Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: frLwa2EvQKxADvrxK5DcEo4Rfz4cv9y/2OhPWZ0oriw=
Subject key identifier: A6:4E:54:1F:10:37:CB:E6:4A:C7:3A:2E:71:4F:F9:ED:09:5A:C7:FC
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 019A72CA7CED79A39E179E5C0648D19395B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 0BE7
Signing time: Tue 11 Nov 2025 12:01:04 +0000
Manifest this update: Tue 11 Nov 2025 12:01:04 +0000
Manifest next update: Wed 12 Nov 2025 12:01:04 +0000
Files and hashes: 1: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: QJYoBaQFMh7zGIaTXTeBmenohQeS1jdU25kbl2sPBJw=)
2: wypxlBc1J8Bpx8wsCukzLkT7CzM.roa (hash: VSR04yRc8P3tg6W5nBtOO4BrNXPIDW2s4T0F9VJBzcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:7c:ed:79:a3:9e:17:9e:5c:06:48:d1:93:95:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Nov 11 12:01:04 2025 GMT
Not After : Nov 12 12:01:04 2025 GMT
Subject: CN=a64e541f1037cbe64ac73a2e714ff9ed095ac7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:41:27:83:98:37:22:1d:4d:12:2a:2b:ed:
5b:83:5f:13:77:08:08:f7:07:4e:db:12:bb:0f:c8:
7a:0d:45:a0:aa:d8:52:a4:9a:9a:4f:73:3a:11:99:
7b:1c:92:ff:bd:d7:1c:72:e4:a0:48:7e:c6:5a:c9:
a5:f8:05:e1:5e:f0:00:1a:af:5e:64:e1:03:f2:eb:
48:cd:5a:34:96:10:a0:35:65:c6:39:c6:08:36:da:
e5:72:25:d8:b2:ab:7e:11:ce:d3:b7:98:fa:4b:bf:
a8:58:ee:38:2a:7a:94:fa:b3:3f:f2:f2:08:e6:05:
e2:19:4e:91:2f:58:9c:48:79:6d:0f:a4:ed:d5:44:
a8:8a:c2:27:04:16:86:10:16:26:58:5f:e6:4d:58:
ce:07:a1:66:8c:2c:86:ea:4d:08:39:99:c0:c6:9a:
7b:37:3d:ad:97:dd:b9:0a:63:16:44:46:de:36:59:
d3:20:e7:7e:e1:02:98:99:6b:c5:2e:9f:bb:67:42:
66:da:92:f7:1a:88:8e:db:1b:b8:50:ba:ce:ad:67:
ad:70:7a:e3:0c:f4:8f:e9:50:7c:d7:6c:3c:6e:b9:
2b:4e:c1:92:0c:ea:8b:5d:83:08:c7:37:7f:a7:df:
c3:96:48:b9:7c:ea:10:75:db:33:66:fb:cf:2b:ff:
b7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4E:54:1F:10:37:CB:E6:4A:C7:3A:2E:71:4F:F9:ED:09:5A:C7:FC
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4d:10:4c:5d:b0:44:3c:5a:d8:55:c1:7c:58:0c:e9:d8:ca:
fe:f1:1b:81:98:30:74:a7:4d:15:76:83:f4:78:68:18:9d:f0:
3c:f1:31:c1:28:11:e6:36:70:d9:cc:10:31:51:99:96:65:58:
3d:f1:1d:29:ad:19:e5:69:64:52:39:d9:d4:78:26:2b:cf:da:
26:d3:8b:48:41:f4:58:be:9e:47:16:2b:1f:45:ed:f2:d9:06:
2c:da:e1:31:66:e7:f8:6a:cd:0e:52:18:54:58:34:de:0a:db:
c0:89:67:79:62:f2:f6:93:5e:a7:9f:fa:ba:b3:99:17:8a:66:
13:ea:90:a9:5e:eb:39:23:44:4f:11:5a:b8:ee:f3:dd:5d:90:
ed:99:7c:c1:df:96:31:9b:02:72:33:b6:7e:94:3f:3d:13:a7:
8d:8d:9c:65:b8:bc:83:97:56:a3:84:92:e2:5d:6c:32:14:5a:
bb:fb:ea:aa:fe:ec:3e:35:3b:2e:ac:a1:f7:50:11:50:1b:4b:
8f:11:0a:4a:e0:75:c8:08:b0:1c:e3:c2:f6:be:58:c7:2e:6f:
99:28:d2:bd:61:c6:27:7a:2a:37:9a:63:2c:49:76:e4:ba:87:
7f:09:36:cc:20:c2:e1:14:31:e3:bc:67:11:c7:b1:6f:7c:1e:
41:5f:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:41 2025 by rpki-client