Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: ZFMHtuL2sePQHW5khKWWNqbtAJ6FtKJRKwgJxRmSo54=
Subject key identifier: 90:11:85:62:3B:5D:CC:EA:C7:D7:50:E8:D8:A3:F9:72:C1:36:FA:21
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 019A0B5DB94A7BD628CFA80B1CDB0E46D96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 03F9
Signing time: Wed 22 Oct 2025 10:01:22 +0000
Manifest this update: Wed 22 Oct 2025 10:01:22 +0000
Manifest next update: Thu 23 Oct 2025 10:01:22 +0000
Files and hashes: 1: UUl9tjMfoZ7A5klfeBDKB274xTs.roa (hash: SBvHQQieYmwuldne0ESh4KLqZuA1XSHveZCrpCqrHvQ=)
2: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: B9D53UapbRBEIoP8VG9xJPaqnsJTGZ2nG04SqR8h5H4=)
3: k3kU5aAomwikuRNdsT68Tqjcik4.roa (hash: wCPtZXM9gkCUtgXFEirTaWeSRaiZvXJy0sUEtKPb0ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:b9:4a:7b:d6:28:cf:a8:0b:1c:db:0e:46:d9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Oct 22 10:01:22 2025 GMT
Not After : Oct 23 10:01:22 2025 GMT
Subject: CN=901185623b5dcceac7d750e8d8a3f972c136fa21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:d5:ab:b3:d3:11:aa:d0:fa:62:a4:5d:ac:
bf:83:e7:16:f0:60:f5:b4:99:fe:91:50:08:27:69:
47:eb:51:60:ee:af:36:aa:dd:cb:5a:66:f6:dc:ca:
95:ea:c1:11:ed:11:d3:9b:81:ae:82:dc:3f:e3:72:
5e:da:4e:ec:f9:4c:d4:97:0f:74:de:0a:a0:4f:85:
f2:eb:21:b7:69:05:a3:70:cc:81:b8:11:4f:f1:d6:
fa:6f:78:e8:2d:54:ba:c9:4c:e3:5b:f5:74:e9:41:
9d:11:61:72:03:2f:e1:c1:ea:41:6e:0f:9b:2d:11:
c5:3d:46:43:cc:b7:f5:5d:b6:ee:c5:94:a2:92:2a:
68:34:7d:a6:d3:17:09:16:25:b6:85:25:f7:5b:2d:
17:cd:a5:fd:35:7c:a0:43:87:a9:46:32:c5:25:ea:
c2:44:5b:f4:bb:69:58:91:2e:72:8d:4d:43:c5:28:
b0:52:65:c7:62:1a:ac:8d:d7:a3:69:58:6e:e5:b8:
5a:18:43:39:94:cc:5c:9a:84:ef:ee:2c:90:94:5b:
20:1f:44:d7:e1:ae:ab:0f:58:ff:5c:4d:ab:1d:10:
f4:80:04:d6:5c:e2:55:2d:0e:34:40:d6:07:7c:44:
47:8d:5e:29:0b:cd:ba:94:68:35:7b:f2:15:4b:fa:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:11:85:62:3B:5D:CC:EA:C7:D7:50:E8:D8:A3:F9:72:C1:36:FA:21
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ca:a0:9a:b5:d0:ec:6e:4b:8c:1a:cd:42:10:d5:69:1f:f0:
95:4c:79:b8:91:34:11:63:cd:97:a7:35:97:42:fb:75:a7:5f:
bc:93:a6:5d:7f:cc:3c:5c:07:cf:be:63:4b:e0:07:a4:d5:a9:
31:ab:50:4f:34:d8:a9:c3:69:65:a9:35:4e:6d:0e:41:87:2e:
fb:dd:aa:e5:d5:b5:19:d2:68:51:77:f2:26:85:64:23:7c:b6:
e7:60:1f:d8:46:4e:3b:eb:d0:ba:37:cc:d5:d2:9f:46:2f:14:
9b:6d:05:58:ca:30:da:68:05:a9:25:9f:b2:80:6a:f8:bf:71:
10:e5:66:28:ef:68:67:6c:07:e4:b4:84:2a:26:a5:cc:27:63:
a5:b0:06:c6:c8:8e:4e:2c:60:3b:8b:2b:bb:7d:6e:86:48:e3:
ed:d6:4a:ce:b0:18:41:4e:91:dd:9c:12:39:e6:2b:5c:a3:47:
fb:54:27:b8:52:4d:ba:92:a1:0a:0c:a0:d4:3e:69:6e:5d:e3:
80:98:ed:dc:f8:69:53:7d:0b:2b:b7:87:1b:af:63:b8:4c:65:
42:94:e1:24:88:cf:12:b3:5e:9d:02:db:66:b6:71:4d:95:24:
fb:e0:a8:a6:81:71:c8:c6:9c:89:e2:39:f4:bf:9b:03:7a:82:
9c:ea:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:33:32 2025 by rpki-client