Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
File: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft (raw, json)
Hash identifier: k3Kagy7cEAuWijY7m+ZrPJS6B/RFj3OsO4ZjGGUxhJ8=
Subject key identifier: 52:04:DC:C4:36:01:09:7C:A8:47:5C:D1:02:DC:6F:E2:0D:6E:8A:45
Authority key identifier: 85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
Certificate issuer: /CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Certificate serial: 0199FC8F9FC1EEE91A12DB32C68B8EC00E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
Manifest number: 0749
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: gBy9cD3j_tP--kqjiHxj-BEz2w8.roa (hash: GWls9v+X93Qb6tijazZ0OBt3/3oq/+caZQ2/zTy7cZA=)
2: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl (hash: I80c2gEAUJD67otU6gduZTfiwsU77HlselNkx2Hp0jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9f:c1:ee:e9:1a:12:db:32:c6:8b:8e:c0:0e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=5204dcc43601097ca8475cd102dc6fe20d6e8a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:29:72:35:f6:93:29:b7:49:0a:e6:5b:7d:
36:03:63:57:7a:40:34:94:13:5d:bc:c8:65:df:5c:
41:8c:a1:53:05:fe:82:b0:69:e9:95:4f:4f:43:79:
91:76:5e:f8:7d:2d:bd:87:83:90:bd:81:26:2d:07:
5f:38:d3:c1:57:e2:79:a6:99:b6:ab:d4:2a:e9:f9:
58:e6:81:be:95:88:23:27:08:5e:29:68:45:46:27:
20:b7:a3:e6:83:65:15:32:21:ee:a1:6e:e6:56:2c:
a2:f6:c8:e6:9f:c6:83:4e:e7:ec:3c:2d:66:85:b3:
81:d8:ae:42:8d:7e:b4:0d:be:ba:92:a9:ce:ba:51:
61:e4:8c:36:4b:10:38:38:ac:4c:6c:15:ba:d5:27:
ca:d4:58:d6:20:26:0a:66:bb:31:17:4c:ad:3c:a6:
8c:0b:51:91:78:40:56:29:ee:7d:5f:07:8a:82:cb:
65:2c:2e:4c:55:1b:83:66:c9:0c:26:e6:da:ab:a3:
82:d8:53:56:8b:41:35:cc:db:2c:39:56:e6:57:f6:
1c:4f:28:3e:67:e0:4a:dd:dd:51:81:d5:9f:22:19:
bb:b3:bb:a0:31:5b:86:33:ba:0a:08:5d:21:2a:4f:
bf:e7:f5:68:a1:12:ca:d4:ea:be:14:28:b8:79:89:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:04:DC:C4:36:01:09:7C:A8:47:5C:D1:02:DC:6F:E2:0D:6E:8A:45
X509v3 Authority Key Identifier:
keyid:85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:72:e6:e6:42:e8:25:e1:49:05:5d:59:63:3c:df:d6:e5:ca:
8b:f2:2d:ac:3e:6b:5b:58:d2:a4:1f:4f:83:83:7b:d0:80:35:
ce:06:b2:12:aa:a1:69:24:82:89:b4:82:7d:ee:c3:10:1a:d0:
31:ac:67:7c:9b:d8:9b:6a:6f:5f:1f:10:be:88:d2:56:88:ef:
67:c7:9c:ba:f7:75:f8:17:de:4c:60:7a:63:14:f6:01:dd:23:
18:93:96:08:84:8b:40:4d:2a:23:9a:f7:c4:f6:20:96:0a:90:
9a:50:b7:19:7c:76:88:c4:c8:fc:9e:dd:44:01:df:4f:11:4d:
5a:79:d0:7f:f5:03:ed:ee:b6:0c:e2:64:45:12:5d:6b:27:b2:
51:a1:d2:cf:1c:f4:6e:1e:66:a4:87:75:61:7a:41:c2:5f:c9:
d9:31:df:06:05:b1:51:7c:7d:19:2f:54:48:54:8c:cc:a0:1c:
9d:c7:4b:4d:42:67:c2:c2:19:69:be:59:c0:d9:4b:7a:c7:20:
9e:25:f1:20:35:2e:08:29:45:ad:15:34:79:04:40:fe:0f:9e:
16:09:25:4d:6c:7c:a0:05:95:08:13:dc:f4:23:d8:82:20:1a:
1f:af:f6:c6:4d:a0:f6:b1:b4:ea:6e:78:a2:cc:a9:63:7f:34:
ab:e4:58:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:12 2025 by rpki-client