Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File: hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier: sy49wohcFqztrlCV4Jw2QnuPkXKpuMEMxeK8bhvF7VY=
Subject key identifier: 66:F8:12:A2:B8:61:58:A5:5A:24:BD:E2:78:F2:BE:96:C8:FE:12:E0
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer: /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial: 0199FCC66E6F36FB2895B026E0DED694FF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number: 163B
Signing time: Sun 19 Oct 2025 14:01:26 +0000
Manifest this update: Sun 19 Oct 2025 14:01:26 +0000
Manifest next update: Mon 20 Oct 2025 14:01:26 +0000
Files and hashes: 1: MbStNmXQF3r8BjIEIY6alBv8fXM.roa (hash: qBMHoSNp30r52ggSq1NF5Ja+ou1kpfZ0GNdRTXuZlMk=)
2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: hy0G/TzAp/noul0xPtmj9w/q6y6JhFD1Fbp6x6uKaMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:6e:6f:36:fb:28:95:b0:26:e0:de:d6:94:ff:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
Validity
Not Before: Oct 19 14:01:26 2025 GMT
Not After : Oct 20 14:01:26 2025 GMT
Subject: CN=66f812a2b86158a55a24bde278f2be96c8fe12e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:76:85:b0:b5:f4:1a:f5:82:66:49:13:a8:
dc:44:ff:e2:0a:6c:b5:aa:1e:e3:2d:55:c6:e4:00:
ee:d8:0c:b7:e6:89:d8:5a:97:e6:56:11:6e:10:a2:
7b:cb:1e:68:2c:3e:68:69:bc:ec:92:38:9f:fa:ec:
fe:d7:52:e5:05:f8:4b:c5:f3:a5:b2:44:f3:2a:fc:
a0:50:5d:0e:02:dd:1c:c7:eb:20:e8:2f:58:69:ea:
fb:45:43:2d:4b:67:76:36:7b:3d:4d:60:e3:09:c8:
34:5d:20:41:25:11:da:42:c0:b6:6e:09:b2:b4:80:
e6:30:94:d7:8d:86:22:64:b5:79:cd:3b:cc:df:2b:
ea:21:5c:f2:45:cb:73:c9:49:9c:05:9d:b0:df:8b:
45:d7:57:3d:f8:08:7c:02:0c:17:32:a4:f8:39:53:
54:82:01:f3:cf:f8:7d:db:a4:40:ae:b8:10:1c:75:
ef:ce:bf:71:9d:a7:bc:3f:f3:4c:1e:9e:d9:80:1b:
bb:55:c2:8e:ed:28:a5:60:29:8b:7a:c6:71:91:4e:
39:97:50:bd:f1:17:81:58:e8:06:66:95:a7:98:5c:
99:8c:4b:bf:d7:3d:30:c7:7f:dd:8c:a0:c2:33:37:
41:0b:25:ca:f8:37:a2:fb:9d:f7:73:73:8a:8b:87:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F8:12:A2:B8:61:58:A5:5A:24:BD:E2:78:F2:BE:96:C8:FE:12:E0
X509v3 Authority Key Identifier:
keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:40:f2:c0:49:e5:90:ab:28:cd:13:7b:4c:18:7c:21:ee:09:
e9:f0:0f:41:fb:a0:8a:cd:34:28:08:36:19:58:c2:a4:23:56:
49:b5:ad:36:70:bf:a6:f6:a8:b9:b3:b1:4e:15:27:5e:51:e6:
c1:61:3b:ac:47:eb:58:ef:ff:0b:57:67:a1:bf:bc:3d:e7:df:
5e:67:76:31:2b:8b:32:33:06:16:93:3a:1e:dc:ca:08:7b:87:
eb:00:3c:53:b1:70:f1:63:af:46:60:e2:b7:62:cc:38:f6:20:
7f:e8:e9:d3:d0:ac:42:ed:8b:fc:b3:d2:a6:7d:fb:78:9b:65:
08:e7:38:05:77:ff:3c:49:ff:76:ba:a9:47:45:19:76:c0:d2:
62:fd:30:e7:1c:f5:89:8e:9f:b2:8e:f7:32:59:ef:c5:e0:27:
2f:83:c5:79:81:34:97:f0:c5:13:34:6b:82:d8:df:87:51:61:
a0:1b:5c:0c:28:27:fa:3e:39:42:e0:d8:b5:f3:26:ca:a6:06:
51:2a:5a:dc:21:b6:33:38:7f:61:3a:82:fa:ed:85:21:2f:d4:
a6:74:97:54:90:a1:01:36:4c:2e:36:04:6b:ba:35:7e:9a:14:
c5:e5:de:cd:b1:19:00:36:1c:ef:4c:35:5d:87:ee:14:ab:98:
b8:a2:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:13:06 2025 by rpki-client