Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json)
Hash identifier: 4BUukBcMl/OC61TT4mIGRhyvafX6l4/deZ5a+3rCW9o=
Subject key identifier: A0:38:07:74:52:19:CE:83:EA:DC:8D:BC:46:C3:8F:ED:15:4A:6C:BB
Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Certificate serial: 019A7149E1DE265A65AC7EF5EC4990DE507F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 05:00:58 +0000
Manifest this update: Tue 11 Nov 2025 05:00:58 +0000
Manifest next update: Wed 12 Nov 2025 05:00:58 +0000
Files and hashes: 1: SJWhB7kWgTlTbR2flWrmQ2wlKOY.roa (hash: p8++Hz/3lRer+jzGUuklhwrO6NIeyYEbaz4oXToL4+U=)
2: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: lbJuXkLEQ9vnm/WtmkCDV7IUxsYp0Q4QzpoYK+/kX6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e1:de:26:5a:65:ac:7e:f5:ec:49:90:de:50:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Validity
Not Before: Nov 11 05:00:58 2025 GMT
Not After : Nov 12 05:00:58 2025 GMT
Subject: CN=a03807745219ce83eadc8dbc46c38fed154a6cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:61:6f:f5:d6:ce:65:0d:0d:c2:84:16:dc:
ad:0e:77:1f:d2:2f:2f:ef:81:bd:f1:c4:bb:6a:56:
ed:59:f6:50:42:38:81:24:fc:70:c9:60:52:74:71:
f4:15:be:49:32:b2:6e:e6:e8:cf:ae:57:42:54:5e:
60:47:7f:0c:62:54:13:7e:0d:8e:9b:a0:4a:cc:0c:
9a:49:bf:59:47:2e:2a:8e:0e:44:92:8c:09:a4:ad:
84:f2:c8:55:18:85:43:e4:e3:23:f5:ad:f0:01:0d:
74:2a:28:2f:4f:b2:51:be:88:9e:c5:b1:7d:46:41:
28:ba:65:b4:87:cc:25:63:7c:0c:a0:a8:ff:dc:70:
c2:2e:c7:db:6f:22:02:ba:29:5f:c4:1a:15:83:2c:
61:23:db:54:7b:3e:e6:98:ef:d4:03:e5:5c:77:d6:
97:dc:29:ec:25:d5:c9:ef:be:1d:a2:17:b4:e0:fb:
d7:b3:94:b2:3d:f0:d4:25:c6:48:cb:16:11:96:af:
ad:ad:87:f0:d8:f8:49:a9:6a:f2:1a:ca:be:6c:16:
3d:66:cf:c7:b8:f8:c8:09:49:d0:1d:89:b2:c4:c6:
73:f3:0e:6e:67:e2:e3:cc:cb:b0:de:55:1e:76:5f:
35:42:36:63:79:cf:fe:73:05:9e:bc:87:83:73:90:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:38:07:74:52:19:CE:83:EA:DC:8D:BC:46:C3:8F:ED:15:4A:6C:BB
X509v3 Authority Key Identifier:
keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ca:a1:5e:06:18:e5:35:75:81:f3:28:17:4d:35:9f:09:70:
20:4b:9c:8f:70:2a:10:ce:f6:8b:d0:fd:4d:25:9f:3e:44:71:
0a:f5:9f:6e:02:f6:24:65:09:8a:61:f6:99:11:17:cf:b1:9a:
c7:51:81:25:58:c8:4f:11:2d:91:48:b4:bd:e4:7e:73:7e:d5:
a8:6e:c2:79:4c:32:0b:b5:2e:cf:d2:e9:3e:28:f2:e6:26:2d:
59:87:02:10:ed:4d:5c:03:42:8a:e8:34:b8:4b:6d:4f:b4:9f:
38:7c:1d:96:02:c0:80:fd:80:72:6a:c1:d2:2e:db:93:b7:68:
fc:c8:f6:e0:07:c3:88:7c:2a:f6:21:7b:6b:38:ba:19:1e:a0:
36:89:67:51:d8:70:8d:2e:d4:07:0a:8c:b5:87:03:d8:d9:97:
9b:0b:7a:7c:4c:38:e7:a3:1c:55:75:78:6f:65:ee:6a:bd:f2:
79:3d:17:16:ee:e4:35:94:5b:a8:c7:20:32:69:9f:a2:90:67:
69:af:a5:52:21:8a:38:76:02:49:9a:ca:9a:9a:b2:67:86:f7:
b7:31:94:ff:1a:c0:25:1c:99:ee:e2:bc:50:31:91:32:0d:8a:
d2:51:c7:0e:43:82:c1:88:7e:e6:a1:ac:5b:4a:37:31:8c:43:
9f:cc:28:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:43 2025 by rpki-client