Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier: ZHUkvL6800Y95JTltufs04h5XwB9QnukpOjE58MKEqE=
Subject key identifier: B1:EB:8B:C5:7E:18:77:19:D5:EF:50:B1:81:C2:89:0E:14:10:8E:32
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 0199FCC680320550A00F85F2CDA4B192DE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number: 1423
Signing time: Sun 19 Oct 2025 14:01:31 +0000
Manifest this update: Sun 19 Oct 2025 14:01:31 +0000
Manifest next update: Mon 20 Oct 2025 14:01:31 +0000
Files and hashes: 1: 1-pbn6Ub3y6IFfhatJXpFv2oIg4Y.roa (hash: otqMBUJ0t81q8O5ZwH5j1LnN11Nn61m+zKuZ8xsbQeQ=)
2: F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa (hash: Ib9TkfBhAWRiVd7E8+OAkowsQ7AwC9M2n6bdugTcuJM=)
3: _MYdCgDWaO6XB5gVesQLpQpeOag.roa (hash: nreKDXAy4j3D6W3Lae5rvKwQFMf1x+LsfYxvbzIyjhc=)
4: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: 3E0+7FBrMIZ/T+pFgGaQQRNysXZfum4fVlUz94/YKvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:80:32:05:50:a0:0f:85:f2:cd:a4:b1:92:de:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Oct 19 14:01:31 2025 GMT
Not After : Oct 20 14:01:31 2025 GMT
Subject: CN=b1eb8bc57e187719d5ef50b181c2890e14108e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:46:7f:42:b5:89:47:56:0e:15:27:75:c9:cf:
68:b7:b0:44:37:a1:93:01:82:a3:d2:3d:d4:9e:ac:
46:76:87:af:76:b6:9a:c7:cc:a0:5c:50:1c:3b:f6:
43:b3:32:ec:79:75:98:6d:c5:62:62:f9:74:81:12:
01:d2:76:43:dc:2d:ac:a4:3f:98:81:32:2d:b6:3f:
be:32:ef:b2:37:11:78:dc:4e:dd:88:db:7a:15:1e:
e5:71:d4:8a:e4:b9:f8:81:7e:50:12:ff:06:36:1a:
44:01:c6:77:7b:8a:fa:54:1b:19:3e:5f:1a:5e:e6:
8f:f9:4c:9b:29:6a:65:d3:3d:ac:03:15:24:b0:37:
94:93:2f:c3:1f:48:08:57:52:81:fa:6b:7d:7c:6a:
4b:a5:49:86:9c:8f:db:4f:8b:9b:21:b8:b9:62:23:
4f:88:f8:e4:4f:83:c9:75:74:f8:8f:2b:6d:b2:68:
0c:2b:74:88:43:20:a6:6f:d7:fc:a3:60:fc:30:91:
27:1e:e1:be:79:49:9d:5a:31:1c:82:a9:c6:8b:55:
55:60:2d:11:0e:bd:88:d1:b7:81:69:b2:01:2f:65:
d7:d4:e2:c2:0d:c7:0b:3d:3a:3a:2d:72:a9:71:24:
48:ff:41:a3:38:97:7b:0c:52:9f:64:0a:d4:87:9e:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EB:8B:C5:7E:18:77:19:D5:EF:50:B1:81:C2:89:0E:14:10:8E:32
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:42:9a:f0:b3:28:15:2b:51:93:30:72:24:01:b6:b9:e7:b3:
ba:70:af:86:a9:a2:b8:6d:4a:3e:85:0e:96:e4:0e:c2:38:ae:
bf:53:8d:00:c8:47:df:8f:f2:ed:1b:aa:3a:0f:ed:3f:cc:5a:
40:84:5b:27:a5:6c:f5:38:40:8c:8a:56:fe:0e:54:2c:ab:43:
c1:41:62:5f:e5:dc:19:43:db:42:e2:a0:02:67:86:37:2a:ae:
13:f0:cd:44:10:28:85:28:d2:6e:8b:86:b0:c8:32:69:b1:34:
d9:cd:18:7a:2c:f7:4c:8e:97:52:cc:28:b2:9b:9b:ab:4b:4e:
22:4d:18:af:a8:47:60:e1:70:30:d7:44:93:fa:b5:5b:62:07:
fd:4a:76:f4:0d:fd:ce:a9:ca:40:2a:fa:d9:86:44:33:f4:47:
9f:55:d5:ae:a4:77:c9:c0:a1:85:5f:35:58:d5:76:66:d3:e1:
63:cf:58:61:cc:ef:b3:8a:fb:27:ef:14:dc:5b:13:76:a7:c1:
e2:97:b8:ee:b5:09:dc:01:80:33:f6:03:f4:64:d7:10:82:ba:
50:57:ce:d4:ea:c4:ae:dd:b9:24:7a:2d:e7:89:35:cd:a7:45:
e0:3e:74:da:b8:0b:5c:38:4e:4f:9f:f3:80:e3:32:0e:6f:bd:
53:2e:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:29 2025 by rpki-client