Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: YC3vfw/S38JcS0an/odcZcs1OSZSnRqWlebnSz/Cz+Y=
Subject key identifier: B9:54:60:68:3A:EA:AD:B9:24:48:C4:A8:FD:E2:DB:CA:1E:9E:2D:7A
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 0199FC8FB3268417C954630382A13A0ED4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 0205
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa (hash: 4kJwTGIfTzijYFZnWzmKmdRlWFcf9MpzIIKmNecHiDM=)
2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: eXK0cb7UlUzULzQgfAUOtdtSH8oE3rq5QbkwueaF3Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b3:26:84:17:c9:54:63:03:82:a1:3a:0e:d4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=b95460683aeaadb92448c4a8fde2dbca1e9e2d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:e2:c1:c9:e9:ec:43:78:0c:b8:47:3d:d0:
f0:f7:51:be:a5:48:5c:4e:b6:01:d2:02:19:3d:29:
20:22:3c:97:9f:ff:ae:f2:20:60:69:e3:ac:23:d5:
1e:ef:44:0c:75:b7:16:29:b0:98:9c:92:cb:02:3b:
11:f0:1f:52:f3:ba:4a:71:37:33:4f:dc:03:d6:94:
b5:26:77:a1:3b:6f:6b:7e:a9:51:f0:d9:8c:81:0e:
38:f3:85:75:7b:aa:35:69:45:42:65:cf:33:6d:bf:
cb:cd:00:90:3a:93:e9:c1:72:2c:72:93:4d:f9:78:
fc:2f:92:72:5a:18:e2:64:08:b0:ee:0b:ac:cf:9d:
b2:03:d1:77:ee:bf:be:b4:79:af:94:ec:c1:e1:1e:
54:56:e7:ad:ab:f0:17:b6:7b:d4:8d:44:ee:5f:b1:
d0:80:b6:ab:42:28:d6:43:b9:32:53:7d:e2:27:f1:
c6:a2:5e:7c:2a:aa:7d:6b:25:71:1d:29:f3:a2:48:
9c:51:e5:c7:4e:73:68:1b:b7:82:9f:26:4d:77:c3:
c8:73:39:7c:9c:c0:17:50:2a:50:15:3d:c8:1f:75:
64:a7:80:a1:e5:03:96:33:82:51:99:f1:01:30:14:
57:ce:78:6b:42:a3:20:91:65:cb:25:0a:ab:4a:ef:
4b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:54:60:68:3A:EA:AD:B9:24:48:C4:A8:FD:E2:DB:CA:1E:9E:2D:7A
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6b:fe:5c:9a:b0:55:0e:d5:ce:80:e0:6f:37:ec:ad:da:33:
a8:25:a4:84:86:39:46:a8:36:71:4c:14:49:3f:a7:c8:6e:cf:
f5:31:74:15:28:93:87:31:6a:cf:e4:ca:c0:d4:af:9a:9e:83:
e5:be:f4:1d:ae:f5:40:b4:85:f9:df:1b:77:e8:e5:b5:a1:7a:
a5:57:d3:7a:55:f7:44:5d:ba:2f:cd:e5:fe:5b:ad:31:e7:5c:
61:4b:8c:4a:f0:82:20:89:f3:7e:4f:ca:7f:21:3f:9c:e6:a8:
2e:d7:91:5c:b6:6b:5f:b2:28:1a:63:f1:31:7d:4e:a0:2c:36:
29:c9:12:14:8e:87:20:c5:30:1e:e5:b5:8b:f0:bf:8e:53:92:
b7:bf:a1:ae:db:7f:69:cb:9a:e1:b7:c2:49:38:3e:2e:d7:f2:
e0:5e:11:a7:4f:40:2c:32:f5:e2:b6:f2:9a:df:dd:32:fd:6d:
06:53:ba:7e:94:49:66:c3:0c:30:b4:f2:5f:16:78:c1:de:ec:
1b:6b:68:6e:dd:da:76:49:a3:af:8c:22:d4:26:3b:2a:37:7e:
d4:4b:e0:f7:84:0c:68:ec:71:75:22:fd:3e:d2:db:ee:70:7d:
8b:be:a3:d2:2e:da:b9:9b:96:1f:17:08:88:3b:89:df:df:39:
cf:5e:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:47 2025 by rpki-client