Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: 885iPjgWX+/gXekjjDZgHmXKrw6ckVIBTsAOmejSFm0=
Subject key identifier: 53:2C:0B:4F:FF:FE:D8:7D:87:3F:26:D9:FA:F9:33:39:69:30:87:EF
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 019A71B7B6AAB1D71A66776B358B0AD52CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 164E
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa (hash: 1/I3aoM+yKdAzYPZU70IJvPWqKBQF4IK2mBQQ0GVymw=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: g28O8LNRxaiKbzeAEbfiGcEpzYoTz9EtbvxnhKaXvqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b6:aa:b1:d7:1a:66:77:6b:35:8b:0a:d5:2c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=532c0b4ffffed87d873f26d9faf93339693087ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:d2:e5:5d:29:1e:8e:11:db:c2:5c:58:db:
da:a9:e2:c4:a2:80:43:06:7a:a7:b0:e2:93:0c:5e:
b9:49:d4:cc:bf:a4:66:d5:35:ad:2f:50:25:4d:bd:
4b:9b:96:79:44:13:eb:83:0a:de:30:1f:23:61:79:
56:e5:1c:28:41:f5:8f:a5:01:f8:08:81:ba:88:7b:
c8:9a:18:a1:f4:b7:52:89:81:67:45:bc:e8:25:74:
57:54:fe:8c:c6:ce:45:95:bc:58:c7:bc:00:f4:e1:
e6:23:c7:9b:d8:07:86:00:19:5b:c1:21:35:20:03:
78:0f:b5:37:05:54:97:84:c1:8c:e6:88:12:31:bf:
0c:9d:d5:a4:1d:85:cf:73:a5:d5:45:a2:73:a3:c1:
a5:fd:4a:ea:d9:1b:87:3e:6e:26:73:13:30:e4:55:
ef:e0:4b:a5:9f:57:30:9d:ea:ee:af:51:69:75:7c:
6f:9e:c9:67:34:f8:d7:ae:19:99:91:d2:d8:5e:97:
16:a5:ec:3a:07:82:00:e9:d4:ca:be:2a:b6:2c:d3:
4a:3d:a0:69:c7:9e:11:0a:4a:df:5a:59:65:cf:96:
ef:a1:e5:77:04:21:c8:b7:a3:5a:b4:b1:9f:ec:78:
95:e6:bf:04:a2:1c:34:c2:83:49:b4:f5:b6:31:b4:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2C:0B:4F:FF:FE:D8:7D:87:3F:26:D9:FA:F9:33:39:69:30:87:EF
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1b:af:fe:95:27:46:f2:60:fc:ba:58:58:c5:c3:ee:2e:06:
89:74:dd:61:eb:9b:9d:12:b5:e7:08:5a:3b:03:ee:7f:b6:35:
60:aa:db:c9:24:ac:29:51:d4:76:ee:4f:d9:14:2a:02:c9:f3:
b7:e0:bf:7b:1e:95:8f:eb:13:92:a2:06:fe:c8:de:9b:dc:bd:
04:e3:0e:82:a3:a1:ae:93:dc:ef:b6:07:1e:72:24:00:6a:33:
e1:e0:db:f8:c3:10:21:fd:de:e6:54:b0:2f:4e:8d:3f:bc:d2:
eb:47:56:ff:c2:61:ff:d6:2d:91:4b:a5:77:e3:5c:16:4a:93:
2c:9a:bd:82:46:3c:f1:df:9b:ea:df:8b:d5:63:42:1f:c5:c6:
6d:7b:71:2d:48:bf:f2:27:fb:36:a6:26:f8:1d:0f:3a:24:0f:
10:ef:ad:07:99:6d:2d:35:49:c0:ea:a8:a7:da:a1:26:c2:08:
46:9a:72:54:9a:67:ca:d7:13:d4:88:9e:b8:2b:4e:3c:27:96:
ca:b7:c9:31:9c:dd:55:f9:4f:b0:07:e0:de:30:30:3c:ba:fd:
f1:f1:3c:77:c4:be:da:76:be:2c:c0:32:df:23:09:83:1e:d3:
49:0a:9a:c7:a7:18:ac:01:2f:c2:df:ed:7a:fc:24:ca:c6:a3:
92:6b:51:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:58 2025 by rpki-client