Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: jtXpSM9ljw3Cwq7cgNX8EKPRoyLlapA6yDULsQ/SSaY=
Subject key identifier: DE:B1:0A:37:E5:69:54:DA:50:1C:5C:6D:BD:B7:58:72:FB:86:58:33
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019A70A58A14E80FCE4138789737AB6B47CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 03FA
Signing time: Tue 11 Nov 2025 02:01:28 +0000
Manifest this update: Tue 11 Nov 2025 02:01:28 +0000
Manifest next update: Wed 12 Nov 2025 02:01:28 +0000
Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: mJq0unqCPD/F8N98zat2jH9J9WSDj2nxcS73dOyUnFg=)
2: vlEdWKuRTS0cD9RNJ4tmPb-bgsQ.roa (hash: Y+o+UFhPbkj+17eC+0DjnhM2iiXi4bO98feJGgrh1ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:8a:14:e8:0f:ce:41:38:78:97:37:ab:6b:47:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Nov 11 02:01:28 2025 GMT
Not After : Nov 12 02:01:28 2025 GMT
Subject: CN=deb10a37e56954da501c5c6dbdb75872fb865833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:ea:d7:b8:10:29:8f:a8:a2:ed:57:60:48:
12:46:da:88:00:12:74:52:38:89:34:33:1e:dc:98:
38:21:5f:ef:f7:91:ad:3d:cf:78:f7:8c:0d:19:14:
b5:e9:2d:8c:c2:b9:17:53:dd:71:d1:62:5e:f8:90:
e7:3c:00:7c:c1:ab:6f:8d:0f:c3:d6:89:d6:6c:c6:
51:b7:23:39:6e:d5:d4:50:40:a6:e8:90:f2:83:28:
07:13:49:62:29:80:67:c4:7a:af:8d:9c:a2:4b:6e:
ad:22:9f:7b:b2:22:b4:a4:5e:4d:39:90:17:73:aa:
e5:7e:b1:59:17:d7:96:25:a0:9b:f8:da:03:94:2f:
8a:f6:69:e8:ed:0b:e1:10:67:3e:96:2d:f2:44:0c:
61:b1:40:0a:1c:9b:a7:e8:45:21:eb:f2:76:9f:2b:
04:39:4b:3e:83:73:92:cc:1c:fb:27:6f:9d:95:ee:
eb:2d:23:61:1b:56:ec:0c:50:49:72:59:78:af:60:
85:d4:fd:75:e1:73:23:35:ff:f7:ff:5c:7a:79:1e:
47:1a:83:40:d8:7b:4d:1c:ed:94:95:fc:70:12:14:
e0:b1:91:47:a6:f7:ae:87:72:78:fd:d6:24:72:b6:
e6:91:8f:6f:46:da:05:81:71:87:ce:44:f8:67:a1:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B1:0A:37:E5:69:54:DA:50:1C:5C:6D:BD:B7:58:72:FB:86:58:33
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:31:8a:5e:bc:29:4f:69:39:a0:1a:5b:fe:3b:0d:4d:44:cb:
3f:23:f4:71:69:37:6c:e8:63:5e:c0:61:87:bf:1e:26:74:d5:
dc:75:20:e6:20:be:a6:35:6d:38:6c:d9:1a:4c:6a:b6:8b:3a:
c9:80:70:d3:36:f9:c1:55:0c:a0:28:37:56:ca:59:50:c8:33:
7e:9a:59:74:34:0c:45:5b:3d:44:85:16:06:6f:f9:bb:b1:27:
b0:ad:74:59:d7:49:bb:58:6a:7f:18:a8:f8:a2:24:56:d0:d6:
fd:02:11:bd:d7:7f:a1:19:9c:6d:4c:e0:39:22:33:56:b4:d8:
5a:e0:46:31:81:27:4b:01:df:00:df:f5:c0:47:d3:ee:a0:3c:
cf:84:0c:40:25:f4:4a:d2:5c:e1:d6:6c:d3:eb:01:53:55:d3:
90:72:82:96:d6:80:a2:18:ee:77:68:02:a8:17:da:b0:75:9e:
3b:5f:74:55:e5:b3:c5:93:6f:74:58:53:bb:04:d7:54:75:ff:
32:66:11:53:7b:c9:86:1f:51:ea:29:c5:07:65:48:03:76:d0:
99:8f:4a:c3:ff:67:9d:51:ba:a7:6a:07:51:b3:59:da:f9:fe:
c3:a6:66:14:a6:cf:2f:b4:e3:67:d2:60:13:16:48:df:a2:a4:
f9:9f:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:32 2025 by rpki-client