Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier: 6vYRDxM2Kg9B6Orjk20vVIrQKmHijXfCSY+ZFktTpAA=
Subject key identifier: 4A:64:53:09:9A:90:6A:06:97:33:D4:50:12:57:3E:E4:E9:93:26:19
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 0199FC21C3AF704DA3211CAE86EC7C19EC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number: 16F4
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=)
2: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=)
3: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=)
4: gXTQ_DqBbvWK4zOCraUhqqUl7Zk.roa (hash: qOt1Z426R0Ot2Dml4Qmnhu+irkAmbjEf1aZkvn7kIfc=)
5: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=)
6: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=)
7: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: BNQmkB88f0MZEUanVO9MTOKxjaFGNXDVzq9yfp9G0IQ=)
8: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c3:af:70:4d:a3:21:1c:ae:86:ec:7c:19:ec:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=4a6453099a906a069733d45012573ee4e9932619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:21:34:a7:9b:02:6d:98:29:d6:da:8b:5a:
5f:0d:86:01:d8:e0:49:52:7a:1b:46:56:37:89:a3:
6e:fe:7a:d7:4b:b1:7f:53:21:2c:7f:25:24:b6:b8:
a9:b4:40:3b:12:5c:86:38:14:0c:ef:d0:2d:18:3d:
23:66:c8:2d:38:9b:ba:c7:1a:da:ed:79:26:dd:7b:
8d:dc:a3:d7:6a:4c:53:43:8c:16:d2:e7:df:5b:cf:
ea:6b:ad:e6:db:e8:d6:b3:e8:48:38:c5:0c:ad:e9:
a8:eb:92:a0:c5:dd:7d:c1:41:ac:b9:76:a9:4e:7d:
ee:42:6c:74:f8:cf:ea:e6:45:5e:01:15:e1:64:64:
a6:4d:9f:b1:a8:25:d4:b6:7f:7e:7b:47:c1:58:9c:
bf:04:d6:0f:c3:7b:ee:ed:e7:c5:ca:b8:d6:38:6b:
89:6a:ff:fc:6b:99:4c:f3:6b:ae:17:ab:8c:6c:52:
f8:75:35:d0:f8:90:e1:7c:1c:46:e1:b7:cb:08:08:
66:3c:8c:c3:99:c7:02:73:55:4a:21:73:b2:07:f6:
06:8b:b3:3f:99:31:ce:9a:24:ae:3b:ca:57:bf:ff:
4b:4b:86:3c:7a:61:82:4c:8b:a1:46:9e:b2:e7:37:
9a:b3:6b:91:db:07:92:ce:de:05:c3:53:8b:c7:34:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:64:53:09:9A:90:6A:06:97:33:D4:50:12:57:3E:E4:E9:93:26:19
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bb:eb:00:93:52:42:12:2b:8e:eb:e7:d8:7d:c6:40:dd:03:
45:ee:b8:cf:4f:34:39:23:63:e9:c9:5a:2e:db:1e:43:03:53:
54:a6:64:15:1e:12:cc:e5:88:df:5c:46:e9:e6:d0:76:22:86:
30:f2:86:43:22:9b:fc:a1:ed:3c:e9:44:05:3e:1e:55:fc:1f:
33:96:04:17:4b:cb:04:54:55:81:ea:e2:0a:17:44:e4:17:5e:
3a:16:82:67:bb:9e:a0:3f:9b:3e:a2:f9:a6:a1:36:0b:f7:92:
52:f7:87:84:bc:e5:11:4c:84:37:fb:10:d5:49:68:4c:17:79:
5e:aa:6b:e2:fc:8c:09:20:aa:93:67:8c:7c:9f:a9:dc:69:b9:
2c:2a:e7:a5:b5:7f:7c:4a:58:c7:e6:3f:39:be:4c:b7:b3:de:
52:bb:7e:12:39:4c:d7:98:5f:fb:ea:3f:0a:a5:59:95:b9:6e:
d2:58:f2:ae:74:0a:0a:7e:32:02:e6:57:0a:08:b3:6a:62:0d:
93:0b:88:a7:7d:c1:37:9d:c6:49:50:55:6b:54:93:54:8f:b4:
7f:cc:1f:47:72:50:74:d0:c3:91:82:41:30:95:c6:32:05:21:
bd:f3:e7:c5:62:41:03:ef:7f:75:41:dd:fc:dd:7e:56:d5:8a:
87:33:5e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:12 2025 by rpki-client