Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: yBUCJPi+go/eK6r5BMJTk/OpOL1nMRi7LZwKVqmSkN4=
Subject key identifier: E5:54:CE:EC:5A:25:3A:96:79:1B:2A:A4:B2:E3:4F:73:16:6A:B9:98
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 019A725C7C2B985BE940FC067AFF6FB45874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 026B
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: O5dJ1P8qPLvqN1TFZCJv-BCHVwE.roa (hash: 3xRQqmBaiPMEC6+BvwWE12p1a9per8d/4WLoxHZdLwY=)
2: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: 0+1TsRN1Udg8CjhA/5Q1/kw7Jk44pRT5j2cXPiSVQ+8=)
3: hs1Ttmuuy8oKm2rJqVYgyDXaPIw.roa (hash: Byo6rO4TnKOVrKw6LlKH8flPLRHULJLiFuZMsf82Wv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7c:2b:98:5b:e9:40:fc:06:7a:ff:6f:b4:58:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=e554ceec5a253a96791b2aa4b2e34f73166ab998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:8b:01:ca:43:81:bb:ae:f0:cf:3e:2a:2c:
eb:7e:53:b3:e9:d1:c9:9b:ac:43:5d:39:ed:98:b3:
99:4e:84:d0:08:62:38:be:3b:9a:6a:f8:65:77:b8:
fd:83:c8:37:99:d3:e8:07:0d:31:e6:02:55:af:8a:
92:3f:a4:59:c8:dd:74:53:79:a8:1f:97:cd:4f:a4:
b7:fc:cd:35:0c:a9:17:0a:40:78:0e:65:da:d4:bf:
95:ae:e5:f6:46:f7:61:5e:96:3b:b1:a2:06:cb:26:
1f:f9:cb:ed:b3:1a:3f:b8:86:88:b4:7a:1b:86:ea:
e7:87:4d:7c:4f:de:9a:6a:08:bb:9e:85:be:a2:ef:
00:00:af:22:d3:b7:c2:a6:f9:c8:12:32:24:83:07:
a3:b7:59:e2:89:c4:0b:71:4b:6b:7f:63:97:31:42:
16:61:7e:09:31:f5:82:b8:d8:cb:cc:fc:81:c0:c9:
ee:57:4f:76:c9:e9:22:7a:fc:f4:9f:8a:db:92:95:
c9:f4:ce:b1:8f:b8:2f:15:b3:e9:36:62:26:7d:7b:
94:57:0b:5b:4d:26:17:3b:9e:3b:ea:41:7b:a1:33:
6e:f8:16:2d:7d:38:45:51:2f:8a:93:11:c1:34:73:
8a:87:f3:8a:81:85:35:f5:4a:1a:92:74:da:cd:0d:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:54:CE:EC:5A:25:3A:96:79:1B:2A:A4:B2:E3:4F:73:16:6A:B9:98
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3c:e8:c6:19:05:e7:82:20:bf:2f:0a:ce:71:69:6d:59:7b:
ba:ca:81:83:74:79:81:fc:21:74:1e:0b:2b:18:7d:85:d1:90:
e3:59:c0:40:b5:15:a1:c4:d6:07:13:db:66:5e:d9:4e:88:77:
be:0d:09:b1:ca:de:65:17:5a:54:39:2a:c7:a8:31:87:ab:b3:
6c:5d:cb:af:93:41:81:62:b1:85:df:38:23:db:f6:b6:bd:f6:
ec:cd:1b:d7:a4:33:d1:6b:3b:f1:45:e2:c0:91:c5:5e:7f:5e:
f2:54:07:30:ca:52:eb:b4:cd:f2:cc:69:2d:fa:99:63:c4:1a:
c8:f0:e5:b7:b2:32:22:93:69:7d:6c:4b:fa:f6:b4:27:9d:af:
ce:64:17:4f:44:6a:6f:24:87:25:ce:89:d7:b3:50:d5:8f:f7:
69:ef:6b:45:cb:6c:1d:f0:9e:c6:1f:86:d9:09:72:00:2b:fb:
bf:2c:6f:37:af:9e:b3:5c:9a:a6:0a:7d:4f:ec:df:89:3b:b5:
c1:bc:75:44:08:7a:dd:44:32:fa:92:2f:9d:6f:0e:d7:88:35:
5f:1f:37:93:d5:f0:c4:77:10:a8:f4:db:0b:df:31:f2:c2:83:
65:ec:bf:3c:9f:c7:8c:33:f9:92:ea:ad:21:15:0f:b4:b3:7e:
8e:2c:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:25 2025 by rpki-client