Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json)
Hash identifier: +byyeroWEj9/McEzzxsejBLvD2hg1mupg49ScxREZ5U=
Subject key identifier: D6:5D:A8:E1:AB:D5:82:58:6B:9A:6C:5E:74:AA:C0:A6:00:B5:38:31
Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Certificate serial: 019A711342690C2628E01795256D87DB0542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
Manifest number: 1684
Signing time: Tue 11 Nov 2025 04:01:18 +0000
Manifest this update: Tue 11 Nov 2025 04:01:18 +0000
Manifest next update: Wed 12 Nov 2025 04:01:18 +0000
Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: SDUTsrfo+D/qfSGSMF+RH3u66UXK2zhhXWFppZfak2c=)
2: fPSZP8slBnM3nSGAFaRQqfblguQ.roa (hash: blLgu2v1K5L5bFcrSgTETqeQaxD8GwJMq27CaonXujI=)
3: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:42:69:0c:26:28:e0:17:95:25:6d:87:db:05:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Validity
Not Before: Nov 11 04:01:18 2025 GMT
Not After : Nov 12 04:01:18 2025 GMT
Subject: CN=d65da8e1abd582586b9a6c5e74aac0a600b53831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:a7:a3:3e:ff:f6:00:f4:4d:e7:d1:d4:0a:
b4:18:18:f7:33:73:5c:b6:2d:b4:b5:67:68:f8:5e:
f8:02:d0:35:44:e4:77:4e:b9:e4:56:d2:9e:f6:98:
fa:96:f8:7b:68:12:f2:46:23:01:d5:12:70:a1:3a:
db:67:fa:e2:30:2a:e8:e8:9f:4d:2a:e3:41:23:4c:
26:d0:30:08:ca:1e:8e:98:a8:12:93:3f:af:39:b4:
d6:82:a7:41:4b:6b:89:f4:71:d1:96:f5:1a:2b:13:
55:df:41:7d:ce:37:d3:2b:94:6a:eb:f1:38:ec:6c:
bc:7e:c0:79:89:8b:4e:5d:71:06:db:b5:38:55:7a:
3c:06:c5:e1:27:d9:9b:b8:30:f3:b4:a4:6a:aa:d8:
92:df:de:68:59:12:06:b4:e6:bf:c1:60:77:c1:33:
79:38:9a:9a:c3:d3:4a:7b:a6:e0:15:1c:60:74:55:
69:2e:fb:2f:75:9f:d0:44:23:09:35:07:76:10:89:
21:96:1d:d7:67:1f:86:11:d7:d0:e3:49:6b:17:61:
b2:32:e8:a0:ba:d1:9c:c7:c3:05:34:49:b0:b6:5f:
6a:83:f7:00:4b:29:e9:21:93:37:cd:5c:ef:68:a9:
5e:a1:ef:48:fa:dd:65:3e:dd:f3:8a:33:22:dc:83:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5D:A8:E1:AB:D5:82:58:6B:9A:6C:5E:74:AA:C0:A6:00:B5:38:31
X509v3 Authority Key Identifier:
keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cc:ef:40:c2:5a:97:b5:39:78:a9:a2:f4:07:4d:bb:b8:9b:
4e:7d:39:7e:f8:2e:14:d9:b2:80:b4:e0:e7:a9:e3:80:77:08:
8d:56:69:5a:80:7c:81:e0:43:57:5a:f9:89:cb:59:b0:df:7f:
74:20:55:33:cd:33:a1:8b:5d:8c:be:d1:a7:1c:25:49:d5:0f:
80:4e:f8:e7:fd:fe:d8:5d:e2:af:f2:fc:f7:4e:cc:f5:74:1c:
39:76:16:e3:b8:23:ea:b1:31:ce:bd:22:d4:40:6d:26:3e:60:
62:17:0c:e6:d5:f9:a6:0b:bb:e3:76:5c:72:be:a4:80:c2:e2:
c0:4a:bb:41:5e:11:dc:9a:a0:c2:a1:3d:6e:c4:21:24:70:bd:
7b:d3:9e:12:e4:df:bc:f2:78:cd:78:ce:aa:d1:6a:e6:dc:dc:
30:87:24:4c:61:32:d5:8b:0c:64:04:eb:26:11:2c:a8:86:61:
a1:2a:fe:38:c7:75:5d:28:7b:99:38:44:6f:54:6d:b6:bf:7a:
8a:c4:01:dd:0c:31:ce:fb:5e:fe:8a:d2:14:84:bc:88:ef:b4:
97:ba:55:f7:18:fe:ad:bf:5b:00:83:e7:17:0b:99:5c:d2:d9:
f4:58:ad:5c:d7:ef:fe:aa:36:7a:a8:d4:00:98:e6:d4:89:2d:
b1:b1:11:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:58 2025 by rpki-client