Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
File: hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft (raw, json)
Hash identifier: rIuimCeUW3uDAtRtsqJudbnqoqn4OdNZsDzsKsCMybQ=
Subject key identifier: 77:3F:74:D8:37:84:D2:E7:3C:41:E5:A7:B9:11:CA:69:84:73:B8:13
Authority key identifier: 86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
Certificate issuer: /CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Certificate serial: 019A725CD43DB0080A218ACB7724CD8E0226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
Manifest number: 0D62
Signing time: Tue 11 Nov 2025 10:01:17 +0000
Manifest this update: Tue 11 Nov 2025 10:01:17 +0000
Manifest next update: Wed 12 Nov 2025 10:01:17 +0000
Files and hashes: 1: MWwCkyjKodNxojuXE4ToQXLtm5w.roa (hash: Ak0owLXzMtwfRek9KqA/lWNxi61mLQqKV5qpbUxSWP4=)
2: NLcJ1zHiWemoNGCQqxBLJZM1epY.roa (hash: sN7g+z3kFVXgkKd1egNCxj+JRztRoGDD2QPyWEFToRI=)
3: hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl (hash: kOicvKbREb2iYx1S8CsJTLslt9HASLCI2bm+RcFVt6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d4:3d:b0:08:0a:21:8a:cb:77:24:cd:8e:02:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Validity
Not Before: Nov 11 10:01:17 2025 GMT
Not After : Nov 12 10:01:17 2025 GMT
Subject: CN=773f74d83784d2e73c41e5a7b911ca698473b813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:57:4a:c1:b1:62:24:79:14:92:85:f8:df:
20:35:94:7b:19:cd:ed:9e:9c:2a:08:de:75:fb:7a:
f6:f9:6d:97:1a:77:b7:ab:a2:0a:b9:54:6e:b7:01:
19:8f:30:1a:13:99:c8:d5:0f:e6:44:0b:3f:ed:4e:
f6:30:df:7f:da:16:16:02:0d:df:5b:d6:c1:66:93:
44:6d:d1:a8:4d:05:fd:cc:ab:d3:72:a0:07:16:3b:
57:c8:f3:47:f0:ca:68:c5:ed:e9:79:84:9a:ae:b2:
2c:33:50:b6:21:71:bc:18:6d:c6:fc:7e:d6:25:41:
c6:6f:bf:86:8d:a3:3d:16:ad:22:97:03:38:a7:2d:
c9:20:53:21:d1:8d:3f:7b:9f:6e:f9:ac:a3:60:c7:
d4:56:ef:96:68:78:66:d5:79:ee:b9:0c:b9:c1:64:
cb:82:fb:72:a3:3c:71:a4:ba:42:e7:05:41:c9:67:
24:6d:87:84:50:31:bc:1a:9f:3a:d7:77:2f:15:c2:
fa:d1:1f:91:7c:12:ce:a1:4d:6f:1e:c2:10:a8:52:
8b:5d:50:fb:7b:86:e3:00:7e:98:e1:7a:a2:ca:c0:
0c:5a:fa:f0:c6:c5:ce:93:ee:72:c3:21:d6:8b:9b:
79:73:d5:71:66:af:ba:6d:87:92:9b:eb:53:91:4d:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3F:74:D8:37:84:D2:E7:3C:41:E5:A7:B9:11:CA:69:84:73:B8:13
X509v3 Authority Key Identifier:
keyid:86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6f:b3:6b:5b:10:3f:5e:30:2f:8d:a4:6b:e1:17:f0:c2:4f:
c9:82:e9:84:ea:75:b5:05:5e:ae:cb:1b:54:ff:d6:f4:d1:bc:
7d:06:d2:c5:57:9c:0e:26:45:0c:ce:b6:3e:4e:bd:9f:81:e8:
20:80:c1:69:26:af:0b:1f:aa:ce:84:64:cd:dc:2f:96:84:af:
a3:d2:f6:5d:b4:d8:86:81:63:47:f9:fd:65:77:e8:d8:4c:2d:
b2:db:55:67:b5:3b:dc:7e:0e:0d:70:a0:90:0b:a2:2b:c5:3e:
6d:80:7d:5d:50:2e:55:f1:10:37:a3:b8:08:14:5b:59:bf:f3:
51:78:b5:86:41:94:68:36:5d:88:3e:6e:a8:ac:1b:fd:b6:13:
e2:17:a3:2c:b9:b2:bd:03:e0:f6:de:5a:94:7c:55:61:d7:c1:
f5:09:ca:5b:d2:37:ca:5f:5c:ce:60:dc:58:c3:2b:03:8c:d6:
92:3b:c8:bb:26:89:a2:09:ee:45:5d:30:33:4c:92:65:58:35:
ce:4a:60:1b:45:e8:c9:f8:ed:79:25:8e:68:bb:04:e4:83:25:
4f:52:d3:cf:7f:cc:de:da:89:e4:be:ae:43:c6:be:f9:5e:55:
ce:d1:75:e6:38:16:5c:74:2f:0a:39:5a:fd:fc:20:00:31:fd:
2e:b7:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:23 2025 by rpki-client