Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
File: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json)
Hash identifier: CpYzak/TflM/exJ9Zyrrmm4TXkKf3IWM5FZx8xK8Eys=
Subject key identifier: 35:AB:FA:3E:D3:C2:36:50:7B:E5:F4:50:51:56:9D:A6:5A:D1:D9:9A
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Certificate issuer: /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial: 019A7226027A5A11C8E5F8A824AA9B0BFA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
Manifest number: 07B0
Signing time: Tue 11 Nov 2025 09:01:24 +0000
Manifest this update: Tue 11 Nov 2025 09:01:24 +0000
Manifest next update: Wed 12 Nov 2025 09:01:24 +0000
Files and hashes: 1: 2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa (hash: midqdd826AD6+dmyiJS8kWbnJkkjvvshmNXqoFoo9/0=)
2: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: Ach/tWg6GTcgg/8KEHxNbXVWwYD54I6CilIsc1ZSG4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:02:7a:5a:11:c8:e5:f8:a8:24:aa:9b:0b:fa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Validity
Not Before: Nov 11 09:01:24 2025 GMT
Not After : Nov 12 09:01:24 2025 GMT
Subject: CN=35abfa3ed3c236507be5f45051569da65ad1d99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:c1:dd:a6:af:a3:2b:1c:9b:a1:59:a1:cd:
24:9c:30:4d:cc:f8:5c:d4:02:62:0a:75:28:75:41:
2a:67:44:9e:e6:65:8a:69:6f:bb:2a:e7:02:61:43:
be:67:bb:0e:16:9d:8a:45:b3:e4:e6:22:54:65:8c:
97:65:39:f7:c8:68:91:de:78:18:c8:32:d0:44:c5:
3b:48:80:ce:96:66:4e:d8:5a:d6:fe:37:50:a1:d7:
1e:19:96:1f:cb:8c:0a:eb:b4:75:83:66:ca:d0:ac:
d9:84:eb:dc:41:56:58:db:6e:12:3e:44:38:0c:3f:
a7:d0:35:cb:f4:30:1a:30:1d:20:38:fc:f8:b4:ae:
25:83:01:a0:1f:8d:dd:07:6f:2b:4e:77:2a:f9:e0:
a3:35:7d:c4:9b:e5:df:4b:dc:a6:21:4a:3c:08:77:
99:93:ab:15:7c:50:35:9c:c6:0a:93:b9:fc:ab:c9:
77:25:93:d1:3f:23:de:43:e3:7b:25:68:d2:e3:bc:
71:52:ba:21:99:6c:14:fd:3b:52:a7:3e:d8:fa:ce:
c0:68:3b:ad:fb:6c:19:90:03:24:90:93:47:8f:34:
b2:9b:1d:b2:0a:3a:10:d5:2a:55:43:88:d8:88:7d:
5c:84:69:4b:a5:8b:a0:98:66:53:79:fd:29:ea:d2:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AB:FA:3E:D3:C2:36:50:7B:E5:F4:50:51:56:9D:A6:5A:D1:D9:9A
X509v3 Authority Key Identifier:
keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:da:67:da:69:f3:d7:52:b2:5e:12:ab:4e:e4:a2:9a:57:99:
67:9f:3f:62:0f:f0:b4:72:39:a0:f7:b5:c8:d6:cb:d9:9d:38:
80:31:8d:8b:45:bc:32:3d:8c:88:c4:9d:23:bb:d2:95:c3:c6:
63:b2:7c:fa:46:21:2e:af:a7:74:f1:aa:fa:4e:3c:ab:32:93:
4a:6b:ac:ac:ed:44:3b:18:95:ef:f4:59:92:68:f6:5a:5f:40:
20:33:70:fc:b3:b2:ed:c9:16:5e:a2:0b:83:93:2c:ad:18:66:
59:5a:66:11:f8:ee:42:9f:ad:5e:ef:51:cd:09:14:e3:e5:e1:
a5:0e:aa:55:53:72:01:be:54:c2:74:99:d9:a6:24:ad:5f:2b:
a7:23:4f:ad:af:ad:a6:96:59:3b:4f:bc:1e:c3:f7:90:53:d0:
ab:86:37:c5:57:ed:86:01:86:79:60:47:33:be:0e:c3:25:80:
a7:c5:e4:c0:64:2c:5f:08:33:c4:20:4a:d3:61:d9:b4:21:d2:
9e:5c:9f:8d:3a:db:7b:7b:ff:c1:bc:f7:c5:84:34:aa:3e:f0:
81:94:4f:1f:10:b3:5b:a9:ce:d0:29:be:ee:16:3c:d2:8f:5c:
40:ef:16:dc:7b:6e:d8:31:48:70:48:49:a2:fe:e6:93:aa:62:
59:93:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:52 2025 by rpki-client