:52:17:de:de:22:88:b7:8d:c0:72:38:2d:4b:04:
a2:c8:2f:a0:9a:55:68:d2:6a:07:45:c7:42:95:75:
fc:a8:18:4c:2c:30:b5:b8:2b:c9:d9:b4:49:6a:5a:
c0:72:4b:ce:40:d8:da:be:3d:61:5c:b4:22:df:c1:
a3:5c:67:93:cd:37:8c:ef:63:d1:9a:63:d4:01:78:
77:c9:75:b4:09:8d:34:fa:a5:14:1e:5e:f5:ed:1f:
31:27:6a:8f:c7:30:0a:d6:b9:19:8e:fe:a3:ef:bb:
b8:fb:2b:93:4b:e7:d9:08:9c:47:c1:e2:c2:02:27:
83:ec:e5:25:0b:18:d8:fc:45:06:ad:a4:86:77:f6:
b8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:21:1B:45:34:3B:19:90:01:C7:F4:2C:86:D4:DC:C8:6C:D1:EE:23
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:36:07:85:f1:24:22:d7:fe:0e:3a:73:c7:20:7a:db:70:fa:
e6:67:71:e2:7b:f7:d5:96:f5:5c:e7:0a:58:0a:ff:8d:66:7c:
58:d1:86:c4:8a:d2:22:a4:00:e6:ba:2b:d5:17:91:96:ba:0a:
50:22:05:7c:a4:94:b2:35:8a:28:7f:be:43:54:2c:5a:a0:e9:
58:69:b4:01:c3:22:a7:c7:d2:19:55:b4:db:0a:27:ec:f4:78:
a0:a1:cd:00:dd:26:d5:34:eb:e1:13:ce:9c:2b:0e:07:e8:42:
16:d7:8b:21:c1:4b:76:81:98:16:4f:e1:12:9f:31:be:99:cc:
66:53:7d:0d:18:ee:58:06:63:29:cf:99:9c:da:d1:70:7e:2e:
60:cb:5a:4b:24:3d:76:7b:df:4c:6a:82:84:68:72:49:91:df:
8c:d5:ed:aa:4a:cf:70:77:d5:af:43:46:9d:bb:5c:a2:d3:a2:
63:a7:d9:a0:88:0d:67:40:97:65:60:38:b1:f2:81:cc:9d:23:
9c:49:e8:66:90:ae:f5:80:ce:7c:f8:c6:59:e4:56:75:ac:35:
5b:53:db:01:37:1e:45:e2:d9:b9:ec:59:ca:e3:f4:f6:23:6a:
68:03:27:9e:0a:ec:49:3c:2b:29:d0:65:7b:9a:14:ad:04:d0:
84:c1:ce:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:13 2025 by rpki-client