Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File: hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier: f9fZUTLfSHjRfaWGxQZopsF61QqfkbR6MDxdAc+QGsw=
Subject key identifier: D2:1B:25:7B:72:47:D0:C9:86:F7:27:17:73:A0:39:1D:50:AE:DC:98
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer: /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial: 0199FCFD87D177ACB514078ECC81E90583D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 15:01:37 +0000
Manifest this update: Sun 19 Oct 2025 15:01:37 +0000
Manifest next update: Mon 20 Oct 2025 15:01:37 +0000
Files and hashes: 1: 4OM3TuNkPVdmDzic95IjszBtoQA.roa (hash: dt9wokazgTd6EaqSSQPyaNUyIvDqSau9vaZZ+2FBCWU=)
2: POoeZ9JcIrFPhJTeWPU8jpK_vAc.roa (hash: ToulLGENoP/7yn7Jgz/qlwSorKjiORy0BAk4ycS9VNQ=)
3: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: aMlGovRCWuMM/oji6+E7zJD5w/pva33tumsmYu0x5gI=)
4: qeftSyRSXmAOVqQRtKtHutbh0zk.roa (hash: VtULu7reN7PL4/u/6gxMFu7joJNl642+iClkA1K3FD4=)
5: tISHEAHtpJDdCS4l3Yug27J3cB4.roa (hash: MfAYQ6HspqhfS9luXY6/Ub4o3vZ2098dY5v7aRHURxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:87:d1:77:ac:b5:14:07:8e:cc:81:e9:05:83:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Validity
Not Before: Oct 19 15:01:37 2025 GMT
Not After : Oct 20 15:01:37 2025 GMT
Subject: CN=d21b257b7247d0c986f7271773a0391d50aedc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:94:7b:4b:ea:6f:d8:d7:a3:31:52:1e:dd:
46:53:fb:7e:50:4b:c6:6b:d7:54:86:ac:8f:ab:8b:
d0:ee:5c:12:46:7f:2c:ee:e5:95:e9:49:1a:5e:fd:
db:ca:6b:4a:49:ac:6f:62:2a:eb:97:2a:5b:97:2b:
c2:44:7d:2d:18:03:83:ed:88:3c:e0:3d:b5:fa:f4:
ea:8f:3e:bd:bb:c1:f7:e9:a1:c9:ea:70:8c:c7:38:
7a:4f:6a:c2:6d:7b:5a:56:75:c2:63:ef:db:87:68:
8e:ca:f6:a4:73:68:df:f9:c8:89:07:c6:28:62:6a:
15:32:4f:ca:56:00:d2:84:75:3f:9b:81:ac:9c:a7:
ab:42:9c:7a:b9:09:5f:d7:55:49:da:40:64:f9:62:
59:6d:fe:26:a1:e6:a9:3c:a9:91:1b:2d:5e:d6:5a:
a8:be:c7:1c:af:c4:2d:cd:88:ca:be:a6:69:18:40:
3f:78:5e:f8:0f:40:82:8b:84:2f:84:e2:33:7d:8a:
d8:f3:22:1f:5c:88:2c:e8:e2:e2:5a:01:c6:7e:00:
65:ad:a4:2a:fd:67:8d:37:d1:a5:55:54:dc:6c:23:
2c:a4:0b:3e:02:eb:72:7e:29:e7:96:f6:11:85:f5:
71:f6:70:db:71:df:f2:60:a4:2c:3a:60:63:82:e0:
39:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1B:25:7B:72:47:D0:C9:86:F7:27:17:73:A0:39:1D:50:AE:DC:98
X509v3 Authority Key Identifier:
keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ac:57:00:1d:3e:75:62:76:c3:3b:8b:a8:5f:b0:83:0f:7b:
d6:4e:68:ea:0d:f6:72:f8:d3:8f:49:7d:7e:24:fd:e9:6e:93:
df:a6:45:f9:eb:0e:51:d8:51:7a:a5:7b:48:5e:cd:7a:84:e8:
81:06:40:70:4d:10:e8:05:fd:7c:75:ba:95:07:55:88:0b:e9:
b5:b5:b9:7d:d9:1d:eb:c1:bf:bf:ec:07:eb:17:6c:46:bc:28:
9f:8a:cf:b6:b8:94:90:a7:da:53:69:b6:93:1f:2a:9e:f4:4c:
df:36:ce:76:82:cf:9d:3c:32:01:c6:83:3f:7c:68:0b:d8:3c:
d1:5d:b5:23:57:39:76:c5:3e:ad:6b:99:a0:64:e5:6a:49:43:
d9:12:91:f9:87:97:3f:d1:e3:63:9e:6d:06:35:72:69:61:d1:
1e:c7:ca:69:bc:26:47:0f:15:b1:27:13:ed:12:c3:8f:29:bf:
a7:d6:c3:ad:e0:85:2e:9c:f8:c3:a3:de:18:9e:ee:0d:76:98:
ee:9f:7f:fa:4f:1f:e5:61:cd:a0:5f:5b:bf:34:4b:2f:a8:de:
e9:70:3f:0a:c6:af:e0:d4:64:8f:92:3a:2f:fc:d7:0b:76:42:
b5:a8:46:29:95:5b:3f:12:58:35:b0:a2:28:06:d8:67:f7:6e:
9a:75:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:55 2025 by rpki-client