Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
File: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft (raw, json)
Hash identifier: /FXIQ9X6oAry0l2JvrIgHXhRkWmI5WgyRJAeHm3hRfM=
Subject key identifier: 21:3B:9D:4F:67:7B:B3:41:12:E0:5D:41:19:AF:91:3E:2B:D0:0F:5C
Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
Certificate issuer: /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Certificate serial: 0199FCFD24042BCCB14D6EEBCA277D928060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:12 +0000
Manifest this update: Sun 19 Oct 2025 15:01:12 +0000
Manifest next update: Mon 20 Oct 2025 15:01:12 +0000
Files and hashes: 1: BZnndlQQXrhtsi1w92QwnbcTVos.roa (hash: xdoIZn2kmQaThra2U5g+oAnP8t2eo6iub1zi69U/YhE=)
2: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl (hash: lAt2NCqTkXY6tXRvBxHbgO0q7gdijW57LokhsJMY5fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:24:04:2b:cc:b1:4d:6e:eb:ca:27:7d:92:80:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Validity
Not Before: Oct 19 15:01:12 2025 GMT
Not After : Oct 20 15:01:12 2025 GMT
Subject: CN=213b9d4f677bb34112e05d4119af913e2bd00f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:f6:e3:00:20:23:2c:c5:97:7a:3f:b9:26:
71:ed:e6:e8:1e:57:f0:c0:eb:e3:88:a2:a7:b0:5b:
31:76:8c:84:4d:c8:c4:f9:be:cd:c9:4c:3a:50:be:
28:d2:6b:d2:50:81:30:85:6e:a8:83:50:bb:48:dd:
34:28:78:8e:f8:3c:e4:75:b0:d6:fe:37:12:05:b4:
28:9a:95:c7:72:d6:d6:1b:6e:40:1e:8a:c3:f3:0f:
33:05:2d:05:27:68:c4:cf:bb:26:0e:80:9b:f4:60:
57:03:d0:03:33:f7:d1:8a:ee:30:3e:19:99:01:b9:
40:c9:f9:45:a1:d9:27:12:00:b7:36:7d:d8:f2:2d:
69:e1:3a:fa:dc:d0:e1:3a:1f:0a:58:62:6a:21:58:
0a:28:99:4a:76:b2:fc:67:84:98:f9:8b:5f:75:35:
9b:32:e9:85:fc:73:fe:68:b9:b5:0c:b9:f1:7c:9c:
f0:8e:5c:c1:d7:f6:fc:af:20:a4:dc:52:53:fc:f4:
ca:ce:56:6c:14:5e:a2:e6:fa:6a:9d:a3:20:d2:9f:
82:e6:86:02:98:b1:22:04:44:6f:43:f5:d4:fb:0b:
4e:0b:b1:20:33:d8:23:09:16:17:fd:d7:68:c2:38:
61:5a:66:f9:2a:b5:7d:20:7d:61:ec:b7:37:d8:3a:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3B:9D:4F:67:7B:B3:41:12:E0:5D:41:19:AF:91:3E:2B:D0:0F:5C
X509v3 Authority Key Identifier:
keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:5d:de:64:6c:33:9a:aa:94:bb:77:31:95:e9:22:18:9e:28:
13:96:a3:7b:cd:e6:d0:f7:25:62:08:73:98:c8:c0:a5:9b:1e:
d7:3e:f6:3e:a3:72:d3:ae:1c:a3:62:92:2c:c3:06:a4:5b:dd:
99:99:e5:61:77:65:e9:26:89:49:10:61:04:67:f2:b4:f0:b2:
9c:21:c2:bc:c0:a7:f4:10:73:c4:82:db:5f:74:12:19:a1:41:
7b:56:11:3d:8d:32:8d:e1:8a:41:87:7c:25:0a:d5:60:8a:40:
12:16:b4:8a:3d:ba:a8:52:86:fb:ba:fb:68:5d:64:47:d1:ce:
e1:46:cb:02:c0:9e:5f:e3:b5:23:32:ad:55:03:9e:37:61:e7:
f8:23:6e:27:c2:06:ff:d5:6b:ae:84:45:76:7b:04:26:4f:02:
62:01:87:fb:d3:e8:b9:83:5b:89:af:23:7a:d3:3c:fa:96:a3:
dc:be:a4:cc:f5:e2:74:81:50:80:81:cb:f1:62:6f:c3:ff:06:
aa:2b:fd:7f:1f:c8:41:91:4f:d2:04:e4:f2:93:20:12:5c:ff:
4f:57:9b:04:62:10:ab:53:51:5b:e2:ad:a4:b5:7c:8f:c7:e5:
ed:65:6d:4f:03:72:56:08:6f:5d:50:dd:7f:30:5d:88:27:58:
89:7c:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:21 2025 by rpki-client