Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json)
Hash identifier: 9+CSCo4Hhn073minHa3HTQ60eIssnRef744ZcKDXx0s=
Subject key identifier: 18:B0:15:C6:30:96:03:41:C6:58:9C:7B:30:F2:B1:B8:EB:EF:AF:16
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 0199FFC848CC7A3B35BAE5CF38CC9086B1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
Manifest number: 07C8
Signing time: Mon 20 Oct 2025 04:02:19 +0000
Manifest this update: Mon 20 Oct 2025 04:02:19 +0000
Manifest next update: Tue 21 Oct 2025 04:02:19 +0000
Files and hashes: 1: VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa (hash: RAYdTMRTLrvbEHCokIXafnM5optXUCpT7i2/x7+Zbyk=)
2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: yumjJemY96A3WsB/y8XJqHAsLeO9nwYRgET3yTjZADs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:48:cc:7a:3b:35:ba:e5:cf:38:cc:90:86:b1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Oct 20 04:02:19 2025 GMT
Not After : Oct 21 04:02:19 2025 GMT
Subject: CN=18b015c630960341c6589c7b30f2b1b8ebefaf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:57:4b:8a:ea:bf:b4:25:af:0d:bd:c3:30:f7:
6c:65:da:ae:9a:ab:9b:c7:c2:fb:9a:4d:55:ac:c3:
8b:e1:67:77:ad:d7:f1:60:8b:a9:fe:7b:e3:5c:cc:
24:7f:59:04:fd:39:20:f2:3a:90:1d:1f:a6:92:12:
44:3d:35:de:7e:41:66:1c:da:2b:ba:68:47:26:c7:
1a:23:5b:07:f3:af:87:09:82:60:ba:b7:79:72:3b:
60:5f:1a:d3:62:b7:f1:ad:83:a2:a5:08:f2:49:d6:
eb:b4:2c:8e:5e:07:84:f0:e4:25:6e:03:89:dc:da:
59:17:ec:b6:39:55:4c:66:e9:43:e8:c6:83:24:6d:
fc:09:a5:85:cc:fb:61:fe:20:50:39:cb:38:23:19:
44:63:66:e3:b3:3f:77:82:97:c6:87:4f:4d:e3:c8:
27:dd:2d:a5:fc:a9:5c:7a:d4:5f:b9:49:41:8c:ed:
0d:5b:ce:34:6c:2d:da:88:2a:68:4f:e9:70:83:a3:
f1:94:ea:95:97:1a:17:77:f0:a1:7d:fd:0c:71:c3:
ec:fe:88:44:05:ec:81:fa:af:ec:5d:5b:c3:b7:60:
af:eb:01:a4:fa:c4:85:a0:d5:36:59:56:65:b3:09:
6b:d1:5b:fe:f7:68:f2:76:52:84:58:8d:63:7e:48:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B0:15:C6:30:96:03:41:C6:58:9C:7B:30:F2:B1:B8:EB:EF:AF:16
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ca:0c:88:86:60:38:f1:2a:4d:af:f8:1e:7d:7a:d5:32:2c:
3c:c9:f1:ae:0b:52:9c:c7:f4:72:25:9b:7e:bb:92:27:88:db:
23:cc:00:3f:9c:10:69:4b:d1:e2:a6:53:ec:36:91:fb:48:54:
19:29:1c:fc:a1:ee:fc:c0:6d:2b:dd:0c:e9:c9:ca:fd:c1:c0:
ed:40:a6:db:45:f0:d8:25:5f:78:b1:96:c1:ce:83:f7:40:6a:
0a:31:53:22:6e:d7:a5:bf:12:0c:71:b9:f3:58:df:5e:5c:4d:
a6:a4:1e:10:f7:4b:95:12:0e:bf:41:a0:9a:b8:39:a3:97:69:
b7:cb:65:30:b8:bf:94:c5:f3:c1:33:9b:cc:1a:6e:62:50:45:
cf:7a:24:df:b3:7f:95:cb:a1:6e:76:17:74:2c:cf:f0:d4:52:
2c:f8:23:91:aa:e8:5b:62:31:cd:a7:cc:73:78:df:7d:27:16:
3f:97:08:d3:be:49:65:f3:92:01:28:8b:e6:ed:78:91:d2:4a:
60:d8:11:17:55:94:42:6c:71:9b:92:fd:cd:93:e4:9b:1b:a1:
68:bc:5f:5e:27:69:7d:78:7a:45:f3:22:1b:38:7e:a8:d9:d3:
52:af:6f:59:93:ee:22:03:fe:3a:e8:f0:c7:bd:ec:68:e7:dd:
e1:dc:03:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:07 2025 by rpki-client