Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json)
Hash identifier: osDnCsjveB+Q5xI2Q8zjW1G53TeoDVKQ7GEta1mFAMg=
Subject key identifier: 2F:08:6F:B1:90:73:32:B4:BD:E3:A8:54:9A:D7:42:1B:4E:07:1B:AF
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 019A71B7FF5092CB1DC0AA1B254F90F6DCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
Manifest number: 0803
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa (hash: RAYdTMRTLrvbEHCokIXafnM5optXUCpT7i2/x7+Zbyk=)
2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: z2LzpMMjLk19plp/0VnZA3igSn8zSc9kEuOonYxTNCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ff:50:92:cb:1d:c0:aa:1b:25:4f:90:f6:dc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=2f086fb1907332b4bde3a8549ad7421b4e071baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:c4:82:2c:95:18:89:4f:2b:58:fc:54:dd:
ab:44:08:cd:5c:a8:53:61:85:83:98:1a:cd:66:c5:
a5:80:c6:c1:13:34:d4:0c:c3:86:08:bd:01:7c:d2:
b8:9b:e4:29:12:a3:77:07:52:ad:82:87:ef:b8:0f:
2f:7b:1a:88:f5:c4:49:19:23:04:f3:64:ae:3c:44:
96:99:65:99:3b:c4:20:84:26:31:59:4c:fa:1c:95:
10:00:42:fd:d9:a2:d9:e8:fb:33:84:71:28:59:ea:
3d:e0:8c:5e:8a:82:c8:9a:29:7d:85:53:d8:a2:fb:
f2:22:89:a9:b6:53:7a:54:8c:71:50:66:66:a8:05:
92:f6:38:77:87:5d:55:7f:be:0b:1f:96:30:56:a4:
17:0c:1f:c5:de:27:81:95:f8:d2:6b:d4:06:26:44:
7a:eb:f3:6b:27:c4:34:b8:75:02:aa:97:4b:bf:36:
61:0a:1a:51:62:eb:c1:bd:63:93:39:a1:12:b0:f8:
c5:be:72:df:96:ec:5e:0d:f5:ac:8a:25:15:77:5d:
dd:64:8c:46:d0:2e:29:3e:5f:3b:af:5a:e0:08:ba:
e0:da:73:f3:fe:2b:09:6a:bd:45:50:7d:d1:9d:2b:
ad:18:84:d5:c2:99:f6:52:43:24:72:b2:cc:17:67:
da:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:08:6F:B1:90:73:32:B4:BD:E3:A8:54:9A:D7:42:1B:4E:07:1B:AF
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:04:2a:df:60:62:91:d0:a9:70:12:f4:f5:6c:0b:07:ec:af:
a4:19:68:1a:5d:ab:0f:d7:b6:76:94:9f:77:20:72:1d:41:83:
bb:bf:5a:3a:cb:32:31:1c:fa:ba:ae:e8:37:0e:dd:a5:0e:6a:
1b:90:8f:c8:f6:6d:4b:99:26:d2:c8:89:a4:6e:f6:1a:c7:40:
c3:65:a6:50:b5:b0:9b:4d:36:0e:74:6f:d2:86:e9:80:56:5e:
ed:c0:3b:8f:3d:fe:e0:08:e4:b2:03:b5:a5:fe:c9:fc:c1:f7:
f6:bb:c5:d6:d2:07:73:d5:20:3e:b2:02:7d:78:a6:b8:18:30:
92:1b:1a:79:54:c2:f6:3d:2e:0a:d4:18:0b:18:0c:34:78:11:
9f:ab:f2:f9:a1:35:81:7f:69:29:b0:f1:b4:db:0d:e9:ce:04:
d3:a7:ba:17:10:a0:ed:7c:06:06:b0:a0:a5:d2:f2:8c:da:f5:
15:1e:ed:43:1f:f9:6d:93:6d:f4:48:23:91:f7:b8:81:44:73:
5e:d6:de:6c:9b:2e:da:7b:03:e5:28:73:5b:97:47:d5:5b:41:
81:63:1e:1e:74:16:e6:69:81:cf:bc:45:01:7f:37:5c:be:7e:
cc:9a:6d:64:22:81:d1:1f:04:f2:00:6d:59:a7:9a:ea:aa:8f:
e6:86:17:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:06 2025 by rpki-client