Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File: HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier: THb3U+lV2vapXGaAtLNP7PVk+RpsWdvNSQxiYvskq+0=
Subject key identifier: FD:BE:36:E0:F1:36:EB:D4:A9:27:F4:DC:70:DF:8C:7D:50:43:9A:7B
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial: 0199FBEAF97B6BE9E1FB4D64564921363023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:01:44 +0000
Manifest this update: Sun 19 Oct 2025 10:01:44 +0000
Manifest next update: Mon 20 Oct 2025 10:01:44 +0000
Files and hashes: 1: DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa (hash: nSw+Z2r+tEaSc2AQgef90FTr8oKptJDQ2v6jPAQnhGM=)
2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: cIZYGmKfdde8m4l8sSgyYB2ve9wQinF1kMW4SZH0p08=)
3: HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa (hash: XR9eo2BAwqzrJQjS2GXKNqFXgZew/uNp0g76elzf6UI=)
4: q-KsgHc87yurkiTPrGB6_ENn-Sg.roa (hash: cFavBWqarVDA4XfAipmh7/d8krk6AEiGb/atvWyd1pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f9:7b:6b:e9:e1:fb:4d:64:56:49:21:36:30:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
Validity
Not Before: Oct 19 10:01:44 2025 GMT
Not After : Oct 20 10:01:44 2025 GMT
Subject: CN=fdbe36e0f136ebd4a927f4dc70df8c7d50439a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:2f:0c:5e:c9:c7:88:4a:41:d8:dc:f3:95:
ab:8f:81:b5:30:ae:82:d6:44:13:ef:14:ae:06:85:
42:08:8e:ea:c0:4c:1d:72:1a:b5:6e:1c:f0:e5:3e:
95:a0:d8:14:6f:70:bb:82:39:49:09:34:46:af:ef:
44:e7:0b:98:42:75:1f:62:41:ed:56:c5:56:2a:93:
a3:79:40:01:f6:7a:62:b1:7e:aa:b3:37:6d:c0:43:
14:bf:99:67:a2:ee:dd:fa:e9:6a:85:58:36:ff:4b:
92:98:17:dc:89:4e:79:1c:06:55:cc:d2:a7:ee:c2:
28:a4:8d:f9:1e:20:32:8d:56:0f:be:ad:e5:b4:9d:
59:5f:85:52:57:43:9b:5e:57:be:1a:7a:b6:61:56:
af:b1:46:1f:85:c9:85:31:64:8e:8b:e2:76:11:31:
4e:1d:aa:39:21:f5:ec:bd:b0:dc:61:20:8e:66:c7:
53:8e:c8:c4:2b:5f:06:8b:5b:ce:8d:1f:b9:c9:d8:
1f:34:01:1d:0d:0d:57:2a:3d:46:60:5e:d4:94:16:
6e:94:76:41:9a:f2:c6:d5:db:74:18:88:ae:64:f8:
1a:74:06:84:fb:eb:1b:b4:93:48:cf:ff:fc:52:f2:
68:0d:90:f4:5a:b9:1c:96:2c:bc:f7:eb:8f:24:e6:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BE:36:E0:F1:36:EB:D4:A9:27:F4:DC:70:DF:8C:7D:50:43:9A:7B
X509v3 Authority Key Identifier:
keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bc:28:fd:f9:12:10:52:3d:ea:2d:a5:bf:91:57:9f:71:dd:
e8:96:ce:cc:b3:08:2a:33:6a:c4:f9:fe:3e:00:cf:2c:ee:a0:
e1:97:d3:ad:4f:41:89:13:ac:fd:9d:f5:7c:6f:98:1e:33:4d:
22:3e:af:02:1b:fa:3b:39:91:8f:43:f1:4e:f9:9e:40:1f:0c:
77:7e:71:6d:81:dc:1f:ab:3d:e1:c1:6f:c6:9b:81:0a:75:67:
3c:1e:eb:bd:81:ea:2e:16:94:fd:24:70:c4:90:f2:ff:89:6b:
7b:82:a2:bd:f3:c2:47:c6:93:6e:f5:28:d4:e2:e0:e6:50:8f:
7a:4c:00:dc:19:43:43:33:28:89:d6:1e:af:71:75:f6:f7:5c:
9f:59:51:de:4f:50:aa:36:e1:f4:38:16:b8:9e:f8:cf:17:3c:
84:52:4d:8e:d3:57:31:ef:3a:99:bd:42:f9:80:5a:dd:fc:c3:
e7:52:27:8b:4e:2a:0a:17:5c:33:32:db:7a:cd:17:dd:2f:a3:
21:57:1d:b4:d6:35:5d:82:12:0f:e3:f3:9a:9c:63:4c:e7:34:
3a:90:64:7c:cb:8b:76:28:6d:a3:e7:1c:55:6f:ce:a9:2c:4f:
00:7b:70:d0:5a:74:28:5a:76:52:ec:f9:73:5f:b7:4c:d1:7a:
e6:d5:7e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:20 2025 by rpki-client