Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
File: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft (raw, json)
Hash identifier: lPItSBcHr8sSAecNyg2mbNZt4Od2ADH/4Rp9wgg+hWM=
Subject key identifier: 09:AF:99:B6:0F:B9:A5:5C:BF:BC:AC:9C:DC:E1:12:3D:AE:46:4D:6E
Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
Certificate issuer: /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Certificate serial: 019A72CA4E59FD344F3F3478403A1B7CA15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:00:52 +0000
Manifest this update: Tue 11 Nov 2025 12:00:52 +0000
Manifest next update: Wed 12 Nov 2025 12:00:52 +0000
Files and hashes: 1: BZnndlQQXrhtsi1w92QwnbcTVos.roa (hash: xdoIZn2kmQaThra2U5g+oAnP8t2eo6iub1zi69U/YhE=)
2: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl (hash: gOYRs9nrh6ebOALMNUmcD/H/vJHxsIciK6HGYE7/tng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:4e:59:fd:34:4f:3f:34:78:40:3a:1b:7c:a1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Validity
Not Before: Nov 11 12:00:52 2025 GMT
Not After : Nov 12 12:00:52 2025 GMT
Subject: CN=09af99b60fb9a55cbfbcac9cdce1123dae464d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:23:1a:68:c2:fb:c9:18:d0:de:9b:24:77:
fb:b4:35:3e:79:54:c7:03:95:ac:4c:47:cd:72:00:
28:a8:bf:0f:35:75:14:45:2a:1a:34:b3:43:77:28:
89:5f:30:6c:05:a6:0e:bf:5e:08:d9:b0:be:4e:13:
80:7b:39:4d:b5:80:b5:a6:a6:87:ad:56:f7:4e:3b:
09:87:e7:41:f8:74:fe:63:91:41:e3:22:b5:7a:0c:
6b:47:3d:ea:df:87:0d:8d:e9:c1:29:8b:ac:6c:01:
a0:6e:ad:c0:e4:d2:19:96:d5:85:96:f3:f1:71:06:
6c:e6:1e:b0:a9:5e:be:f5:7e:c1:aa:d4:91:90:8e:
be:5b:d9:6c:85:4c:a1:90:50:ce:06:8e:6b:0d:73:
46:a5:2d:07:10:2c:02:f6:51:b9:c5:00:f5:13:11:
87:1d:0a:5e:34:09:f0:6f:6d:f0:67:2a:b8:cc:e7:
54:83:df:fc:dd:80:c7:88:df:32:c5:7d:f1:de:19:
a7:b7:47:b4:ea:14:7c:83:53:cc:42:f5:37:a8:63:
0a:0e:b5:fc:e8:d5:6a:e1:49:df:9a:dd:27:5c:cf:
fa:ed:06:70:42:07:a0:11:ad:93:30:37:a4:f0:09:
1a:23:c4:8d:c0:11:04:31:c2:d2:c2:f9:46:2b:8d:
77:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AF:99:B6:0F:B9:A5:5C:BF:BC:AC:9C:DC:E1:12:3D:AE:46:4D:6E
X509v3 Authority Key Identifier:
keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a8:e5:03:37:5e:a5:a6:f4:61:9a:f4:8e:ee:1e:6d:d8:a2:
ad:44:1a:79:6d:2d:47:a5:e9:b6:94:19:f2:cd:a2:15:88:01:
c0:41:e2:b6:1e:9b:b0:2b:d4:ac:a8:44:f1:ef:f7:70:e5:7e:
b1:e0:39:fa:65:8d:a4:5f:78:4e:5c:7a:56:e0:51:8a:ac:51:
63:07:3f:ac:65:4f:4d:6c:74:fd:b4:96:28:a9:e2:52:40:6c:
58:98:00:fe:c1:c3:06:8b:a2:de:70:0c:30:e4:0d:31:84:09:
60:74:1d:95:62:fa:61:05:27:37:12:3d:c2:6c:fc:bb:4c:d1:
a2:5b:ef:f6:c7:b1:ce:ce:44:f7:67:f7:5b:67:11:3e:61:d3:
3d:02:0d:15:6b:fb:3b:a4:51:f0:60:0f:aa:a4:a8:c0:23:3c:
6c:7b:4b:62:8d:f8:bc:37:a4:12:fa:de:37:36:f9:96:5a:62:
d3:28:7a:15:da:99:5c:9e:d8:ac:57:92:dd:9a:72:42:cc:00:
ba:18:57:c2:59:d8:b3:50:e4:8e:35:c8:31:70:18:d1:0e:5d:
69:ea:c8:0e:f2:fe:c4:4f:3e:5e:cd:b9:d0:2c:b2:2f:df:76:
6a:5a:d9:8b:bf:2d:dc:a7:8c:c7:e3:aa:40:c3:b1:2f:d8:78:
9e:75:06:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:20 2025 by rpki-client