Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: OMAVvF9TLOPOX43f9ratq4/G7SVMDLq8sVHmitjAHdk=
Subject key identifier: 0C:8F:FE:4C:41:4C:C2:BE:D5:85:E2:10:5C:AE:92:FE:AC:8E:45:E4
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 0199FCC688A2E4CE47A886DB58C365395CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 10E6
Signing time: Sun 19 Oct 2025 14:01:33 +0000
Manifest this update: Sun 19 Oct 2025 14:01:33 +0000
Manifest next update: Mon 20 Oct 2025 14:01:33 +0000
Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=)
2: d9E6C3QPOt9u78MI9SfBmesK5F0.roa (hash: h3w+IvIr5e7qvP+/FTOi1Iivorry4KUdkg2Suq8DTl0=)
3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: ZxoVDLagWqY4lzRJME/GJnZJVNheUjU/A5LvtOvOrSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:88:a2:e4:ce:47:a8:86:db:58:c3:65:39:5c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Oct 19 14:01:33 2025 GMT
Not After : Oct 20 14:01:33 2025 GMT
Subject: CN=0c8ffe4c414cc2bed585e2105cae92feac8e45e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:04:f7:75:a0:a2:98:d2:b1:e0:02:0f:33:
16:7d:66:5e:a4:ec:07:15:2b:f0:3c:27:70:53:99:
b4:6c:be:68:ed:2c:37:67:61:7e:7b:93:26:26:6f:
72:97:00:f8:2c:0a:59:9d:c7:f0:0a:30:c1:5a:ba:
4e:d0:5c:68:e1:ad:14:f4:2f:43:63:5f:6d:d2:06:
7e:7b:1b:94:a7:ad:13:37:8a:93:a5:c1:66:4a:f0:
94:91:33:7d:bf:bd:27:ab:39:e2:62:5d:1c:b1:8e:
ed:6c:e2:8b:ec:b2:ad:85:87:5a:a4:c5:24:62:4d:
4d:96:22:18:cc:f2:0e:bc:34:4e:25:1b:10:87:f4:
48:d7:59:0b:9e:2e:4e:08:be:aa:b4:9c:7c:34:ff:
d5:88:15:74:8f:56:dc:84:f8:3c:d5:3d:61:95:63:
fe:96:7b:df:6c:10:84:b6:7c:6d:c9:d7:b2:74:8f:
b8:8b:07:b9:74:f4:87:65:bc:25:c1:4a:2c:f6:75:
8c:d9:44:06:20:8e:31:35:ba:79:ef:60:6c:81:3e:
aa:f8:74:55:0e:85:76:56:70:6d:d5:dd:43:4a:a0:
ca:17:b9:b3:ec:15:63:25:de:a8:b8:a3:59:a5:99:
8b:23:b6:c9:4e:22:05:84:22:c7:19:79:e6:cb:1f:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8F:FE:4C:41:4C:C2:BE:D5:85:E2:10:5C:AE:92:FE:AC:8E:45:E4
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:84:20:01:e3:0d:df:63:4e:d0:c8:a3:a4:b2:31:c8:3c:ec:
6d:6c:44:b5:2b:33:74:97:7a:d1:ab:e2:8a:ee:f5:31:77:29:
0e:85:73:8e:78:c8:c9:83:f4:a0:fd:49:39:30:65:33:a1:15:
46:c7:19:93:d8:a6:0f:2a:53:07:78:40:5f:f3:62:f2:40:c5:
1c:ec:f3:f9:d4:b8:8a:0b:3f:7d:6d:23:8e:da:a8:bf:24:c2:
63:cb:de:1a:5b:4c:cc:01:4d:3e:b9:2d:2d:31:da:77:ac:24:
85:8e:8e:4a:2f:90:c6:95:fc:97:38:e8:3a:93:2f:73:64:da:
7b:06:73:19:d7:75:e2:a3:c3:eb:61:43:08:7a:c3:a3:2e:ab:
7a:d0:14:36:a7:ce:52:99:de:53:5a:6b:d3:84:6a:c0:5d:eb:
25:c6:66:43:c2:50:ab:04:7c:a8:c2:8f:e6:ab:60:b1:2e:2f:
c8:4d:46:f7:6a:f6:c5:cf:dc:5c:a8:fd:43:7a:b3:8b:fa:d7:
c5:93:a5:4c:3e:a6:85:2d:b9:61:c6:3e:b6:30:c7:7e:fe:ef:
8f:ef:4c:43:be:4f:fb:96:c0:de:68:49:f2:e0:4d:d6:b7:33:
2d:17:06:5a:74:5c:a0:f8:40:30:07:3e:54:95:80:ad:79:d7:
74:44:5c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:13 2025 by rpki-client