Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: 9i+SHst4X4nP39L731fHrhSxWYkgSvPmgjCmb9X6QC0=
Subject key identifier: 72:73:65:34:51:E9:62:6B:16:47:3C:23:C9:93:DE:2C:E1:84:E4:C1
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 019A7226177571E921859451570279AF504E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:30 +0000
Manifest this update: Tue 11 Nov 2025 09:01:30 +0000
Manifest next update: Wed 12 Nov 2025 09:01:30 +0000
Files and hashes: 1: S-FqJ5rHJScfH16THhv-Awb7K-Q.roa (hash: qZ4G5Ir5+2IF3qwAQCRLSDxYrzLLeDBCxC9VdbkE9zU=)
2: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: WTUL6fsplQx6nat5aGPdBmkMjqy/fU2qtOR8NCqanpk=)
3: ie3Ij3d9SbHwlFZKN1iAPlTDPF8.roa (hash: LDgmzuKBYv7wHEv9dhDlxCP+uQjNRE91nisvU0AfRTM=)
4: pWgX5JiF8p7IJPd1N7EyBTiovEk.roa (hash: b0ArhWGdNOXnp+wzwnp1QcD9Bn6HmXnGIfByPMG51fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:17:75:71:e9:21:85:94:51:57:02:79:af:50:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Nov 11 09:01:30 2025 GMT
Not After : Nov 12 09:01:30 2025 GMT
Subject: CN=7273653451e9626b16473c23c993de2ce184e4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:e7:c3:e9:00:6a:49:20:3b:c4:13:2b:db:
99:bb:8e:83:7a:e7:bc:7b:8a:b6:75:7d:5f:33:9c:
7d:7a:e7:8a:02:98:95:d5:b5:80:54:0b:b2:50:1c:
ac:05:45:df:10:4e:b7:40:3d:fc:68:8e:53:ff:7f:
37:2c:4a:a3:0f:8e:21:91:e8:d4:2e:7d:9b:ec:4d:
37:aa:5c:ba:ac:13:63:5d:10:2a:c0:b6:da:63:6f:
a0:bc:95:64:06:14:bc:ab:0d:a0:43:2b:76:14:5b:
eb:ae:7b:c8:7f:02:ad:8a:9b:0e:7c:60:01:a6:f0:
9b:cf:fd:30:b5:6b:e9:66:26:b0:03:12:b5:30:9a:
ca:e7:20:fc:f4:9d:21:ff:5f:3e:b7:60:e7:e0:81:
d7:b7:ff:79:eb:80:d9:d8:b4:11:df:13:8e:61:3f:
96:b8:da:37:b9:6a:85:a6:63:f6:35:31:1c:bc:f6:
9f:07:16:ce:4b:34:6c:d5:00:a7:26:36:82:38:a3:
22:49:62:3a:c2:0e:c0:7a:1c:cc:23:fa:17:11:f5:
8f:31:d1:6c:0c:2e:5e:98:b6:d8:1b:17:a6:48:8a:
e2:7c:21:a0:3d:1a:25:a9:c0:a0:0b:89:10:df:5e:
01:7c:eb:19:c2:4c:55:b6:98:06:78:bd:b3:f4:3d:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:73:65:34:51:E9:62:6B:16:47:3C:23:C9:93:DE:2C:E1:84:E4:C1
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f7:72:ee:d8:49:bd:a4:7c:ef:e9:93:29:fe:d2:7b:c8:6d:
1f:52:49:8e:6a:1a:81:a8:70:74:c9:7a:9f:c6:b5:8c:a4:88:
c7:f9:58:0d:c8:87:89:30:d5:f0:d9:7b:2a:c1:9b:cd:3e:e8:
a1:3c:3f:f1:0a:98:5c:a3:32:cb:6e:1b:de:44:a2:2f:a6:db:
67:00:eb:85:37:b0:b5:65:c1:24:37:b5:63:82:6e:d7:69:5b:
32:85:42:20:bd:72:8f:00:f7:7e:45:85:dd:eb:10:ee:b7:2e:
18:0d:aa:91:ba:86:c3:07:9b:e1:86:ed:c3:ad:9b:57:a4:59:
21:4b:92:bb:31:4f:e8:f7:09:05:76:8f:e8:d4:db:cf:a3:5c:
c8:28:8c:16:af:2e:cc:6c:f9:5b:20:ed:20:26:79:8f:be:f1:
18:cf:6e:34:3e:be:ef:f1:38:97:ed:48:d8:bb:98:b8:0a:8b:
f4:2e:fb:7e:23:af:0c:59:97:a7:78:be:28:f7:be:6a:6d:4e:
50:da:35:e3:69:42:57:c7:53:1b:69:f9:b0:79:72:26:7b:da:
4f:bd:31:1d:4a:5e:85:16:77:f0:29:0d:91:c5:15:1f:9a:2b:
60:42:e3:01:37:fa:90:33:a9:e0:0b:32:20:16:3c:84:86:86:
b1:10:a4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:24 2025 by rpki-client