Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: SC7wlexfcTesCoWDh00nxSJMrp5dz5zu8LZa/nOr5co=
Subject key identifier: 7D:3D:39:6A:4F:E5:20:14:A9:D6:AF:99:F4:8F:C6:D8:27:1D:BC:1F
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 0199FB45BE7281351933EDFAEBCEABF11A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 1071
Signing time: Sun 19 Oct 2025 07:01:15 +0000
Manifest this update: Sun 19 Oct 2025 07:01:15 +0000
Manifest next update: Mon 20 Oct 2025 07:01:15 +0000
Files and hashes: 1: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: QjeEhLAc1DFGcCTdJBE9Ut4ux7ZIig66ooUxHzuvCCU=)
2: kDscGP6Kvv2ErG5ZiDcwGfJJgOo.roa (hash: sDpLdqtWZqa+OqK0PcGk2ZySrrYvy+43dMtNOAb22Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:be:72:81:35:19:33:ed:fa:eb:ce:ab:f1:1a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Oct 19 07:01:15 2025 GMT
Not After : Oct 20 07:01:15 2025 GMT
Subject: CN=7d3d396a4fe52014a9d6af99f48fc6d8271dbc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:2d:ed:45:bc:82:3a:bf:ee:62:b3:a9:34:
16:14:79:0a:83:0a:3b:9e:b4:7c:81:6f:15:06:66:
30:fe:f0:52:78:58:9a:bb:9b:32:aa:b0:a8:fb:42:
18:02:58:0c:77:75:3b:8e:92:ae:21:a8:67:9a:6b:
02:cb:5c:78:76:8a:38:b8:c4:ea:45:ad:bf:4e:0e:
3c:0f:2a:12:6d:f3:5d:0b:d3:cf:09:f0:ed:f3:18:
69:67:38:1a:fc:40:7d:e0:56:d3:24:f5:a5:75:e2:
3d:39:e4:2f:e1:59:a9:ff:dd:a3:ca:55:d7:a3:8e:
e0:9c:35:b7:d6:c5:aa:63:f7:e6:ee:31:99:b7:23:
d5:e7:8f:81:42:80:d6:9e:89:29:3e:c4:3c:f2:56:
65:de:3d:2f:df:15:9b:c0:aa:31:42:12:ff:fc:80:
34:30:25:ae:9c:d8:e2:25:c3:5f:13:a3:b5:a2:f6:
19:67:ed:8a:d9:1e:d4:8d:3b:46:58:01:33:fe:80:
5a:ab:2f:33:3c:e0:17:40:f1:fd:8d:f6:d3:18:6a:
a3:93:af:ce:f0:b7:af:14:83:ea:ca:cc:83:64:dc:
f6:eb:56:65:72:7d:6b:65:fb:3f:09:8c:5b:b2:d1:
90:fe:b1:b5:86:21:ef:33:49:55:96:31:76:2d:1d:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3D:39:6A:4F:E5:20:14:A9:D6:AF:99:F4:8F:C6:D8:27:1D:BC:1F
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:46:4f:f5:10:f8:a3:b5:ac:51:70:59:fd:27:aa:e7:0a:c6:
0a:e7:11:81:18:0c:d6:aa:7a:5d:c0:7e:51:57:41:2e:5e:30:
40:f9:5f:0e:a3:8f:cc:4e:4e:b3:17:d1:29:c8:fc:17:23:b3:
9c:bc:72:77:98:de:c5:29:f0:e4:c1:d0:cf:4a:a7:fa:b8:3f:
54:05:c2:d4:9a:fc:7e:74:4a:32:ea:a2:e4:a1:3b:03:29:e5:
af:9d:c5:d3:5f:bb:de:98:c3:4f:03:24:7b:ae:b2:a9:8b:e5:
f1:11:6b:d3:a4:29:0d:8b:7f:13:9c:a8:f2:88:2a:ee:8a:2c:
d3:83:33:de:f2:ea:9e:60:37:03:7c:0e:d1:fa:81:58:e7:89:
eb:76:c7:29:ec:b6:d9:30:99:28:3d:c0:0d:6e:be:89:8a:9c:
a5:d7:17:8d:40:42:77:99:65:21:3b:e6:5a:7c:2d:bf:58:94:
e4:40:a9:3e:71:1e:9d:e4:04:14:8c:cc:a0:5f:f0:f6:7e:d5:
4c:8e:28:eb:1a:c4:ab:2e:be:c2:d4:08:55:80:1c:22:c1:50:
e4:34:08:c6:0a:7a:c7:3f:08:e1:60:60:14:2e:a3:3d:70:17:
c7:e1:1a:d4:d5:1c:04:47:52:37:da:ac:0f:c4:69:07:15:88:
aa:80:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:57 2025 by rpki-client