Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
File: hDvoY59AOZk8H254efRynkfcN64.mft (raw, json)
Hash identifier: p8uiFBt1gRw/Q7PT43FlHtBEaI0LnepG1yuG3mR1Rz4=
Subject key identifier: 08:46:87:32:56:0B:04:A7:90:91:44:76:16:EC:FC:64:3A:3A:9B:8C
Authority key identifier: 84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE
Certificate issuer: /CN=843be8639f4039993c1f6e7879f4729e47dc37ae
Certificate serial: 019A725CCF9C84640661771042B9DD050432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
Manifest number: 0934
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: J7Gy2XDgfHPCSDMpGX8qtAkzxgw.roa (hash: 6l+CaQcFJnHqVrHhZ9HMXXYDvAoiNAEfMopwPsMkNsc=)
2: hDvoY59AOZk8H254efRynkfcN64.crl (hash: nsoS/w2i0Wl8vOnvJNmi8GlNo4rbI2j2zRWIrvMZHRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cf:9c:84:64:06:61:77:10:42:b9:dd:05:04:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843be8639f4039993c1f6e7879f4729e47dc37ae
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=08468732560b04a79091447616ecfc643a3a9b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:ab:fc:56:03:9a:a1:60:eb:c9:04:9b:61:
2c:0f:7f:40:0e:49:bb:92:b9:48:a8:bb:b9:f3:1d:
38:e0:12:95:38:8f:34:f0:49:95:18:4e:4c:de:29:
e6:7b:ed:43:76:da:2e:02:f1:8c:5e:6e:2c:66:08:
9e:d4:1b:1d:fa:b4:d9:3e:93:90:c0:15:94:42:7d:
44:3c:c2:4e:10:71:de:c6:16:2f:5f:11:40:77:8a:
03:fa:c5:0f:ae:5a:b9:63:55:4b:a2:4c:a1:e0:a6:
9b:d2:ce:9c:3c:03:6b:4b:4f:5b:0d:08:9f:f7:dd:
0b:92:fc:1c:ec:55:db:45:af:eb:82:cb:83:e2:e5:
3e:df:24:3e:fe:1b:b1:e4:23:3f:6d:a5:90:91:d9:
19:9e:62:44:aa:67:ec:9f:73:a7:0c:07:e6:0e:5d:
c0:9e:7d:51:b5:d3:ab:e3:17:bf:f1:76:bb:5c:8d:
e3:3b:02:3d:14:96:4f:c8:a6:1d:63:f5:06:98:84:
0e:09:08:90:54:39:92:85:9e:4e:30:95:33:be:ed:
3b:09:5e:b3:17:75:f7:bc:d5:2c:cd:b3:c0:ad:73:
22:45:78:62:10:62:67:b5:72:d8:92:46:7b:44:62:
42:34:85:af:3c:f2:b6:f9:84:5a:03:ff:49:88:2c:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:46:87:32:56:0B:04:A7:90:91:44:76:16:EC:FC:64:3A:3A:9B:8C
X509v3 Authority Key Identifier:
keyid:84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b1:f5:25:c2:45:a3:9c:94:a2:dd:92:88:bf:83:dd:9f:ac:
e6:44:75:e5:ca:88:ba:eb:9c:7e:c4:0b:1d:16:20:08:da:2e:
3c:dc:0c:e1:c3:a2:e6:b6:0e:8d:5a:16:29:a1:7c:85:f6:78:
73:6c:ba:54:69:31:e4:93:83:3d:86:c4:ba:16:57:d4:3c:83:
9b:c1:f7:79:45:c5:51:8e:62:e5:21:a6:01:9a:8d:d6:cf:d6:
64:3a:e1:3f:f7:65:a2:64:90:bc:26:8a:7c:ab:46:97:4e:64:
5d:2a:83:26:a8:2f:11:4c:af:0f:ac:cd:92:cd:4f:6a:c0:ee:
80:09:e5:ef:ed:6d:51:e9:20:ee:34:0a:e4:79:18:f8:3b:68:
7e:3c:fa:ce:e5:59:3e:8f:2e:f4:bb:9a:5b:1d:62:9d:e1:c1:
2c:cf:ff:8c:7f:4d:d9:c7:be:fb:7a:6c:13:b5:48:9b:72:2c:
6b:ec:01:3d:fc:a9:ca:a1:ed:3c:5f:e5:42:da:32:d8:ba:73:
d7:81:f9:f7:e8:11:82:56:23:11:3c:d4:93:e2:dd:9d:51:08:
25:19:81:ee:1a:1d:4a:c8:96:8f:a1:5b:ed:2a:d9:76:70:1c:
46:c6:f8:2f:09:1d:47:83:4e:ab:23:a3:1b:68:83:d6:eb:6e:
6c:9b:c3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:31 2025 by rpki-client