Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: N0SNY+UJlrH5quL2XZf8sIIWZkk30++GCsWT4tIdCI4=
Subject key identifier: BF:71:83:C7:59:0F:44:AC:42:73:FA:A1:30:19:07:E3:65:6F:84:85
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 0199FEB4F1314B9C7A872491236150F673D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 1399
Signing time: Sun 19 Oct 2025 23:01:34 +0000
Manifest this update: Sun 19 Oct 2025 23:01:34 +0000
Manifest next update: Mon 20 Oct 2025 23:01:34 +0000
Files and hashes: 1: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (hash: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: Gk470NWl9pSFGfaQ1ufk0oExTvhfEYRYGuWeGJmnUWw=)
3: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (hash: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:f1:31:4b:9c:7a:87:24:91:23:61:50:f6:73:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Oct 19 23:01:34 2025 GMT
Not After : Oct 20 23:01:34 2025 GMT
Subject: CN=bf7183c7590f44ac4273faa1301907e3656f8485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:c2:02:da:a1:ec:74:f0:c3:9e:3f:2a:47:
2d:27:af:22:7c:7e:5b:0b:e2:8f:36:13:bb:d2:fc:
ce:c3:a1:b4:05:7c:36:18:87:67:60:d0:2b:21:c7:
25:9b:7b:2a:e7:67:73:9f:b1:7e:ea:fe:86:f9:7a:
09:9d:09:a1:bc:53:7f:65:ad:13:dc:3b:6a:7f:7e:
2e:16:a3:fc:cc:eb:b7:06:f5:75:8b:22:f1:42:35:
58:3e:fe:2b:44:df:c4:ed:2c:fc:7b:fe:09:3d:b5:
f2:15:34:ab:81:23:04:18:02:d6:db:c7:85:ba:c4:
18:cb:21:cb:71:64:52:4c:60:bc:6e:c8:b7:1f:a6:
bc:7a:73:3a:bd:fa:ed:34:b7:6e:cf:20:10:c0:81:
b9:50:63:a4:a4:57:ef:ff:c1:7e:5a:a3:7b:6d:26:
41:08:6d:18:5d:0b:a8:37:76:99:d3:47:52:c4:bf:
92:67:3f:af:1d:25:a9:79:26:f4:f1:6e:3b:ea:62:
1b:a3:8b:05:6a:88:42:6e:a7:3d:b8:62:63:f6:7c:
81:17:1f:ea:42:8e:39:ac:89:ec:9c:23:12:04:a0:
c7:40:2f:e7:0e:21:c9:6f:dc:43:0a:19:b0:a9:f4:
5b:92:c0:53:fd:2d:4e:df:21:a9:df:6a:c0:23:c7:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:71:83:C7:59:0F:44:AC:42:73:FA:A1:30:19:07:E3:65:6F:84:85
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:47:18:a3:ef:ee:c6:da:10:bd:2f:0e:78:c3:a5:c9:0a:2e:
80:0a:3f:67:16:18:07:dc:e6:07:05:8c:57:3c:35:0c:4b:c8:
38:06:1a:06:e3:08:d4:e6:ed:45:90:56:b8:02:37:f6:e8:8f:
2e:a6:9b:b2:14:48:42:9d:db:db:56:a4:cb:31:79:5a:22:48:
12:60:1f:90:0c:28:42:79:b0:3e:45:a8:0e:13:a9:c6:de:26:
32:fa:24:cf:d7:0d:b3:1c:49:cd:e9:30:15:03:b9:cc:c2:6b:
ed:3d:1b:a7:20:40:ed:a9:cb:51:a2:aa:7d:3f:4e:37:8f:8b:
0e:51:9f:55:d6:7e:95:b9:1e:86:bb:5f:8f:4c:b6:b8:af:b5:
6b:c7:3f:71:96:d6:de:e8:b9:85:65:71:78:65:eb:76:2f:e7:
d3:8f:52:5d:af:93:a4:a0:21:fb:7c:37:c3:5a:64:43:74:16:
9b:fa:c8:58:5c:21:03:c9:63:a2:d4:95:eb:c1:0c:de:a3:79:
33:9f:3f:cb:56:d9:69:a8:d1:b1:d2:ea:68:b9:b9:f4:49:50:
fc:99:70:0b:79:fa:eb:c7:3d:67:a5:97:da:56:5a:ee:11:b8:
00:63:80:e9:c1:3c:74:5d:6d:9d:e6:ba:df:31:28:b4:a4:f4:
a5:f4:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:50 2025 by rpki-client