Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier: 9XEF+wHlnCOeYeiaalw40uam9VCvi9Zg+j6LPPfIfVY=
Subject key identifier: 6F:A8:DC:DE:5E:81:0E:6C:9B:DB:18:8C:01:9F:C1:FA:0E:B8:F7:3B
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial: 0199FC8FA33863D439F66BAAF4571D8F38D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number: 035C
Signing time: Sun 19 Oct 2025 13:01:35 +0000
Manifest this update: Sun 19 Oct 2025 13:01:35 +0000
Manifest next update: Mon 20 Oct 2025 13:01:35 +0000
Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: 5VbkpVfT4dCIWy/LDn8TC68pNgFkIKu/hiqOa1L8eDs=)
2: tVaiZFiLINawsOK82OFMO15DejQ.roa (hash: 8nEDMZ8EuVxpyIr0H29BICF51Bn0ST34hEU28E7vWbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a3:38:63:d4:39:f6:6b:aa:f4:57:1d:8f:38:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
Validity
Not Before: Oct 19 13:01:35 2025 GMT
Not After : Oct 20 13:01:35 2025 GMT
Subject: CN=6fa8dcde5e810e6c9bdb188c019fc1fa0eb8f73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:38:04:ea:b0:b9:a3:0b:c2:a6:24:bb:7b:
10:e4:73:d2:d1:03:21:ea:44:7f:7d:29:14:ce:eb:
61:5f:fb:83:4b:ad:73:bb:83:67:6b:74:12:b9:67:
e4:89:e9:5f:93:78:b8:65:7e:59:2f:38:8b:52:4e:
b5:74:6b:cf:d0:4a:26:ce:d2:d9:69:37:1e:e6:59:
7a:ed:f4:1b:bb:20:48:1d:b8:0f:ba:4a:db:da:3f:
eb:aa:33:c3:66:68:2f:1a:08:6d:8d:d8:3e:87:9b:
7a:f2:63:d4:f3:45:92:87:7d:fd:1b:90:70:bb:4c:
27:36:17:72:64:b1:fb:40:17:10:55:63:de:b6:de:
5f:31:1e:29:e7:04:a3:fd:b6:13:68:d7:5b:aa:88:
60:9f:83:cd:b0:7d:57:b0:75:8d:41:9b:37:4f:9f:
e2:3f:2b:c6:22:05:5d:c2:69:80:a4:fb:c3:e8:05:
8d:f3:fd:ac:8f:d9:2b:19:bc:16:47:7a:49:b4:47:
b1:2c:c6:43:5a:c8:0d:19:b2:13:5c:41:b9:62:ea:
ef:a1:2b:4d:1a:15:f6:d2:20:21:b9:93:d4:16:53:
f9:33:a8:ba:ee:fa:1b:ce:a7:58:d9:2a:75:ea:0e:
12:15:c2:28:01:ae:9e:e2:5d:be:39:40:db:8a:87:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A8:DC:DE:5E:81:0E:6C:9B:DB:18:8C:01:9F:C1:FA:0E:B8:F7:3B
X509v3 Authority Key Identifier:
keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:48:f6:58:62:7d:90:d1:a5:8c:2a:67:db:42:2c:ea:c2:3a:
75:ef:08:51:aa:da:5d:4d:09:26:c6:79:84:c5:c6:3c:86:ec:
6a:e2:4f:73:25:a9:48:d4:3a:82:b8:1b:e4:15:fa:b7:c7:27:
f2:34:0c:7e:6f:9e:2a:27:84:8e:92:54:10:5c:6a:5b:ea:b2:
ae:2c:d6:6f:6f:c2:11:d0:e5:f8:67:19:4c:79:9a:b7:ec:ee:
dc:76:b4:76:7d:66:5f:ce:43:51:00:44:22:52:d8:2f:52:e8:
db:fc:99:18:1c:6e:aa:18:f4:9f:f6:55:c7:a1:d2:1c:16:df:
ad:64:0f:df:c0:db:a7:6a:f6:bc:3a:31:f5:18:e5:a4:35:bc:
15:b8:c0:85:27:b2:d3:e6:80:fa:6d:c5:35:85:42:73:f4:f9:
29:dd:1b:d9:de:37:65:23:2f:9f:1f:13:e4:e5:5b:91:23:89:
89:2a:8f:b1:80:60:8e:17:d3:d1:26:2a:28:19:50:4e:79:e3:
29:4f:eb:4c:9a:3e:62:59:cd:20:a2:93:68:38:3f:ad:0a:88:
a2:d9:d1:04:78:c5:bc:e0:61:e7:98:46:a7:5d:61:40:64:a4:
bc:a1:88:44:88:a5:ae:87:d7:6d:40:06:63:c6:a7:dc:b9:e8:
de:3b:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:47 2025 by rpki-client