Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
File: hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft (raw, json)
Hash identifier: uUW2BDd+zNdEJDxVC3ko7RfmObc7EqhmU58c9HFI7GY=
Subject key identifier: 4F:B0:84:12:0C:42:4A:28:2F:3C:AA:6A:9E:4E:2A:A8:EA:13:4C:13
Authority key identifier: 84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00
Certificate issuer: /CN=846d45225cf0d4fa9c65aee88861d2261203ad00
Certificate serial: 019A729374633F470CB0ECA3CF5BFED17457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
Manifest number: 11BA
Signing time: Tue 11 Nov 2025 11:00:57 +0000
Manifest this update: Tue 11 Nov 2025 11:00:57 +0000
Manifest next update: Wed 12 Nov 2025 11:00:57 +0000
Files and hashes: 1: XLQfftOCYwZhCKWBFvPgcWtM3ng.roa (hash: e5IwRRubP2iih1RAenDvyf84x82YlIWC8mC3l2YoKV8=)
2: hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl (hash: dws8O219aNqoz0+lrCP6HB7S8vUQvMQpNeP3tF+HwnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:74:63:3f:47:0c:b0:ec:a3:cf:5b:fe:d1:74:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846d45225cf0d4fa9c65aee88861d2261203ad00
Validity
Not Before: Nov 11 11:00:57 2025 GMT
Not After : Nov 12 11:00:57 2025 GMT
Subject: CN=4fb084120c424a282f3caa6a9e4e2aa8ea134c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:db:c8:e0:ad:94:56:ee:8d:07:88:42:b0:
3e:6c:35:1d:6a:53:50:60:fb:72:ea:2c:66:ef:ff:
ab:a5:22:37:c8:37:f7:33:93:49:12:7c:12:df:53:
bf:b7:91:ce:bd:4d:b3:ee:a7:73:e2:80:91:cc:cd:
16:00:6a:6b:03:73:d8:60:5d:34:69:85:40:50:d4:
03:b2:82:f1:19:5b:67:65:da:a2:17:00:a1:f4:53:
f9:c4:a5:b1:f9:70:76:df:e7:1d:63:53:b7:07:fb:
87:a0:35:69:7f:9c:58:42:78:6f:23:3a:d4:85:74:
e1:c8:9e:3b:8a:5a:6a:59:62:73:b9:82:8d:b6:a7:
e4:a2:80:b5:32:72:81:42:1b:c4:fc:d9:2c:f6:37:
64:0d:ec:fa:96:d8:b2:a3:cd:41:28:dc:39:e1:c1:
2a:b0:bb:ba:88:00:17:89:95:82:6e:eb:e7:f4:48:
78:12:09:e4:75:55:23:8a:6e:ba:db:28:00:a0:7a:
a3:b7:79:75:32:39:5f:51:7b:40:f7:70:c1:7a:6d:
38:07:26:d1:7c:a9:ad:b9:de:96:d5:04:cf:e0:7c:
12:68:53:d4:06:d3:10:c7:4e:28:74:f4:4b:71:a8:
cd:98:50:bf:e9:c2:e6:72:f7:fe:15:5a:e5:e9:9d:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B0:84:12:0C:42:4A:28:2F:3C:AA:6A:9E:4E:2A:A8:EA:13:4C:13
X509v3 Authority Key Identifier:
keyid:84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:15:68:81:e9:d2:3e:8c:2b:44:21:68:20:63:5b:4c:f7:82:
f2:37:56:b8:97:01:26:76:eb:af:d0:f9:65:2d:d1:f4:68:4b:
56:0f:04:d9:72:2b:f1:c3:52:32:42:26:e2:f2:b6:36:42:11:
23:c8:3d:ce:ac:1f:35:fc:3e:82:05:d1:13:22:00:20:2e:a4:
bd:66:47:f0:86:6a:f7:e4:dd:fa:a6:dc:f0:5e:6e:90:76:f1:
67:5e:f3:00:48:39:d4:e8:8b:a4:5a:30:5c:c7:00:5a:6e:59:
44:33:54:d3:43:46:fb:2f:ee:5d:ec:91:c8:21:70:97:b0:cb:
03:c8:bb:78:da:ca:9f:9d:1b:b6:30:d1:0e:e9:8b:9f:9d:c0:
ff:4c:50:44:34:ea:53:6c:c5:0b:a0:58:5b:cc:4f:df:7f:57:
a9:8f:27:1b:1c:bc:73:22:da:65:d6:f3:55:45:bb:8d:01:ab:
aa:30:d5:e6:0d:36:cb:12:1b:e0:6a:71:28:ec:ff:0d:ae:84:
89:46:7e:47:a6:56:34:ba:d8:15:bf:fc:db:f2:5c:c0:b3:2b:
dc:8b:91:43:19:af:d6:50:1d:e4:3e:07:c1:f4:e9:6e:e0:1c:
3e:98:68:8f:de:90:e6:bd:58:e2:36:d5:19:43:f5:ee:f4:7c:
2f:40:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:47 2025 by rpki-client