Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: 0x+Mt76w8QVtZ8Rjdf7JQT84esUtN1r/Ef4YHixoIew=
Subject key identifier: 1B:74:B7:85:81:4D:13:4C:9C:3F:05:71:8E:30:A8:0A:E3:6C:94:F9
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 0199FFC7788713DAF67CEC99BA4DF8D8CE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 03F3
Signing time: Mon 20 Oct 2025 04:01:26 +0000
Manifest this update: Mon 20 Oct 2025 04:01:26 +0000
Manifest next update: Tue 21 Oct 2025 04:01:26 +0000
Files and hashes: 1: UUl9tjMfoZ7A5klfeBDKB274xTs.roa (hash: SBvHQQieYmwuldne0ESh4KLqZuA1XSHveZCrpCqrHvQ=)
2: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: TunPlevZpVmZ4QbSFKUzX4hCqD614te+kZGG2/6fdbk=)
3: k3kU5aAomwikuRNdsT68Tqjcik4.roa (hash: wCPtZXM9gkCUtgXFEirTaWeSRaiZvXJy0sUEtKPb0ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:78:87:13:da:f6:7c:ec:99:ba:4d:f8:d8:ce:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Oct 20 04:01:26 2025 GMT
Not After : Oct 21 04:01:26 2025 GMT
Subject: CN=1b74b785814d134c9c3f05718e30a80ae36c94f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:3f:2c:81:bb:f7:8e:25:28:1b:f4:fe:05:
d0:59:2c:18:52:7d:26:45:98:44:d2:70:de:12:a2:
4d:80:f7:5c:ba:00:63:cb:14:f4:1b:79:4a:27:00:
70:8d:83:e9:3d:27:ce:76:8d:8e:24:09:61:b3:5a:
0d:16:af:48:6e:21:d5:88:ba:6a:74:51:28:28:b1:
06:74:20:d3:7c:63:d9:4c:30:56:24:dc:a5:cb:fd:
a9:36:bf:f5:bc:0a:a2:44:45:0f:63:37:5d:11:c9:
0c:19:25:e3:17:89:a4:e8:93:1b:ff:2f:43:09:08:
9a:a8:91:d0:79:af:d5:8c:4c:df:b0:c6:28:e0:ed:
b9:74:b8:1e:6c:95:af:8b:79:68:c6:88:a4:39:3f:
86:b8:0a:f0:ce:38:fe:49:c3:be:38:05:9f:79:e7:
50:8e:4e:2e:1c:61:76:9a:99:38:17:3b:09:e5:91:
6e:a7:fb:ff:18:25:cb:99:a0:dd:be:26:b8:2f:43:
71:c2:44:31:04:91:c0:96:c0:cd:bd:df:9b:77:f6:
04:87:e0:34:33:ac:86:30:c0:2d:32:83:33:33:b3:
60:b3:73:f7:09:4f:23:c2:84:27:d8:c9:60:05:1e:
fd:ec:98:89:24:43:df:5d:14:03:e8:ea:07:3a:f5:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:74:B7:85:81:4D:13:4C:9C:3F:05:71:8E:30:A8:0A:E3:6C:94:F9
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:63:53:58:b8:b8:92:80:dd:de:00:c5:a4:30:61:cf:ee:71:
b4:34:c0:43:19:cf:eb:2b:0c:34:45:0d:21:35:59:ae:dc:87:
20:d9:3b:26:37:d6:3f:20:d0:ba:d2:57:e3:92:72:51:34:29:
76:6e:0d:93:4f:2a:90:1e:b2:19:58:65:08:37:1d:52:cc:7d:
f8:13:dd:2d:d8:c4:94:40:c4:94:8f:5f:09:71:0c:b9:ab:e6:
ee:22:55:68:4b:b9:24:f2:7a:0a:3b:8d:0e:6a:1c:8d:db:84:
2f:47:b0:88:dd:8d:f5:3e:da:b6:27:b9:2c:22:3a:be:1a:ff:
f9:5b:3c:f8:09:8d:b7:5f:48:c1:3c:1f:9f:a5:3d:27:a1:ea:
b2:3b:6d:71:b1:8b:1a:2f:a5:d3:5c:51:28:fb:92:8e:e2:82:
9f:3e:83:95:2c:ec:b7:61:f8:21:55:39:ed:96:4a:00:a6:a6:
4b:a1:02:dd:e7:b6:95:f1:19:c2:ce:a5:07:ff:68:23:57:d2:
4e:3c:03:2f:6d:6c:61:e3:0b:9c:8d:09:de:ee:df:b3:60:68:
b0:00:ea:aa:11:22:d3:00:dd:56:ca:7d:5a:86:60:70:be:27:
17:16:b2:dd:53:8d:e2:11:72:45:cb:5b:47:91:22:29:0d:d2:
0b:03:55:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:12 2025 by rpki-client