Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: RuAbwNIIk4pvYlB3Zp0shmb8DKaltagEysIiXMAQ7JU=
Subject key identifier: A6:78:34:ED:D4:4A:18:E7:2A:A7:76:26:88:76:75:18:43:DF:15:09
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 0199FCFD7475A6762601110DA4ECB651173B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 16B7
Signing time: Sun 19 Oct 2025 15:01:32 +0000
Manifest this update: Sun 19 Oct 2025 15:01:32 +0000
Manifest next update: Mon 20 Oct 2025 15:01:32 +0000
Files and hashes: 1: 5PJXNIBNkIDizHXqABCfI2weMXY.roa (hash: mf+a4WKnZwf0YHj/JFfXY0yYuBPjjgdMLip3MBUWcAI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: lpm37ow59xL2Lp/8jyh7ToC+CzoCv41v7P+J8vQ1NrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:74:75:a6:76:26:01:11:0d:a4:ec:b6:51:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Oct 19 15:01:32 2025 GMT
Not After : Oct 20 15:01:32 2025 GMT
Subject: CN=a67834edd44a18e72aa776268876751843df1509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:af:72:2a:51:9e:50:99:e6:fe:5e:39:97:
f2:bc:e3:3b:14:33:42:d2:59:69:fa:df:f4:6a:eb:
04:9e:ed:5c:4f:0d:e5:b9:5a:73:9b:9c:30:87:48:
da:e2:c2:8b:44:ba:63:2f:bc:4f:9f:a9:3f:54:a0:
12:65:81:38:02:9e:5f:ba:45:90:a1:61:78:b5:6e:
c2:a3:af:1b:d1:4e:b3:85:9f:23:70:18:81:b8:a0:
84:23:5a:c0:b4:4c:95:3d:59:8b:75:72:7b:03:83:
9e:f0:13:8b:27:b4:7f:75:d9:a3:79:4a:1e:c0:dc:
bf:19:a4:e9:fb:d2:f7:b5:db:b1:b7:f7:a1:69:7d:
7a:0b:80:f9:e9:41:d7:fe:9d:d3:c6:73:dd:b9:07:
82:47:dc:8a:be:7d:ef:81:38:47:89:c0:40:26:45:
71:09:3c:4c:99:2a:9f:79:86:ba:be:55:ea:1d:c0:
ef:64:9d:ef:e0:d2:bf:f8:c0:c7:f5:e6:b0:31:67:
5b:93:0e:99:01:3a:07:00:95:58:ca:4c:ca:e9:fc:
0b:51:fd:d1:33:43:3c:bc:68:a3:c0:a2:38:6e:19:
ff:e8:a6:4d:2d:70:8d:f6:83:3d:07:36:3d:0f:51:
e6:2b:5a:cf:ab:c5:be:02:d9:f9:da:22:9e:f8:d2:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:34:ED:D4:4A:18:E7:2A:A7:76:26:88:76:75:18:43:DF:15:09
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:af:f0:c6:7c:5f:2d:92:51:20:01:b0:40:59:f5:f7:3a:20:
80:95:ef:57:eb:b2:12:4e:32:4c:55:a5:dc:43:d9:ad:69:c7:
3c:10:b7:44:0a:cc:ba:7d:e2:8f:f6:0f:c6:2f:35:f3:56:e8:
f3:2c:02:f9:67:73:27:76:e3:0c:81:49:87:f9:73:e4:1d:55:
f5:99:ba:67:7c:b1:f0:27:f4:34:b6:7f:ab:fa:4b:0f:8f:58:
8b:c7:10:53:a1:bc:dc:45:bb:e3:38:fe:f5:1e:1b:a5:b7:30:
9f:9e:da:c5:c2:21:0d:c8:36:bb:ee:8d:0c:9f:c0:29:5a:9a:
86:d6:de:49:ab:9a:47:d8:d0:3c:b4:94:70:76:41:84:c0:ab:
3c:78:0e:fe:53:b4:e6:b7:df:af:07:70:ce:de:e4:fe:e2:c6:
ca:41:59:ab:83:ca:23:5a:5e:fb:d5:07:59:7e:73:a8:be:30:
eb:97:ed:89:40:a6:0e:d9:a6:43:8e:01:9c:82:73:58:7f:08:
6f:7d:a2:e7:bb:be:c6:71:ed:ba:c6:6a:83:60:26:c4:de:91:
6c:c3:ef:8a:ee:5e:e4:3c:64:4c:c9:8b:06:77:6e:bb:b3:b8:
2a:88:33:41:75:ef:9e:01:d9:8f:39:e9:ef:e9:fc:00:69:53:
dc:61:61:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:18 2025 by rpki-client