Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: ynfJLUk/+tQJE3Ai0uwqITZm7KUaD2cvL0kHFs+RUs4=
Subject key identifier: E2:5A:8D:6B:95:FC:F9:D9:51:80:1A:13:50:36:0A:33:2F:94:89:15
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019A711323AB2996AAB9329FF726377D06DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:10 +0000
Manifest this update: Tue 11 Nov 2025 04:01:10 +0000
Manifest next update: Wed 12 Nov 2025 04:01:10 +0000
Files and hashes: 1: hItmJgKobNdHEWAlF-4cCZue6Aw.roa (hash: DNC0yvlzkLonuwJuzoEr0sbbal1ihEVkJ/p6BrvVIIc=)
2: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: tG9zfl90iZVYTr3Cooi84jMRlvlbzu+4YSE727i/9zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:23:ab:29:96:aa:b9:32:9f:f7:26:37:7d:06:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Nov 11 04:01:10 2025 GMT
Not After : Nov 12 04:01:10 2025 GMT
Subject: CN=e25a8d6b95fcf9d951801a1350360a332f948915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:c9:87:b5:39:0c:8e:54:9b:77:ea:fb:c6:
85:5a:a0:21:0a:5d:08:ca:8c:eb:6c:ae:5b:17:98:
38:5d:62:be:b9:7a:6c:fd:48:80:19:86:62:7d:d8:
51:93:ff:81:25:a0:59:2a:4b:4d:c8:9a:ac:98:67:
92:e6:46:e6:9d:0d:04:4f:c9:d3:e4:b0:82:39:4a:
6f:63:5a:8a:b6:73:24:cf:db:24:ff:e6:07:2f:92:
98:04:b3:b1:1b:29:60:81:bd:02:42:3b:64:08:33:
2b:eb:c2:de:2a:87:41:b1:1e:d6:36:5a:43:18:0b:
e8:2b:3b:0e:2e:db:06:1e:e0:71:65:da:e7:86:f4:
a5:15:3f:45:5b:4a:2e:bf:70:37:de:50:d0:3c:06:
42:33:9e:e8:71:4a:a2:d7:0a:93:21:20:8e:ff:6a:
6b:d1:30:62:e1:2c:a0:22:b0:a9:5b:04:3c:dc:2e:
bb:06:3a:03:78:fb:08:34:45:aa:fe:73:88:1d:fb:
50:c1:42:be:1e:6a:19:ad:d9:ce:7d:75:7b:a3:6c:
84:1b:01:49:4a:f2:26:66:84:1a:4e:28:fe:74:c0:
2c:95:0b:bd:57:e0:b7:bb:68:65:35:c1:3b:a5:41:
98:0f:50:b8:6b:df:a7:15:3b:28:59:83:4b:b7:45:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5A:8D:6B:95:FC:F9:D9:51:80:1A:13:50:36:0A:33:2F:94:89:15
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:54:a9:cf:44:c2:55:3b:c9:c1:82:c9:e7:40:71:ca:1a:7c:
5b:41:ad:37:7a:50:8e:78:d4:aa:cb:f4:6b:ab:ed:e8:bf:f3:
97:13:9d:9a:fa:75:09:8e:56:d2:46:2b:dc:48:0f:39:93:a6:
52:47:50:cf:b2:f3:21:0e:15:77:4c:50:96:91:15:50:55:3a:
8c:3f:c3:6a:1e:48:ef:21:50:0d:b5:89:1a:23:0a:8e:08:01:
9a:f1:44:7a:eb:4b:37:2e:a9:4d:7b:04:5d:fd:e0:42:a6:9f:
ba:d6:48:41:d3:e3:54:66:c0:c0:3a:1b:0d:48:ed:fb:31:45:
2e:2c:1d:f0:7c:fa:18:13:3e:b8:1c:15:e6:6f:08:37:a0:a8:
2f:3b:76:68:42:f1:c4:6c:5b:82:b9:8f:fc:4d:4b:b6:66:b8:
5e:cc:26:02:46:50:30:2e:6a:9d:11:1d:72:e0:fe:c6:86:62:
ee:99:b5:54:ce:18:9d:57:9e:9f:ed:d0:09:2d:18:0b:11:1c:
d0:9f:f1:af:74:cb:83:f9:d5:01:55:89:66:2a:7d:f9:8a:e9:
20:2b:60:f7:85:a0:d4:76:99:47:4a:25:9a:ce:75:61:8b:0a:
11:2e:90:93:fc:b8:56:19:6c:a3:47:a1:48:7b:c7:73:ff:fb:
60:97:40:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:30 2025 by rpki-client