Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier: MHzdFZstsz/T8vpgZvfXIz1ffUYuJbfyRUY6aXGWG8Q=
Subject key identifier: 45:8A:69:68:4A:EB:5D:FD:AF:60:34:2C:86:E2:6B:95:B5:EE:70:3D
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 0199FCFDAE3B0F88D3176E5FB80FEEE5837E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:47 +0000
Manifest this update: Sun 19 Oct 2025 15:01:47 +0000
Manifest next update: Mon 20 Oct 2025 15:01:47 +0000
Files and hashes: 1: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (hash: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=)
2: Y2TFuYLjHOh19Nsn9IXR0BXi0GA.roa (hash: EGQLXveu0rNxAJdauUxs2BGnjI8o9tZmq21wSdM7BEk=)
3: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: IAPWjP7OWYVEVOVFluZVnNLm4Kt4znwndpbD8zUo5Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:ae:3b:0f:88:d3:17:6e:5f:b8:0f:ee:e5:83:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Oct 19 15:01:47 2025 GMT
Not After : Oct 20 15:01:47 2025 GMT
Subject: CN=458a69684aeb5dfdaf60342c86e26b95b5ee703d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:2c:53:07:fe:8d:2d:f7:42:ac:1d:45:a6:
70:22:ad:9d:0b:f9:d3:f7:69:c4:7c:a0:87:2a:82:
12:e8:8f:d1:e0:ae:39:39:65:e1:44:a5:84:a0:ba:
89:4a:61:7a:18:88:e1:02:26:d4:51:84:f1:e9:ef:
d6:0a:98:d0:2c:11:aa:b9:4d:c7:13:66:e5:33:72:
52:12:40:74:47:d1:b4:21:90:35:cd:59:03:6d:68:
ff:ff:63:b1:e5:e5:83:8f:51:a7:cb:dc:6a:1f:11:
cd:10:51:c7:ac:19:80:86:a4:63:98:82:aa:8b:73:
15:6b:55:25:1b:8b:79:88:a4:05:8c:f1:ae:ea:85:
95:54:73:d8:97:40:68:ca:4e:41:1e:65:cb:0b:fe:
54:af:67:46:f9:39:8e:86:d1:a9:28:73:ad:70:66:
97:95:43:44:ca:62:07:4e:39:5a:26:dd:b9:cb:fd:
af:ac:2e:8a:da:eb:a0:25:92:57:d5:2a:ca:c5:37:
2c:85:87:45:7d:d4:74:11:14:e5:6b:2d:92:08:d4:
41:1c:7a:fc:3c:5b:ae:d9:af:b8:c0:71:bf:14:9b:
a4:dc:0d:70:2a:5e:49:5c:f8:4e:58:1c:f8:d0:87:
b6:0a:5a:7e:3d:8a:9f:4a:dd:bb:0a:5a:02:c3:29:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8A:69:68:4A:EB:5D:FD:AF:60:34:2C:86:E2:6B:95:B5:EE:70:3D
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ce:db:55:f9:69:9b:f2:c3:5a:75:d2:ae:96:61:92:3b:e2:
5b:4b:c6:82:7b:c5:d6:1d:6e:28:e1:54:4c:c7:f2:a3:01:4c:
2c:77:79:f2:f9:f5:f9:75:bc:91:1b:2e:e3:ec:45:8e:f0:de:
ed:4f:00:7e:0e:2b:f7:e5:5d:e9:5d:98:0f:b8:65:4d:c2:63:
2c:e6:16:0f:dd:4a:df:52:0c:07:37:6e:f8:4e:c5:8e:b0:36:
a7:34:9e:c8:8d:6a:80:03:28:1f:f3:74:2f:69:e8:0f:3b:0c:
1b:7e:4e:7e:f0:fc:3e:85:48:4c:23:19:58:69:a8:19:d1:86:
0c:9d:72:31:18:90:f6:04:31:b1:a6:3a:a3:f8:79:87:c0:7b:
de:b0:75:87:19:1e:ec:e1:65:a0:53:f1:53:58:92:5e:77:33:
23:cf:96:61:ec:fc:fd:bc:44:cf:03:f6:b9:4b:1d:aa:74:12:
ea:ae:bc:a4:72:87:53:77:56:b0:ae:45:fc:43:ee:22:f0:cf:
37:c7:b8:06:f8:e6:b9:01:38:fd:fe:06:a7:15:fb:08:67:45:
16:50:87:91:87:06:2a:3e:7e:12:1b:66:9f:f2:e9:58:e7:ad:
a1:c1:c6:58:39:72:39:dd:1a:24:22:1b:11:6b:56:50:1b:97:
e3:d0:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:28 2025 by rpki-client