Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier: F2wcHJAcl9T8ziaSqvC780z4vJ9/ZBuuJrOwuIggkVg=
Subject key identifier: F9:E1:09:E7:FA:3F:87:58:E6:B8:DF:75:B1:D5:8E:74:DD:BD:68:E4
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial: 019A0DEFDF58360C402EBC226AA65B7D7D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number: 0365
Signing time: Wed 22 Oct 2025 22:00:15 +0000
Manifest this update: Wed 22 Oct 2025 22:00:15 +0000
Manifest next update: Thu 23 Oct 2025 22:00:15 +0000
Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: hmVcvOlMD0Eb4cSs5zU8KbEClDgf0BOMLWwTqlesvuc=)
2: tVaiZFiLINawsOK82OFMO15DejQ.roa (hash: 8nEDMZ8EuVxpyIr0H29BICF51Bn0ST34hEU28E7vWbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:ef:df:58:36:0c:40:2e:bc:22:6a:a6:5b:7d:7d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
Validity
Not Before: Oct 22 22:00:15 2025 GMT
Not After : Oct 23 22:00:15 2025 GMT
Subject: CN=f9e109e7fa3f8758e6b8df75b1d58e74ddbd68e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:46:05:57:3e:78:15:54:4d:23:2c:75:11:
b2:6d:a5:a0:e9:7f:d3:40:0d:6b:0a:93:cd:f5:cd:
5c:0b:19:36:2e:e6:3f:f2:15:dd:3b:61:56:48:48:
8f:8a:24:63:c1:c2:f4:e2:a7:4f:f6:57:ee:c7:58:
16:b0:c2:b0:35:78:c0:82:d1:77:a2:b4:12:be:46:
f8:aa:bd:26:d2:87:c4:9f:c2:c7:ce:fe:88:dd:40:
32:0b:e0:da:ef:72:09:fa:ae:c7:a2:5a:15:84:fa:
db:90:ad:16:f6:bb:5e:45:ef:c1:47:40:51:a4:cd:
0a:92:a9:04:67:6a:a9:52:f1:74:35:82:39:e0:88:
3a:b8:a7:65:0e:89:c2:8e:ba:fe:9f:0f:cb:18:af:
f8:93:8d:98:83:ad:53:85:1a:3e:08:6c:2a:15:74:
74:fc:fa:40:1c:11:02:48:72:bb:ab:22:b7:9e:20:
f4:05:35:8a:48:42:5d:e0:88:1e:1e:c3:fc:5a:60:
33:3c:23:bd:14:39:db:62:26:69:a1:b2:35:2e:b2:
56:90:13:28:51:00:08:29:f3:42:80:ef:ec:04:04:
a5:5c:1e:d8:48:af:4e:2c:df:0e:ce:eb:34:a7:46:
81:b1:5f:00:56:61:cd:7d:02:4b:67:46:e2:e3:6c:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E1:09:E7:FA:3F:87:58:E6:B8:DF:75:B1:D5:8E:74:DD:BD:68:E4
X509v3 Authority Key Identifier:
keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:b7:35:c5:f5:10:ca:fe:69:19:97:3f:d1:bd:f2:99:15:28:
35:e2:f4:75:08:42:95:f6:4c:88:10:32:c7:5a:23:0b:6d:d1:
5f:97:1b:79:9a:76:8c:42:1d:b6:32:d8:14:df:81:e9:b6:fc:
02:98:0a:65:93:2f:83:75:5d:24:f3:b0:8e:63:fd:02:8e:6c:
54:1f:80:65:b3:87:98:68:ee:cd:91:db:a0:82:8e:08:41:d8:
33:3b:f2:d6:26:a8:b4:eb:9b:a5:d4:d6:b6:93:5b:c3:22:e7:
e2:44:f9:c8:cd:64:9c:b6:b0:b4:74:14:02:ca:5c:41:48:42:
78:6a:a1:bf:6f:be:31:1f:82:b7:70:2e:aa:cc:b8:02:5b:4a:
41:e4:e1:d5:d3:90:eb:4f:68:41:73:a2:47:18:f8:cd:08:5e:
f7:e8:0c:45:65:ac:94:4e:c5:77:da:39:3f:0b:72:89:23:55:
9a:92:46:17:3b:d8:76:d9:7b:a2:fd:0f:7b:e3:52:8b:5a:f2:
08:19:e5:c5:0e:1f:e8:c4:41:48:87:61:0c:32:07:46:7a:6b:
61:e5:a2:55:b0:3f:b4:74:d5:af:f2:ee:a0:12:73:3f:82:67:
20:3f:ed:f9:30:89:b7:7f:7f:8a:87:a0:65:b9:db:ea:ab:26:
70:3a:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 07:19:30 2025 by rpki-client