Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
File: hkEGVA8wqdzfjvm-cv_vi9inLlw.mft (raw, json)
Hash identifier: lHcHZ5I+vnwzM6CjqpNuwSkGyGuzEJFIrNdp82INr2A=
Subject key identifier: E3:FB:79:64:FE:50:8D:3F:3D:A1:43:C0:DE:D2:59:CD:2E:2A:65:8E
Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
Certificate issuer: /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Certificate serial: 0199FD6B0EF332054D4E7A362BD524E3685A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 17:01:15 +0000
Manifest this update: Sun 19 Oct 2025 17:01:15 +0000
Manifest next update: Mon 20 Oct 2025 17:01:15 +0000
Files and hashes: 1: XPrFj5zrogqrQA0ZGMw9Cj_3tIM.roa (hash: y5bDj30kHbVlnej3Qo9ZyWbBqUGtip3DeFT5c1pzf8I=)
2: hkEGVA8wqdzfjvm-cv_vi9inLlw.crl (hash: JugXEoPf1ibOUGREw6vrBdQltx9XQLQTJEiitRrjGQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:0e:f3:32:05:4d:4e:7a:36:2b:d5:24:e3:68:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Validity
Not Before: Oct 19 17:01:15 2025 GMT
Not After : Oct 20 17:01:15 2025 GMT
Subject: CN=e3fb7964fe508d3f3da143c0ded259cd2e2a658e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f9:38:15:c6:9d:f8:b4:25:2a:f0:79:57:05:
39:58:4c:d4:ca:1f:61:2c:be:8b:9b:15:04:29:f7:
f5:53:d2:e8:1c:be:38:66:6b:43:7c:cd:4d:64:ca:
1f:29:20:c3:fc:52:be:35:be:18:04:01:91:dc:6a:
b3:b8:ab:08:08:f9:d6:db:04:52:11:3d:14:02:43:
12:28:db:43:b1:ff:e8:38:75:01:13:cb:1b:c4:9f:
08:ab:a8:6a:ff:37:76:89:27:bc:b9:fe:17:46:c2:
d5:c0:e8:d8:13:0a:7e:ac:9b:50:53:ce:93:93:f8:
1a:c7:0c:45:11:cc:a3:e8:72:b6:d9:db:70:ae:a3:
1f:08:d7:50:9e:d4:2f:a8:ae:78:70:53:90:33:e0:
49:64:13:95:8e:ee:80:e5:53:dc:f6:18:d3:03:12:
98:9d:ee:c6:f0:bd:a8:dd:30:e4:65:4d:6f:ea:6c:
e3:38:c1:a6:56:f6:bb:96:4e:bc:53:b7:9e:13:a3:
9d:df:c7:36:98:09:0d:99:9b:6d:18:59:cc:7a:d6:
08:54:53:f2:db:4e:4d:71:d5:fd:6c:55:29:6a:9a:
d5:16:b8:c2:c2:29:bb:eb:1e:07:01:ce:4b:6e:8d:
91:b1:55:bc:26:b7:47:59:aa:08:fc:bb:6f:c6:ca:
d2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FB:79:64:FE:50:8D:3F:3D:A1:43:C0:DE:D2:59:CD:2E:2A:65:8E
X509v3 Authority Key Identifier:
keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ef:54:de:c8:09:92:62:6c:18:85:84:27:db:2e:9d:be:cb:
08:98:49:26:21:45:6a:50:c6:61:4c:93:7b:94:86:31:f8:a2:
9c:d1:10:38:57:5e:36:f5:91:dc:f5:0f:5f:52:9f:b1:ed:be:
0f:f8:06:1f:6b:b8:20:d3:03:34:54:c5:79:b9:d5:32:38:b6:
e5:63:b0:8e:0f:39:d7:4d:3c:7b:d4:d8:fa:7c:49:bd:a9:66:
60:10:f5:a2:7b:ed:9a:2f:68:54:8d:1e:19:42:e2:0f:da:86:
8e:fe:3c:b1:51:d3:8c:0f:a4:30:c5:f2:7f:04:b8:14:73:12:
20:3c:f1:24:24:f4:7a:ab:a0:ce:c3:7e:3a:a9:4d:c9:f8:7e:
bd:ef:d3:2d:bc:fe:74:9e:b8:4c:78:42:d6:e2:3d:34:93:ad:
0c:22:17:d7:bd:e2:e9:8f:c5:9f:e7:ce:f8:17:f8:2c:be:12:
d4:59:dd:1b:59:c2:50:6f:03:48:da:10:a6:4e:ac:8f:80:7e:
eb:92:15:e5:7c:a2:6c:7e:09:e7:41:98:bd:c9:6b:01:1a:20:
7f:90:98:f8:c7:22:f0:4f:a0:ae:51:8b:b1:ca:a7:34:1e:3d:
a7:00:e8:5d:a7:dd:54:a7:27:1e:e6:22:3d:86:3b:04:52:fe:
43:bd:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:33 2025 by rpki-client