Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: GotSsyPogpYkbk8vcuOilmrFpbY6PuO+WfhoHMWYK98=
Subject key identifier: 9B:D2:02:6C:41:3A:93:CD:83:E2:AE:57:06:75:64:11:77:F6:64:09
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 019A7225E7C702922D7F9E32507DDA5362F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 1455
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: BYVEd7xc3EBzXbLQU0wScv8W8vM.roa (hash: eCnXcs4Xd2N+nO1T0PH3Iw+HOsHQZJC8Zr12UJP7ABo=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: OAzE3mZTsPgPgXdvI1x9Xb8RaVJvWpOjPhUNjvnpfXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e7:c7:02:92:2d:7f:9e:32:50:7d:da:53:62:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=9bd2026c413a93cd83e2ae570675641177f66409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:5f:86:31:61:b4:cc:e8:da:3b:3f:a4:18:
e7:86:c4:cb:a1:04:37:1c:88:79:77:e7:1c:a6:b0:
c2:ee:f6:12:24:ed:3a:ab:48:3a:2d:dd:af:bb:6e:
ef:a4:62:43:d9:07:9e:37:6e:3c:c9:e0:6c:cf:7f:
a4:2c:5b:d8:ee:70:9f:0d:6a:e9:51:19:c2:72:89:
bb:0a:52:4a:40:a1:3b:5e:b2:48:d9:6e:8d:b3:33:
e9:b5:b9:51:a2:f8:79:fc:9e:6d:17:63:95:1d:a0:
f9:1e:ed:02:67:97:94:7f:07:f3:a6:5f:70:eb:86:
75:d8:ff:52:f1:53:dd:e9:e0:83:87:8b:f5:9f:92:
68:43:a1:2f:0a:ec:8c:ee:46:51:a2:34:49:65:1e:
5b:c3:ab:a1:a3:d4:14:63:dd:31:1e:8c:8b:bb:1d:
9c:2a:fa:79:18:f2:8c:c3:02:14:01:b3:e7:38:ca:
b0:ff:c0:e7:78:64:48:e9:8c:8b:c1:70:71:9b:4a:
0e:a8:03:b1:cb:fd:d6:67:42:08:09:a0:b1:0a:93:
c8:4c:cd:30:82:5b:c3:ff:e7:cc:a2:65:e8:74:19:
a7:65:f5:97:5d:9c:ba:cb:56:84:c3:8d:10:ac:43:
34:23:db:28:0b:97:77:af:03:98:fb:5e:b5:4c:62:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D2:02:6C:41:3A:93:CD:83:E2:AE:57:06:75:64:11:77:F6:64:09
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:95:a3:be:b2:39:14:2c:20:a4:88:34:ac:9a:b2:3b:c6:66:
3d:e7:87:b9:11:c5:cd:80:1b:5c:7d:29:ef:a1:2b:5b:ea:58:
cd:e7:3c:a7:75:fd:90:65:df:16:cb:0e:ec:b9:39:38:b3:ca:
b1:41:1c:17:52:53:78:14:0e:ea:07:1b:f6:01:7e:b1:0a:f4:
ee:28:e9:d2:4f:37:4e:af:f0:7a:5e:cf:25:84:1b:cb:6c:99:
88:0b:15:ed:77:8a:a7:d7:44:ef:15:6a:1c:f8:3f:81:04:fa:
4a:f1:a6:9f:6f:b0:3d:0d:ae:48:d0:01:80:74:64:eb:d0:31:
66:e9:8d:64:b6:5c:8f:3d:96:8c:ad:8e:55:6f:1d:2e:cb:85:
d0:d1:8d:36:02:17:54:2d:d6:23:f7:64:d0:6f:76:cc:80:4f:
97:d0:6f:4e:8d:98:c0:14:9e:47:e1:9f:e1:c3:fa:c4:9c:86:
48:dc:ad:dc:28:74:b1:04:93:9f:31:fa:9b:6f:47:48:57:82:
77:62:e5:ca:66:e8:a6:1f:3c:6c:ab:d3:6d:21:12:89:4e:fc:
a6:6c:32:0c:6f:b3:cd:53:3d:59:c1:87:c1:d3:c0:5f:d0:ff:
8b:f5:fc:83:99:4b:21:a4:30:63:05:dd:83:f5:b9:6f:66:92:
b1:45:33:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:55 2025 by rpki-client