Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: k+jlxnddTGSHLxcIL/e+q4qi8u7BfiRXVC2jiYC0CGA=
Subject key identifier: 83:90:93:B8:E5:FF:95:9D:95:EB:8D:49:0C:EE:C8:EB:60:1F:D1:73
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 0199FD3491083264C7947A6D881897176E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 16:01:44 +0000
Manifest this update: Sun 19 Oct 2025 16:01:44 +0000
Manifest next update: Mon 20 Oct 2025 16:01:44 +0000
Files and hashes: 1: 76g-Yh9Ferd3lB3kSC_pOEFVc_w.roa (hash: mtYP23ZyiF5FjXJ0wDyag4TWISBNCmqIokoqkgwM24I=)
2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: owlsDq0JNNBvc8bmhWlIhk1FC/Ohz5YRycHRGgw0wpI=)
3: clnaMm-gMiwsEYseD9VB3Kwt084.roa (hash: NpN0ynwsyxvDm6R0XnAuzGI9A3Dr8XC3OEWiSMbZf5Y=)
4: fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa (hash: 5NqXcLS1fcDGaL4JuIaR1NwgZWlNxtw/gKtP6OVjQO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:91:08:32:64:c7:94:7a:6d:88:18:97:17:6e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Oct 19 16:01:44 2025 GMT
Not After : Oct 20 16:01:44 2025 GMT
Subject: CN=839093b8e5ff959d95eb8d490ceec8eb601fd173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:02:82:58:d8:ad:80:fc:dc:bd:f1:57:1b:
68:55:5a:18:bc:18:86:35:29:11:d7:d8:68:3b:b5:
56:20:a7:84:72:79:90:b9:43:db:f7:76:1c:b2:e8:
dd:13:ad:67:d7:c2:3c:be:ea:b7:f6:fd:bb:f6:94:
82:1a:93:9c:4e:cc:ec:e4:e2:cc:22:d5:ea:8b:64:
1f:b3:d0:d5:b9:a2:0e:c3:12:56:3c:18:c4:85:ac:
43:b9:b5:86:48:be:10:18:55:68:9c:f4:02:a6:bc:
0a:2a:7b:d0:1f:99:e3:2b:38:6f:bd:aa:e2:b0:8f:
e6:f5:11:fb:c7:5a:59:8f:27:b3:94:d1:27:eb:b7:
3c:a6:d9:bb:94:f7:d0:72:ea:de:10:c8:a4:39:6d:
f5:17:93:e1:16:7a:54:7b:c7:9b:a3:50:e5:18:2f:
43:57:bb:b2:b7:43:73:26:68:bd:fa:67:ed:49:cd:
8b:6d:af:50:d9:e1:5d:4d:36:05:f2:57:a5:f2:f7:
0a:11:dc:85:7b:d6:11:28:4c:40:8a:e3:76:bc:7a:
79:42:d7:5d:b4:de:bd:fe:24:8d:9e:de:99:35:25:
d8:48:a6:12:eb:e0:b0:0e:ce:bf:1f:2d:7d:17:21:
47:e7:1a:0f:76:9e:53:c3:63:eb:85:c5:0a:e8:ee:
34:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:90:93:B8:E5:FF:95:9D:95:EB:8D:49:0C:EE:C8:EB:60:1F:D1:73
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:88:d2:c7:69:ba:76:be:d1:41:b6:91:76:ac:82:86:0b:44:
9b:77:f8:91:b5:74:cc:d5:0d:1e:d7:2e:08:3b:47:fd:8a:67:
73:b5:aa:40:43:87:be:b1:04:2f:22:e1:e7:98:ec:b7:0b:04:
d2:eb:a7:93:84:cb:a7:aa:4b:4f:15:b9:8f:cb:51:86:e8:21:
f5:63:0a:6f:90:35:57:92:56:11:85:7e:0d:72:e1:45:27:5e:
b8:ac:d1:36:b9:ad:94:bf:c7:bc:57:5c:d8:59:65:c8:8a:2d:
44:bf:e3:14:9f:c5:52:97:0b:13:42:74:e5:f0:fb:32:af:67:
06:3d:ec:45:1f:03:13:ab:19:53:79:ec:1f:a5:46:17:74:3a:
a9:07:32:94:c7:0f:65:be:c4:c9:c9:ac:27:4e:e9:c4:5d:5a:
4d:e6:f3:2e:b5:89:51:a8:a5:e2:a3:72:60:f2:6e:d0:ce:d3:
9c:70:43:ae:50:75:ea:75:a5:96:4a:59:d7:5a:61:df:36:62:
e0:1c:7a:aa:ae:97:52:33:36:19:8d:b1:a3:57:f2:13:94:20:
85:04:7f:68:82:6d:29:ca:1a:31:3d:0f:37:2c:d0:c3:78:0a:
4e:eb:8c:0b:e2:a8:c2:29:a2:20:f0:43:f2:6c:21:ea:0a:21:
99:6e:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:08:39 2025 by rpki-client