Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
File: hEoXkcsH8dhhI8Y9w63P11TbEBs.mft (raw, json)
Hash identifier: 8Z5h1Qi4mLMtKWvRP+Czt2PtK+3csrlwjC9tt7KGgfM=
Subject key identifier: FC:03:30:92:9A:B6:79:8C:0B:EE:29:E7:BF:D7:60:4A:FA:8D:34:9F
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 0199FE4743D75DF1E2051D1A058AD54BBE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
Manifest number: 0AF4
Signing time: Sun 19 Oct 2025 21:01:47 +0000
Manifest this update: Sun 19 Oct 2025 21:01:47 +0000
Manifest next update: Mon 20 Oct 2025 21:01:47 +0000
Files and hashes: 1: Ihp0VP8oRNeTGrBSGwpts6D1JhE.roa (hash: Qldf3LszJ2g2XwaE6LEoxPc+aR59tijRa50IN/mT6PY=)
2: gi2zaUr2ngLXfM8NV7jNPdt_PFI.roa (hash: pPPLz9b8ntu+6vKYV+GHcDLfS03p/6Pt+aGjIk5ADdw=)
3: hEoXkcsH8dhhI8Y9w63P11TbEBs.crl (hash: 0wc82+U+BgKZX1aPY2XNMoCGwh9J63JV2k6lE/O2ei4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:43:d7:5d:f1:e2:05:1d:1a:05:8a:d5:4b:be:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: Oct 19 21:01:47 2025 GMT
Not After : Oct 20 21:01:47 2025 GMT
Subject: CN=fc0330929ab6798c0bee29e7bfd7604afa8d349f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3c:b0:39:d2:bb:9b:12:a4:4f:43:41:9b:5f:
ee:4a:a4:ad:f0:6f:ed:ba:a7:27:f6:f8:c0:ca:3b:
d6:79:2c:b7:26:58:94:c9:1e:57:8d:3d:aa:1e:c2:
45:af:74:c5:09:ba:dc:46:74:93:4a:f8:e7:86:81:
e6:cd:7d:07:66:27:0d:54:74:31:4a:01:ba:40:1d:
53:3d:cf:96:77:35:01:d5:15:3e:a1:0d:ed:f0:fa:
3c:33:a5:ff:e2:6e:92:c9:0e:45:e6:c4:fa:35:ee:
1a:6e:b3:1e:0d:fc:a3:a2:9f:dc:fe:22:c5:4c:b1:
45:44:95:cc:3f:70:ba:e4:43:46:8f:9b:b5:0c:33:
c4:9a:9a:be:d2:9a:22:bd:16:28:03:36:54:c5:c8:
bb:96:c5:ad:79:19:06:d8:45:f5:9e:24:ca:05:0d:
58:47:d2:e3:94:49:84:0d:94:00:3c:21:5b:b1:69:
b6:a4:e4:f2:06:83:a0:bd:5a:c8:60:40:db:f5:99:
e1:1b:18:94:14:f9:e9:c3:e3:c2:24:eb:47:c8:39:
d2:90:02:ab:2c:9b:8a:65:c1:a4:05:a1:e5:e4:5b:
11:4b:5d:cb:0e:93:32:de:e8:73:dc:d0:14:65:be:
d8:12:cc:fa:e3:e5:a8:52:32:f8:4c:a7:29:2e:85:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:03:30:92:9A:B6:79:8C:0B:EE:29:E7:BF:D7:60:4A:FA:8D:34:9F
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:dc:5b:67:79:2d:d9:e4:6f:14:18:67:dd:25:93:c3:c9:7a:
88:2c:5d:e3:b0:d9:96:77:c7:e6:83:5e:62:f9:3b:bc:46:90:
a7:1e:2f:7e:c9:a5:31:0c:5d:51:18:a5:55:07:ac:81:b8:cc:
d0:20:a7:88:78:6f:f2:ba:ad:0b:2e:82:ba:62:95:9a:f4:1f:
8b:47:0d:df:98:60:20:4c:b0:93:7c:06:fd:7c:b8:9f:74:aa:
3b:0c:d1:3c:5f:27:33:5c:b8:c5:3c:74:e2:35:c9:c5:af:74:
e1:ef:c3:7f:c5:ca:1a:47:9c:bb:1e:92:dc:2d:dc:94:f1:b5:
1e:8d:53:2c:7b:56:41:59:17:4d:c2:08:67:e4:69:5e:d6:b3:
06:4a:89:4e:88:29:35:01:24:a1:76:df:82:18:86:c6:53:a5:
d5:2f:82:d2:38:b6:ee:2f:c5:5c:99:2c:b6:7f:0a:d5:e5:0d:
51:8c:ff:be:49:ae:6b:54:06:8c:71:df:d7:b3:28:89:9f:98:
05:0b:22:c2:e3:40:8c:a4:a2:80:f0:56:b1:d6:2c:a6:8b:91:
ad:cc:4d:15:51:ae:af:c4:cc:3d:2f:c4:27:28:36:ba:b1:f5:
3f:ad:aa:89:65:94:e8:1d:94:62:a7:e1:f0:e3:87:de:55:b1:
b7:0b:4e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:50 2025 by rpki-client