Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File: hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier: y0qcicHbQtSQgaJQulLc/MbMdupx1YDW8vKhiPeLmRg=
Subject key identifier: 2B:6C:B6:6D:C2:59:F9:9D:96:4B:D9:6D:23:8D:65:A9:49:E5:91:81
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 019A01480B4C48D4F32AC0DC85E66F609E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number: 0FE5
Signing time: Mon 20 Oct 2025 11:01:29 +0000
Manifest this update: Mon 20 Oct 2025 11:01:29 +0000
Manifest next update: Tue 21 Oct 2025 11:01:29 +0000
Files and hashes: 1: CikwBtDrpk_Y04YCbOYT8RF-nag.roa (hash: FALNdfrlSyLhlDyqgC3nieyWRWeKqBpM0mehDp7pdN0=)
2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: xjPBqL4FrwBisR+pJ9JbhwAsDUVbQ9JWQ0bbJ0jSeBA=)
3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:0b:4c:48:d4:f3:2a:c0:dc:85:e6:6f:60:9e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Oct 20 11:01:29 2025 GMT
Not After : Oct 21 11:01:29 2025 GMT
Subject: CN=2b6cb66dc259f99d964bd96d238d65a949e59181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:7a:8e:e4:20:4d:e1:5a:84:54:00:67:52:
ad:dc:5f:c6:79:21:b4:30:b0:46:39:86:db:30:49:
08:b9:cf:63:9f:21:34:bb:f7:41:2b:63:84:ab:db:
af:34:83:9f:6e:a7:16:b8:e3:eb:7e:d7:d7:f8:42:
b0:34:ee:07:28:37:ed:e5:a4:7b:be:0b:c5:43:f8:
f6:d4:cb:37:e5:85:25:7a:5f:c9:a1:f2:64:92:83:
6b:30:43:fc:8e:9d:e7:88:76:ca:a1:4c:91:3c:54:
51:8f:f2:8e:35:9f:40:05:cb:b7:76:59:38:dd:81:
a9:07:1a:72:cb:e1:39:de:63:60:96:74:69:ea:7e:
37:da:11:d3:0e:81:38:ed:9b:d6:10:af:2f:c0:e0:
40:29:d6:87:2e:8a:62:91:07:83:a5:7a:37:e8:38:
5a:e6:d3:0d:17:d7:2e:cf:24:b6:f7:19:fc:5c:47:
4a:bd:5f:9e:ee:a6:4e:27:46:96:33:8b:d6:e3:2b:
aa:95:b3:8a:8d:99:36:10:16:93:dd:cc:b4:bc:c8:
e0:a5:54:db:ea:58:e8:66:48:2e:d4:3e:6b:7c:54:
6b:54:4b:f0:e0:2d:6a:b3:a9:56:8a:e3:8b:e2:85:
de:b8:57:50:15:29:d5:74:a4:b2:ff:d3:0d:c0:54:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6C:B6:6D:C2:59:F9:9D:96:4B:D9:6D:23:8D:65:A9:49:E5:91:81
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c1:69:96:6a:94:e1:c5:3d:c7:4b:92:a3:85:74:41:b8:52:
51:07:51:eb:a5:88:41:ef:7e:e8:f8:85:72:aa:f8:07:7d:ea:
b8:ce:bb:97:95:15:fe:ad:35:d5:04:52:36:74:5e:40:00:9c:
70:48:58:61:06:7c:25:48:a5:3d:12:5b:c7:0a:47:70:d3:44:
f5:9b:6c:50:18:12:4f:bd:42:9c:38:2d:57:03:4b:ce:14:f2:
7b:3d:69:fd:4f:9c:42:60:69:94:d2:ec:38:8a:b1:1d:ff:e4:
12:3c:73:b9:6a:c6:7a:b7:c3:85:3f:ea:3d:ee:40:d2:5e:26:
03:2d:4e:e5:7d:de:b1:24:da:7d:f3:34:ff:6b:75:51:3a:61:
dd:bf:fb:36:13:fc:52:bf:99:bd:7f:f6:3e:fa:39:65:10:25:
eb:8f:b5:c4:52:63:90:9e:65:e9:6d:54:21:7e:53:30:02:b2:
bf:f0:6d:34:59:2d:95:95:11:da:1b:76:db:c5:ae:c4:a5:b7:
94:ce:68:01:2f:e8:40:59:b5:5b:fc:60:f1:91:0d:9d:05:43:
8d:ec:54:d7:e0:d8:e3:00:53:a1:e8:af:91:14:ed:9a:69:d7:
dc:fe:4d:3f:9c:2e:d7:ee:84:17:0e:95:25:91:a7:47:0c:69:
27:f2:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:58 2025 by rpki-client