Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
File: hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json)
Hash identifier: bhwSyD+IvPg3zFSD4UvAjexhBlj18RzJvO4qD7LvkfI=
Subject key identifier: B7:FC:1B:80:74:BE:4B:34:74:D9:F8:C8:22:37:7D:4F:70:B1:32:D9
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial: 019A2B1F30488AE381554F3E7F8311C520DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
Manifest number: 0E20
Signing time: Tue 28 Oct 2025 14:00:55 +0000
Manifest this update: Tue 28 Oct 2025 14:00:55 +0000
Manifest next update: Wed 29 Oct 2025 14:00:55 +0000
Files and hashes: 1: 574W7z-0GVSyQ6o383reYXA7QZc.roa (hash: 7oxCz8Z8dYajS9esPzPSpl386CuN+PzQh5YVWvXB59o=)
2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: Wm77xyUAcTj0mdAesWg4Z9g2IGvnFsGx8CuZ+GPsUgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1f:30:48:8a:e3:81:55:4f:3e:7f:83:11:c5:20:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Validity
Not Before: Oct 28 14:00:55 2025 GMT
Not After : Oct 29 14:00:55 2025 GMT
Subject: CN=b7fc1b8074be4b3474d9f8c822377d4f70b132d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:94:a7:62:92:93:82:e1:a0:dd:69:6a:ad:
2f:be:62:32:77:ca:5d:43:d1:f2:7e:e2:8b:00:b9:
60:bf:3a:47:86:53:d7:34:e5:0c:bb:2d:64:2b:8e:
d7:68:ef:70:8f:94:c8:40:00:2c:e8:93:ed:d5:11:
cd:40:a9:aa:c2:db:c7:36:27:0c:7c:e0:78:df:c5:
07:48:0e:70:e9:03:2c:ea:83:52:4f:3c:e7:47:53:
d1:ce:f8:2c:e0:f5:c2:07:12:b7:9b:63:05:48:79:
b2:5c:3d:c0:75:d4:c1:91:f5:e7:c5:be:ce:00:49:
d3:30:32:00:c4:07:1d:f9:de:c2:ca:f6:4d:5f:3f:
64:06:92:31:07:54:7c:64:42:97:83:b9:ee:b2:6c:
e7:52:f5:6a:16:f3:6a:98:96:47:da:3b:87:a4:14:
fe:d6:33:ee:f6:c7:f4:de:de:98:da:d1:77:32:5b:
12:4d:59:12:d9:a2:35:c5:e8:90:04:ca:cd:e7:8a:
0d:42:3c:ca:32:35:d8:7e:fa:fe:45:87:38:2f:d0:
7f:99:7e:cb:b1:18:4c:3d:36:c8:62:d6:a9:ca:60:
cc:fb:22:e8:8d:b7:90:bd:7e:9e:b4:67:de:e0:d3:
73:12:ad:c9:38:78:30:0e:7c:92:d5:42:13:ff:73:
7f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FC:1B:80:74:BE:4B:34:74:D9:F8:C8:22:37:7D:4F:70:B1:32:D9
X509v3 Authority Key Identifier:
keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b6:b6:16:07:bd:d5:7a:7b:20:ea:35:3e:a4:87:73:46:aa:
d1:e1:2f:78:53:89:57:74:e8:af:de:73:e8:50:12:2d:e5:e2:
69:73:d2:80:7c:e4:36:60:9a:61:a5:02:ef:6c:37:44:6f:e1:
ec:55:4f:5e:83:3a:cb:6c:59:50:e2:8e:4b:4a:b7:84:1c:53:
84:b8:f9:74:e9:a6:10:bd:e0:55:de:26:54:d1:29:c3:80:14:
8e:d8:f4:75:3c:94:1c:a5:9a:1d:74:a3:fe:79:10:75:13:6f:
f1:a9:70:f3:02:fa:88:3c:28:63:63:09:ea:f0:1b:39:59:85:
95:10:8e:0b:50:1c:c1:2b:d7:28:e7:96:37:e7:e3:7a:fb:2c:
95:ba:0a:8c:8e:95:28:b3:26:55:aa:bd:c8:62:67:bd:32:59:
5f:2f:9e:ad:59:93:22:ac:06:dd:a0:f7:bc:cb:ea:9b:85:5f:
8b:54:98:fd:31:58:6d:21:e7:47:91:8b:d9:75:df:c2:d6:d2:
ae:ec:11:3c:97:85:cb:87:d8:21:a2:f1:b5:54:cd:a3:73:14:
a5:b7:1e:ae:d8:90:01:cd:3b:44:29:e5:e3:e5:b7:2b:87:60:
d7:35:59:9b:74:82:0e:68:85:99:68:27:08:8b:dd:6a:16:f4:
de:52:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:09:56 2025 by rpki-client