Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json)
Hash identifier: K8nlbgenm6MAVW9Ilf2nNRIZiLT5Vb0Td5tJzGdUZOo=
Subject key identifier: 24:FE:79:F4:DB:48:BD:FD:99:96:2E:0A:B5:27:C2:D2:CD:A0:8D:B8
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019A725C76008C4FD90FF9DF64917465F5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
Manifest number: 0C
Signing time: Tue 11 Nov 2025 10:00:53 +0000
Manifest this update: Tue 11 Nov 2025 10:00:53 +0000
Manifest next update: Wed 12 Nov 2025 10:00:53 +0000
Files and hashes: 1: M7kLPSjrj8qhOiEue3nlGsUFhMc.roa (hash: JJOuN5kjXGblbC3jm4hWAxzRtRPg4evN0bZEZMWP+es=)
2: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: sLgKwtAHeJR2bMzQacYpSl1UgjaHbjmbGURuNu7m7x4=)
3: uWcS24zvJ13WMxHQUrc7buDsA7o.roa (hash: tbOlJpzzORkR39HmHF8in7FppFxjaYmZdxjOnH/qbIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:76:00:8c:4f:d9:0f:f9:df:64:91:74:65:f5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Nov 11 10:00:53 2025 GMT
Not After : Nov 12 10:00:53 2025 GMT
Subject: CN=24fe79f4db48bdfd99962e0ab527c2d2cda08db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:64:6a:52:a2:52:98:35:45:f0:5e:2c:35:
58:48:a0:1f:4f:ed:19:5a:93:c9:96:de:c4:8a:f7:
03:6f:c2:69:4a:5d:67:09:1e:53:2f:8a:49:a8:09:
58:7e:5f:77:26:90:d5:98:b4:75:1d:01:21:a7:20:
7a:7d:0a:94:76:5f:6c:cc:9c:81:ae:9f:90:5c:57:
48:4e:45:ff:64:b2:a9:a7:e6:5d:6e:54:66:97:ca:
78:8a:45:9e:b5:d5:f4:56:01:19:a9:12:20:f5:01:
98:63:a2:ea:69:14:88:07:b1:20:54:fa:0d:bd:82:
4f:98:75:3f:69:42:43:e4:e8:3d:3d:a2:d3:0e:b9:
5c:69:02:79:26:6c:c4:5f:ce:8f:95:d4:a2:57:98:
52:62:c8:5f:16:3c:1f:4f:91:be:af:8b:cf:b4:ce:
ed:d0:c0:ab:b9:8c:fc:08:c6:41:7a:a8:7a:ff:08:
63:5e:aa:6d:ea:a9:69:f0:fd:ad:b6:a0:9f:91:73:
f1:28:72:6e:1b:77:78:e3:13:ee:bf:7f:93:9e:f2:
17:91:b6:ae:6e:02:50:1b:17:41:5d:89:c2:63:1d:
cf:73:d4:f3:fa:92:bb:01:2c:c1:55:1f:9c:6c:27:
3e:0a:86:b3:39:50:76:d3:1e:18:a8:a4:ff:ea:95:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FE:79:F4:DB:48:BD:FD:99:96:2E:0A:B5:27:C2:D2:CD:A0:8D:B8
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a5:8c:4f:01:fe:33:8d:09:40:2d:f8:3b:b5:75:4b:4d:9e:
da:6b:f6:b4:a1:00:b7:40:42:12:4e:b7:0a:29:8f:b0:39:1b:
aa:1f:85:b4:b4:71:22:d3:e0:20:13:2c:b4:43:5a:3a:c2:35:
40:ac:b6:db:ff:af:12:12:81:7f:6d:91:c7:e0:43:88:9b:56:
fd:fe:9d:e9:dc:3a:74:87:fe:87:ed:58:12:65:59:a9:40:e7:
00:5b:68:3c:27:70:2f:29:81:03:b4:21:8e:ef:50:d3:02:52:
af:91:32:af:a4:15:61:ce:d7:7b:1d:95:06:c6:e1:da:e8:f4:
cf:0a:fd:46:7e:aa:f2:02:80:eb:85:ee:94:a5:2c:27:dd:7d:
91:97:81:57:73:1e:d1:b6:ec:42:80:3f:21:1c:f2:ea:76:65:
2e:c1:48:e1:ac:56:7a:97:96:fb:87:4b:17:65:f9:fc:ea:67:
3a:96:35:dd:9d:45:1f:67:01:52:cc:03:3e:7e:c6:f4:5e:34:
93:3e:e4:c9:cf:a1:76:29:9e:14:4f:16:fc:8f:63:1b:9a:b3:
30:34:54:3f:7c:15:76:55:7c:4f:78:83:29:17:8d:63:4d:84:
82:73:f3:b2:97:f6:7d:94:38:2c:9e:49:bf:b4:ca:13:b1:ce:
cc:1f:e8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:01 2025 by rpki-client