Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
File: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json)
Hash identifier: xiZkcJm873BqdkqdlocvDjKyeYN5YZYY25VR4Dwl3C0=
Subject key identifier: 05:4E:97:AE:C7:EA:C4:DB:1B:F1:C9:A1:C3:81:C1:41:6E:97:AE:94
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Certificate issuer: /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial: 019A722634E285623427E3F34CD1781D4070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
Manifest number: 1205
Signing time: Tue 11 Nov 2025 09:01:37 +0000
Manifest this update: Tue 11 Nov 2025 09:01:37 +0000
Manifest next update: Wed 12 Nov 2025 09:01:37 +0000
Files and hashes: 1: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: rjZGFbBSHJqpa2+7DaqSZEQOWIB2+k4aHLfN5Tsf6bI=)
2: uwxSfgtDb1hs4GjNpuGb8j73UQc.roa (hash: RSHlzEu5gedHDd64WPHnVhXKRlBuPWqfK8I3+3ZiN70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:34:e2:85:62:34:27:e3:f3:4c:d1:78:1d:40:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Validity
Not Before: Nov 11 09:01:37 2025 GMT
Not After : Nov 12 09:01:37 2025 GMT
Subject: CN=054e97aec7eac4db1bf1c9a1c381c1416e97ae94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e0:b7:57:7e:58:2e:fa:d7:13:dd:a8:f8:97:
de:56:a2:09:6d:6f:c0:32:cc:1d:de:51:26:2b:6f:
c9:9e:14:fa:d3:39:a9:b5:4d:e8:7f:bb:5e:a1:8e:
37:a8:6b:a2:7f:11:3a:7a:fd:a9:78:f3:53:51:d4:
78:10:23:d3:bc:3c:21:f5:91:a9:66:7e:58:0c:35:
7a:f8:05:8a:93:20:8f:92:95:2d:c5:53:37:aa:a4:
a5:cd:36:5b:3c:7a:d3:1c:16:cd:32:32:4a:97:be:
08:b1:10:d0:56:41:67:a4:a3:f3:49:41:6b:ae:f5:
c7:36:a4:08:9b:d3:64:c5:fd:0c:72:a2:a1:3b:e0:
45:17:c4:e5:51:b8:c5:c3:77:46:f2:71:86:b9:c5:
75:69:a7:78:b4:f8:70:e7:af:c3:92:ac:86:dc:cf:
6d:5f:6b:b2:53:32:3c:e0:52:6c:e6:d2:94:c1:77:
1c:c5:91:12:b1:d3:01:6f:96:55:47:47:5a:d5:bc:
13:d1:de:07:b5:3e:9c:20:96:26:74:c0:e5:c2:01:
f4:07:6a:79:6c:8d:bf:16:d9:c6:d1:ef:ec:f0:32:
5a:6a:35:fd:a7:7c:07:b5:eb:a7:06:ba:ae:31:f0:
c8:08:fb:5a:bb:a7:b8:a1:cd:6e:f7:b7:af:28:a3:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4E:97:AE:C7:EA:C4:DB:1B:F1:C9:A1:C3:81:C1:41:6E:97:AE:94
X509v3 Authority Key Identifier:
keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3b:f1:a3:ed:51:12:7f:c3:ee:4a:10:3b:98:d1:05:5b:01:
73:b6:58:a3:42:96:4c:ac:0e:de:fb:84:6f:9b:df:24:71:9d:
94:93:bc:0f:7a:97:2f:82:87:10:e9:6d:b2:95:fd:cb:de:fc:
bf:ca:94:ec:df:8e:aa:41:1d:89:0d:7e:7e:cf:18:74:8e:93:
e4:e6:fb:fe:d3:bd:c6:df:0a:10:58:b0:bd:1c:06:92:15:98:
bc:2a:57:99:9e:c5:67:fb:5f:c2:bc:32:f9:c8:04:98:ca:db:
85:11:4a:7b:c3:18:e7:e9:d8:20:c4:6a:24:9a:fb:57:d4:35:
46:0f:0f:26:40:53:f4:ff:b3:32:89:35:16:9c:ae:51:94:61:
2d:ee:a1:3a:38:2e:13:2c:45:2f:65:64:17:2f:d3:1b:fd:e5:
3d:06:8d:f3:ad:2b:ce:b3:02:63:d1:38:7c:0b:b6:d3:2f:75:
9d:c9:ab:cf:fc:4a:14:96:cb:6a:cc:19:49:d1:40:7e:67:69:
be:ca:c4:c2:62:8c:5e:e2:4e:8e:0f:2e:6b:7f:e6:a8:c9:d4:
44:f9:83:8d:75:fd:8f:0f:f5:23:e1:c8:dc:93:b1:53:88:43:
60:67:ad:69:88:72:3b:ca:43:80:e3:af:76:0a:69:e6:8c:6e:
ad:b1:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:52 2025 by rpki-client