Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: KifryHM2+LDyEV/MJttOUf+pL3nT/nmeNNyEsJbtcOM=
Subject key identifier: 0D:16:0F:2B:57:EF:D6:00:A4:F1:9B:4B:F4:0E:94:EA:7A:7C:EA:E9
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 0199FC21BDBCDC8F1C5553E4D995EF57ED27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 16B1
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: lTL8x53sMB7gOiNbomqpqInc4yqPCFBre0R79qR+5tY=)
2: t2I34y0ofKpembvBe1b_-CyvIM8.roa (hash: mSrCvo09CP/j+cfORar+o3HK77VwUvlajzCQ530vifA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bd:bc:dc:8f:1c:55:53:e4:d9:95:ef:57:ed:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=0d160f2b57efd600a4f19b4bf40e94ea7a7ceae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:13:7d:df:3c:ae:0c:66:d8:ce:14:ce:6e:
3f:28:b9:a7:e0:04:5d:ec:bc:05:85:af:82:06:79:
1f:e7:8d:bf:b5:3e:f3:11:08:8c:24:34:9d:75:e7:
33:76:41:66:00:59:d0:de:0f:1b:f7:36:37:62:4b:
27:9a:1c:1c:fd:dc:20:2d:82:d4:d4:fa:87:a2:1a:
8f:ba:cb:27:b5:d6:4d:41:f3:40:5b:7d:05:dc:a2:
88:bc:4d:13:05:a1:b8:56:77:fa:f5:9b:c6:69:70:
d4:64:d6:4d:8b:27:56:56:0c:2f:e3:f7:0a:14:ab:
1e:5b:e3:9f:84:4c:11:0c:2a:7d:23:3a:e6:53:2b:
1a:d4:00:2d:c0:ed:d9:e8:08:a2:f1:c6:2d:36:d1:
fd:a0:45:3e:ef:d7:55:ad:e9:10:d5:b0:3a:03:a4:
5e:5c:8a:12:a1:c1:fc:2e:9b:1f:63:13:d7:f2:44:
e6:07:d0:d5:48:db:ee:93:88:c9:e9:ad:b8:4f:31:
8e:e3:1a:be:91:cf:d9:cf:58:a9:3f:64:62:b0:f3:
d7:c4:fd:00:52:8b:32:89:e6:74:8d:a5:bf:74:3d:
d3:37:27:9f:d7:7c:8a:80:6b:83:14:be:9d:43:2f:
d9:93:a6:2e:c3:12:27:0d:5f:c0:9a:65:1c:88:a5:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:16:0F:2B:57:EF:D6:00:A4:F1:9B:4B:F4:0E:94:EA:7A:7C:EA:E9
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:24:5b:eb:b0:d5:e5:6b:4a:85:54:04:7e:b9:49:19:f3:27:
fe:a8:4e:94:45:c4:88:a0:c7:0f:f9:14:0d:5b:4c:2d:11:3f:
d5:bb:a9:24:97:57:da:45:73:75:91:a3:59:90:2c:7e:e3:59:
27:27:a3:5b:e9:ed:1f:b8:26:59:18:b0:96:6c:e6:6c:6e:fa:
10:37:ad:a9:75:c9:60:7b:9f:52:7b:6e:6e:b0:96:a4:bc:f0:
70:63:2e:c7:86:9b:59:5a:fb:bd:44:f8:56:51:56:f0:19:d2:
2f:19:d9:f1:c2:6b:ce:78:44:3a:83:54:ef:2b:3f:0a:6f:c6:
79:85:f5:f6:7c:16:d0:5b:42:7e:ea:6b:60:a5:34:45:6f:61:
ec:df:d5:db:2e:09:66:01:64:65:05:08:6c:88:f8:31:13:db:
84:e5:16:03:74:8b:33:71:92:86:01:a2:4e:51:94:84:0e:2d:
1d:a4:8d:dd:31:32:19:49:d4:bf:a9:8a:2f:07:55:47:6c:bb:
89:cc:a3:1c:34:40:16:ce:dd:e2:00:74:cb:ac:ff:dd:0a:65:
3c:e0:17:9a:80:a8:b8:78:1a:46:dd:b6:63:66:49:4a:13:e7:
b8:de:d4:1b:5b:7f:68:91:c2:0c:b8:0b:66:2e:e2:a0:a9:de:
23:51:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:32 2025 by rpki-client