Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft (raw, json)
Hash identifier: F5DWuol6tMcZx8bSwZpgiscAjS31b/BU0vtKEYaFGNA=
Subject key identifier: 27:3F:C4:1B:DE:4E:D3:4A:66:0F:1B:CA:0A:40:B6:B0:66:5A:AE:91
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 019A725C5E29C009A7D0EC43BE7298D201FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
Manifest number: 09AF
Signing time: Tue 11 Nov 2025 10:00:47 +0000
Manifest this update: Tue 11 Nov 2025 10:00:47 +0000
Manifest next update: Wed 12 Nov 2025 10:00:47 +0000
Files and hashes: 1: 5iC1C_l2xnIVtV_ynL6awoKgYMQ.roa (hash: c0Zm1e9RjgR5PBfasK6Q1TzGKpfYhKyszQz9aW+gUGA=)
2: K2099PO4iAtvBzGlnwl1axWP2hE.roa (hash: 6aTZlr/sfRYyJqs+vE8kRpR5W2QDPbSiPNBoLmmWJlA=)
3: hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl (hash: Iej9HrJknXzbgrdN8zEbAzQ9EVA13+SN4/TqfoqVCoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5e:29:c0:09:a7:d0:ec:43:be:72:98:d2:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: Nov 11 10:00:47 2025 GMT
Not After : Nov 12 10:00:47 2025 GMT
Subject: CN=273fc41bde4ed34a660f1bca0a40b6b0665aae91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6d:7c:63:85:b0:29:ee:b3:6d:2b:ff:76:3d:
45:9a:6c:f5:ef:c3:90:b1:16:27:16:a0:94:42:fc:
15:b4:2c:fb:f0:50:d0:cd:69:67:83:de:fd:7f:75:
2d:b8:6a:2a:61:7c:7b:50:bd:5c:10:2e:80:4b:0f:
da:26:f5:64:af:f5:65:ca:5e:80:8f:e0:ce:2d:52:
b8:00:a3:63:13:43:25:b5:d2:de:bf:a4:75:00:94:
d8:2b:c7:22:a5:d7:db:cd:86:d5:17:3c:62:17:b0:
61:5e:6c:7e:c7:16:bc:d8:5f:9f:27:da:22:4c:aa:
50:f3:88:d1:fc:ba:f4:34:23:9b:4b:a3:85:7f:0e:
1c:aa:52:23:0c:87:20:03:b0:22:f8:ce:13:f5:f4:
7e:13:43:0d:c4:b1:72:5d:ba:18:72:60:8b:b9:38:
9d:f7:38:66:8f:6a:54:b3:6e:78:0b:bf:8b:fd:65:
0c:39:fc:23:58:f8:77:6a:45:88:0f:33:d4:98:5a:
29:08:3f:ed:bb:42:b1:b0:e2:e7:4a:fb:51:ba:75:
13:e4:01:25:5f:c8:1b:cf:7f:d4:42:ce:a5:30:69:
45:8f:a2:e4:0c:1a:88:66:db:34:5d:4a:91:af:c7:
31:29:ac:28:36:1b:54:9d:4c:bc:54:31:8b:9d:e8:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3F:C4:1B:DE:4E:D3:4A:66:0F:1B:CA:0A:40:B6:B0:66:5A:AE:91
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7a:d2:fe:5b:0f:79:4c:ea:98:07:8b:c7:02:09:cf:ee:19:
ba:c4:a9:72:2c:c1:a2:3a:0b:fb:7b:bb:09:0c:e4:50:f3:dc:
b4:8d:1d:42:32:82:1e:56:a1:a6:80:bf:94:39:48:04:a3:a4:
bf:3f:0a:d9:ad:41:97:1c:e1:1e:b0:4e:f0:8b:27:d3:f0:20:
87:94:ef:2a:5c:5d:16:be:fa:0e:12:33:06:fe:0c:f6:4f:eb:
89:83:c1:34:f5:73:05:90:2e:d4:0e:a2:a4:bb:76:1e:07:02:
b5:aa:2b:54:41:c8:c0:57:01:96:2b:a7:cd:0c:8d:a8:1f:6b:
01:b2:48:2e:42:3c:dc:00:4e:94:2c:d4:21:76:72:c4:25:ef:
bb:af:9a:89:01:0d:da:75:f1:99:24:e5:bd:52:b5:54:af:e1:
37:7d:e0:21:7a:0e:9f:b1:4e:74:c9:08:5d:3b:76:c4:7d:c4:
50:a2:5f:53:7f:b3:24:06:b6:0d:fa:2e:e1:f5:48:73:18:ef:
90:8b:a9:9e:57:43:37:dc:b8:d5:07:99:ee:f2:eb:c3:60:71:
2f:fa:4e:8d:66:ea:da:0a:38:5a:28:fe:d2:da:e4:f9:81:3a:
62:f2:5f:88:9a:74:3b:19:27:04:88:dd:df:76:78:14:d2:8e:
80:bf:27:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:42 2025 by rpki-client