Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
File: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft (raw, json)
Hash identifier: v2LIT6IjF0FqBCc1k92KAO9/gmSJGmo8vqUQbqpgl9k=
Subject key identifier: EE:4E:BB:C2:1E:2B:F9:97:5B:0D:14:41:75:1A:14:40:4F:92:8F:7E
Authority key identifier: 85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
Certificate issuer: /CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Certificate serial: 019A7293C24C9F4043E5A2DB2A4EA3EC8DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
Manifest number: 074B
Signing time: Tue 11 Nov 2025 11:01:17 +0000
Manifest this update: Tue 11 Nov 2025 11:01:17 +0000
Manifest next update: Wed 12 Nov 2025 11:01:17 +0000
Files and hashes: 1: 5RI4SZ7klYwbXOltWz9mLe7dxD8.roa (hash: GWR45JMOb96igm8o2PgndioWHr8iBdYB9L2Wx8rR7YM=)
2: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl (hash: E6PN0b3xyVVYac3V8AO4lg0DCQ4hHMknN1z09M1Gy+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:c2:4c:9f:40:43:e5:a2:db:2a:4e:a3:ec:8d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Validity
Not Before: Nov 11 11:01:17 2025 GMT
Not After : Nov 12 11:01:17 2025 GMT
Subject: CN=ee4ebbc21e2bf9975b0d1441751a14404f928f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:de:94:df:0b:31:e8:f2:8d:08:10:11:99:
ef:ad:6d:92:de:2d:92:e6:e7:fa:ea:b5:6c:1d:a4:
ec:6f:68:fc:e5:e3:5e:08:8a:b6:53:f0:93:65:ae:
f6:73:cb:c2:a8:f2:21:cc:41:34:83:28:67:45:2e:
45:e0:d4:c2:f8:6a:15:34:61:d2:b1:4c:95:16:cd:
8e:98:e4:e2:ff:5e:5d:a9:b2:4b:ad:9a:45:85:f3:
37:e6:e2:08:fe:30:f0:5c:27:ec:07:34:4b:f4:91:
29:f7:b7:58:3f:c7:a5:61:f0:2f:74:94:80:c6:2d:
08:9c:28:f1:7e:c9:d1:0b:6a:67:af:eb:24:da:f3:
f0:a0:4e:b0:b9:7e:d7:24:8a:a6:a4:87:4f:cc:8b:
8a:7a:2f:7a:da:69:a6:e2:56:59:96:8d:55:0d:8a:
2e:fb:ac:52:bf:80:28:93:8b:8b:e4:cf:a0:11:6f:
39:d9:74:b6:b0:39:1c:c7:de:9d:fa:00:90:35:48:
a1:b9:91:50:32:e0:0b:1b:27:4a:26:07:48:4b:f0:
3c:dc:63:47:82:55:ea:67:a7:6b:29:7f:c5:e2:54:
c0:c3:3d:50:a9:45:9b:75:3c:8e:6a:9b:f2:47:96:
e3:cc:be:c9:d8:85:7b:c7:8e:2c:66:b0:58:51:1a:
c7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4E:BB:C2:1E:2B:F9:97:5B:0D:14:41:75:1A:14:40:4F:92:8F:7E
X509v3 Authority Key Identifier:
keyid:85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f6:a2:2e:96:d2:b5:20:22:03:71:53:5b:f9:62:40:9b:ab:
8a:e1:36:53:b5:d1:3a:95:ee:90:85:65:c3:6f:21:f4:8c:40:
a9:05:c4:40:17:62:90:b5:94:9a:30:37:1b:87:63:ec:80:94:
1c:50:77:34:06:2a:66:e3:42:7d:e4:af:62:52:67:59:a5:f1:
24:1f:2e:7b:d2:13:c8:bf:62:f2:31:0b:e5:b2:5c:ce:c7:c9:
e1:51:47:99:07:18:fc:03:9e:66:4d:00:d4:19:ec:fd:bd:9c:
f0:b7:e3:9b:1e:a2:53:2b:2a:ce:69:e1:3b:bf:90:ed:c7:61:
99:14:d5:c0:d9:45:ae:33:c9:4e:33:b6:6c:70:45:64:60:8b:
3a:c7:0c:90:43:b6:c9:bb:ce:4e:05:72:aa:82:c7:16:d1:a4:
96:14:38:36:fe:b1:33:a4:bc:98:f5:6d:bd:00:88:41:08:ef:
29:b7:0f:08:90:f7:e2:2b:e8:cf:c3:62:0f:fd:91:86:82:f6:
77:40:c3:a4:27:29:70:a6:c9:ba:68:29:27:34:54:2c:c5:99:
ac:aa:dd:36:eb:f2:2e:e5:51:f7:11:d4:6d:ed:ac:be:f5:fb:
f3:52:a6:40:4d:18:bc:75:15:13:b1:b3:35:cc:0c:ee:79:55:
20:b0:89:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:57 2025 by rpki-client