Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
File: hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft (raw, json)
Hash identifier: xJjcW5l6MgGQkBYkmRskc6ucAr2qdHxw3WiKqYv3ndA=
Subject key identifier: 41:F2:AA:61:E6:7A:F6:AD:DE:EA:7A:2D:1A:21:F2:A1:75:B0:52:8A
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial: 019A71B87AF6CF16F4D740B9D1B2CC12C890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
Manifest number: 5E
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: KAJsgRRCXT2AOjIc1RGApVvjUBI.roa (hash: EyUDYmsNH3ExJ9MYGWA5eL+TYUNqzvdF73tTTAESWwg=)
2: hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl (hash: 3U08fQB99QedbNSab7cyjeKxmedKr3gNUn0/cD8xhHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7a:f6:cf:16:f4:d7:40:b9:d1:b2:cc:12:c8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=41f2aa61e67af6addeea7a2d1a21f2a175b0528a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:e9:35:e0:ab:78:0f:c3:ee:2d:07:27:37:
2a:b7:11:7f:f4:81:8a:39:3e:80:fa:2d:49:10:0b:
c4:2c:f8:e7:bc:f3:2e:f0:c8:ff:95:d8:68:ed:a9:
e5:ed:a0:6d:b2:e4:64:3b:3d:68:ec:8b:98:0c:dd:
48:ac:3c:f1:f4:f6:94:82:07:16:ec:7a:7c:fb:98:
e1:0c:8a:33:1c:de:96:f4:99:1a:fd:99:e9:0b:05:
27:35:e1:ac:53:29:d9:e0:3b:04:50:86:56:b6:20:
43:12:8a:d5:77:c2:aa:09:51:30:6a:bc:50:48:44:
27:38:a0:8f:83:03:f1:16:af:34:f7:97:9b:68:96:
48:fe:35:a5:33:32:07:e6:28:c8:7d:08:ac:74:9d:
48:f6:a0:07:58:8e:93:de:84:29:30:75:9a:98:96:
2a:ff:a1:31:22:f5:ce:5b:5a:a2:50:64:eb:6e:fd:
74:fb:89:00:2a:0c:fc:15:d0:dc:ae:2c:c7:f2:e7:
d7:ee:a6:3b:70:b5:c6:c6:0a:7a:e9:f0:99:69:41:
24:9a:0f:7e:cc:ec:a9:79:12:9f:00:1f:40:dd:68:
09:9a:88:55:0c:22:5e:99:6b:04:64:ff:c5:9f:4d:
8f:c6:2d:f0:a0:1d:e2:cc:aa:19:3c:87:4c:4c:bb:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F2:AA:61:E6:7A:F6:AD:DE:EA:7A:2D:1A:21:F2:A1:75:B0:52:8A
X509v3 Authority Key Identifier:
keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ee:bd:b3:8a:1e:86:b9:4d:ae:c9:a5:96:02:e9:4a:0c:a1:
ed:28:c1:08:94:cc:32:88:0e:30:6d:ed:46:d3:f7:ee:80:b0:
2b:d0:5d:0c:16:4a:da:3a:5b:f9:56:71:f1:5f:66:b1:b7:21:
42:9b:d4:a1:e1:7c:e9:20:39:fd:a6:b5:25:0e:47:35:90:05:
5c:ee:21:29:16:af:d0:60:ff:18:2e:28:a5:c3:06:be:81:d4:
e6:3e:89:49:21:ca:d4:54:6f:35:04:cb:b4:e6:e2:40:d0:3b:
a3:7f:e6:6a:fa:bb:ba:6e:15:ef:73:d6:38:20:00:ac:59:f8:
91:da:4d:69:f9:e5:4b:1e:2f:d9:b9:4a:b9:0e:9d:3b:39:fc:
85:e8:a4:75:da:48:14:eb:4f:b1:a8:92:c8:85:8a:50:79:1d:
05:1d:32:59:98:81:4a:1b:70:98:cb:db:ba:c0:94:5d:56:ee:
d9:56:e9:88:67:2c:ad:cf:fb:cb:3e:49:91:b1:cf:5f:e6:36:
40:d9:57:64:a7:dd:12:2c:55:6b:a1:92:fd:0a:3d:55:6b:d6:
e9:86:e6:bf:30:6e:b3:81:66:1a:ca:37:d8:ea:5e:d6:f3:2d:
7a:6b:62:b4:ba:06:a2:e4:a2:66:44:1f:5e:84:ec:8c:fc:0b:
cd:0e:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:44 2025 by rpki-client