Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
File: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json)
Hash identifier: vHNAfiSbIwAL3C9nYUPDdyLda9KBWyl2WzKocEn4OD8=
Subject key identifier: F1:0E:EE:11:EB:08:A7:59:B6:57:AB:83:3A:1E:05:EF:A3:F6:CE:03
Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Certificate serial: 019A71136F85E199ACEBD0E74865AC224EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
Manifest number: 0FF2
Signing time: Tue 11 Nov 2025 04:01:30 +0000
Manifest this update: Tue 11 Nov 2025 04:01:30 +0000
Manifest next update: Wed 12 Nov 2025 04:01:30 +0000
Files and hashes: 1: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: lCzlsyQEoPATAn+T82AcobQD6DZ+C+k+sgVs/4Z42x4=)
2: zzXnyaTo4BATrc17RusBD7eE0wM.roa (hash: 6905vDk9E6YCZ2ECcGKQ29E/7xlB0Pspqzs3gX2rnWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6f:85:e1:99:ac:eb:d0:e7:48:65:ac:22:4e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Validity
Not Before: Nov 11 04:01:30 2025 GMT
Not After : Nov 12 04:01:30 2025 GMT
Subject: CN=f10eee11eb08a759b657ab833a1e05efa3f6ce03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:aa:19:ba:49:9c:9d:76:1a:8b:1b:07:e2:
7c:ca:39:23:c6:f6:e8:40:3f:0d:4b:ca:c9:cb:14:
7a:1f:73:1e:f3:3c:8b:08:7a:68:d6:57:a4:d5:7b:
0c:e1:37:c7:cc:13:6f:fb:6f:4d:c7:af:e8:5c:b7:
a5:a4:8e:db:da:85:13:99:86:59:6a:8f:54:99:0c:
dd:15:8c:30:03:d4:39:7e:e6:cb:53:ec:f3:77:a0:
c6:eb:b1:65:d7:9d:19:b8:48:97:55:2d:d1:a1:94:
37:6c:8f:6f:52:5d:a4:5c:2f:6f:ea:d9:db:16:0f:
12:b5:97:97:0d:d3:cc:c5:9a:68:6c:77:b3:da:f0:
0d:94:cf:c6:04:de:86:51:ab:90:98:23:9f:f6:63:
94:2b:6a:b3:69:bc:71:77:3b:4b:06:f0:b1:4c:37:
99:39:81:f9:7a:4d:f8:01:87:08:9c:57:b9:9a:60:
5f:0c:19:5a:ed:f7:64:4d:08:33:c5:9c:c7:10:b5:
03:3a:34:27:3f:29:69:6c:a3:6c:9b:79:e8:4a:61:
c6:6d:eb:d6:55:8e:0b:3c:46:4c:91:8e:18:8f:2c:
2c:a9:f4:06:64:c9:28:01:34:9f:4b:58:cb:ec:9d:
d9:e3:49:c6:cc:77:84:f2:0b:75:a5:96:38:2f:49:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0E:EE:11:EB:08:A7:59:B6:57:AB:83:3A:1E:05:EF:A3:F6:CE:03
X509v3 Authority Key Identifier:
keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a7:8c:3e:f2:fa:23:da:5e:a1:79:a6:47:b6:50:90:1c:30:
0f:7d:4c:3c:89:d9:05:ee:bb:50:04:1d:18:65:67:4c:1f:d3:
95:e1:8e:8a:6e:84:dd:7c:b7:20:80:8a:50:d1:79:7a:0c:ea:
ae:4e:64:fd:9f:64:1e:85:74:b8:35:2f:c5:f7:92:18:39:91:
75:d3:ec:a4:65:96:fe:ca:ab:6d:94:08:a6:6b:21:37:c8:c8:
57:bb:64:6c:32:06:b1:16:e0:94:3b:d5:e2:be:d4:03:9e:7a:
f6:ff:ec:60:72:99:8a:1d:44:72:fd:8f:46:d4:64:d8:b2:94:
13:3f:06:b4:4e:0f:c6:f9:00:a7:bb:c1:2b:72:31:30:b4:0c:
19:14:6f:ad:b2:d8:52:3b:18:89:aa:80:10:04:ca:a5:e4:3a:
cf:64:29:5e:c5:4e:94:d3:63:fa:61:b8:b0:9a:2f:e5:b8:af:
03:fe:96:b6:f9:91:e4:c9:e1:8e:04:a8:a4:0e:c8:3b:0d:d7:
58:a5:1c:48:da:75:b2:b9:80:79:c7:c0:2e:c9:28:80:f8:cd:
9b:b7:9a:94:af:74:c4:82:9f:15:0c:1f:58:37:31:8c:f7:8b:
59:a4:ae:1b:e8:08:67:a5:19:9e:d6:19:c9:72:2b:f8:b4:23:
91:f2:59:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:22 2025 by rpki-client