Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: QUxG/yk+xnvLDTBnroKznwm7fYmZ8/GU29vTswoNdrw=
Subject key identifier: 36:2B:55:62:D5:74:89:FE:9A:30:05:CD:36:DE:45:5B:C0:60:02:1E
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 019A56E4D51EBC9E0EB18A543FD0824B8837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 0C02
Signing time: Thu 06 Nov 2025 02:00:28 +0000
Manifest this update: Thu 06 Nov 2025 02:00:28 +0000
Manifest next update: Fri 07 Nov 2025 02:00:28 +0000
Files and hashes: 1: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: omepuANhXsiIeh/Thdv9xQNoMqjC4TU9iryJHL4WyI8=)
2: wWq59skVXk0ZG4IFLK9dggmPZBc.roa (hash: G7C47jomjQ8yRWntSox+zS/AjFvrINeu+2AEHacLP1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:e4:d5:1e:bc:9e:0e:b1:8a:54:3f:d0:82:4b:88:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Nov 6 02:00:28 2025 GMT
Not After : Nov 7 02:00:28 2025 GMT
Subject: CN=362b5562d57489fe9a3005cd36de455bc060021e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:d3:b4:72:34:aa:d3:cd:62:61:57:c2:6a:
d5:99:cc:87:bc:ac:7a:ff:69:ff:73:d0:bb:75:34:
0c:02:3a:41:bc:cd:70:fe:9d:c3:ca:03:e2:05:7b:
73:95:c2:12:7e:98:10:e5:68:9e:77:b0:ef:79:21:
fb:ee:9e:79:62:f9:84:f4:f2:5d:7b:3e:c7:94:97:
6e:20:4d:72:dd:a4:19:dc:f5:d7:1b:d0:d1:57:d0:
bd:7a:16:a4:b5:d3:0c:59:72:70:e4:56:2e:9a:ae:
93:24:56:32:d9:1d:ed:fa:02:ed:78:38:b0:3c:28:
c5:dc:94:7f:e4:16:9c:b7:9d:e9:e5:b0:4d:f2:2c:
19:c9:2b:d7:c5:1b:ab:44:ac:a7:8c:ad:08:a2:e4:
a3:30:87:c9:23:b7:5b:72:3b:84:60:64:3d:31:10:
5e:e1:ca:1f:80:16:23:24:0f:13:d4:49:8a:09:53:
19:d2:9c:74:dd:fd:87:a0:dc:41:93:2c:97:a8:af:
43:1f:d6:2c:c0:e5:1a:03:8f:af:6a:f4:03:9e:d9:
64:46:e0:5a:74:40:3d:f8:ac:fe:f0:b8:ff:dc:28:
7b:6a:6a:23:0e:85:74:88:c0:ff:20:5d:57:ee:a2:
fe:86:3c:cc:13:a0:6d:c8:71:ba:6d:be:e0:f2:17:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2B:55:62:D5:74:89:FE:9A:30:05:CD:36:DE:45:5B:C0:60:02:1E
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fe:2b:59:97:21:32:31:06:be:f7:0a:8c:8b:f6:2c:5f:4f:
5d:25:14:ba:0a:fc:2b:4c:13:6c:11:8a:fb:7e:73:2f:6d:3c:
b6:6b:82:91:cf:78:f8:1e:ba:f7:b6:78:74:a2:37:d5:8f:34:
a7:6d:7c:a2:e2:e3:39:28:a5:77:a2:a2:96:45:0e:77:20:cd:
d3:a7:36:b4:78:e4:9d:ea:68:73:93:9e:54:af:09:2c:4b:6f:
3c:8e:bf:b1:d4:1b:60:88:d9:fc:42:f3:42:aa:73:88:d1:92:
0c:26:72:3d:99:7e:2f:15:51:da:68:fe:37:73:b8:8c:b8:52:
b8:a6:77:d1:b8:8e:0d:44:21:15:94:0a:a8:c3:5e:0d:dc:4d:
9b:d7:5a:ed:54:a9:f2:63:40:b4:d3:eb:c4:ea:14:72:a7:8e:
e3:75:38:62:9f:be:98:e4:2c:e8:f9:c8:8b:51:d6:36:eb:a3:
a0:b5:07:9e:ca:df:4d:d4:ef:bc:b9:29:22:01:4a:28:2b:f9:
7b:aa:b5:e0:d3:50:ac:40:ef:0a:63:72:94:3c:35:82:48:97:
f3:ee:af:88:ce:12:75:ed:69:02:73:c5:5a:0d:80:21:45:2e:
48:d5:d8:f5:1c:a8:6f:97:2c:b7:64:6e:cd:94:02:3a:bd:e7:
86:e0:27:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 12:07:04 2025 by rpki-client