Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File: hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier: ODzVJjsfYegzbuN7dJqxLjU2f+XrztLkznWxGiDY9NQ=
Subject key identifier: 59:76:33:9F:AD:29:08:4D:15:09:FB:59:63:FF:0E:74:9B:E6:3C:39
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 0199FC8F3E065EC818FC85DDDB02CA9A8437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number: 1306
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: EAjdVmmPDgRsaYdJzqxZsWJ1dtQ.roa (hash: MpPa88zI8gAyzjuIqd3qZ9dmTTo9CAG0jQ+czPWKrY0=)
2: ZpIa8d84ZFXt_ZFQqAeQWbEn8cE.roa (hash: yg+iHdLIlyvv1zJT3FKVPdTj2ezKdgH8bzRxXJFfD+M=)
3: fw-9UYbBKED3FPK1cxwcKkMCFm0.roa (hash: jRUQB1Fr5hDxlkTn2IWZrgIhUE7mB/LkFsYZT2IUhmk=)
4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: bNHD7DfTtr+B0WrXXCEt4yeF9PgF6d0iCXPDwrXi2Rk=)
5: pT_R2pT5fkigCUc46LgmyNvu26w.roa (hash: f5EDq84NioAgiZfb2l0opuOPnSnHoDIa4FyPu++58Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3e:06:5e:c8:18:fc:85:dd:db:02:ca:9a:84:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=5976339fad29084d1509fb5963ff0e749be63c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:95:2f:f7:c5:12:f0:49:40:52:17:58:c6:3b:
d5:2a:95:5a:0a:4c:c8:87:8b:06:cc:95:5d:e2:4b:
76:65:ef:e0:a1:42:33:57:0e:94:fb:e9:1f:48:19:
dc:b3:d3:88:39:8c:38:70:e3:ed:70:68:72:1a:04:
51:7f:5e:ec:1e:07:ab:9d:0e:35:f0:f2:63:73:9f:
58:f2:15:6e:eb:4c:35:12:f6:88:7d:cb:46:71:df:
de:33:5d:1f:68:0a:65:fb:f7:f4:2b:a5:5d:2b:4d:
a1:c8:a5:b1:92:1f:38:68:96:aa:dc:0d:c3:63:3c:
eb:35:40:97:b5:7b:45:77:78:15:37:ec:ec:e6:ab:
3e:04:b2:e3:7e:24:72:b9:79:3a:bd:c3:da:32:ad:
db:f9:b2:2b:2d:ef:51:4a:c0:41:48:8b:ec:ee:ff:
44:20:c3:b1:c7:31:62:2a:e8:e6:ba:a3:c1:43:72:
30:94:56:77:2f:2a:6e:02:42:90:ec:10:35:3b:ff:
98:95:11:43:d7:eb:ec:01:5d:af:c6:41:77:03:6d:
fb:14:de:db:08:7b:4a:fe:db:7e:9d:68:ee:0b:af:
41:5a:be:70:bc:65:9a:78:f2:59:02:28:6a:a4:51:
c1:b5:a7:ce:6f:04:16:61:06:cf:bd:e4:7b:17:c6:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:33:9F:AD:29:08:4D:15:09:FB:59:63:FF:0E:74:9B:E6:3C:39
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:85:58:e9:d0:09:05:e9:fd:dc:52:b8:3d:a4:65:aa:4a:94:
ef:1f:de:12:62:6f:76:3e:36:3b:d2:96:e7:8e:ef:5c:3a:8e:
0f:11:6a:00:94:f5:e3:11:4b:d3:b5:d8:ce:48:11:86:4c:86:
d9:19:30:f6:09:db:9a:30:87:07:16:db:10:19:75:4a:c0:40:
d9:23:3f:0c:4e:ab:e5:db:ac:e4:0c:33:90:29:84:bb:92:c1:
19:94:04:f6:02:e6:d5:64:18:50:50:89:d2:42:ec:dd:86:f2:
c3:78:54:cf:e0:e2:07:09:59:8f:bb:ba:20:30:8b:1d:e5:8e:
34:ba:2a:f6:1c:95:d1:21:c0:93:50:f8:5c:bd:55:1d:fb:ac:
d0:ac:78:09:3c:7b:c4:6b:4f:ba:90:7c:87:b7:0f:2f:eb:04:
a4:2a:32:94:f4:e1:67:60:6b:a0:2d:f8:6c:e6:07:d8:0a:ad:
1e:f3:0d:0d:c1:e0:d6:8a:bd:89:2c:c4:48:6a:67:2f:f8:45:
32:a4:f2:39:c3:ff:18:8b:8e:eb:f5:0d:11:a6:f7:bf:ee:dd:
da:52:99:b7:62:37:2d:22:ff:be:cc:b1:68:18:1e:16:96:f7:
17:7a:31:19:b3:1e:90:e7:68:fa:d5:32:c7:c1:c9:d3:b6:20:
6b:5e:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:17 2025 by rpki-client