Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File: h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier: WSMiyzPgMnY6zyuUAXmY+G9V8TDyOuXWK7UVZsZYnmA=
Subject key identifier: 84:D7:D6:8D:CB:10:51:70:C8:22:B1:C7:66:69:2D:3E:DE:BA:FD:B7
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 0199FE7E04B6842745321F258FB8857ACE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number: 16F4
Signing time: Sun 19 Oct 2025 22:01:35 +0000
Manifest this update: Sun 19 Oct 2025 22:01:35 +0000
Manifest next update: Mon 20 Oct 2025 22:01:35 +0000
Files and hashes: 1: BpGdK4vNgugH_zIwdKpTLTonzFI.roa (hash: XCtnPAQsPAejFAsLvLkAMfASQaAA0TQU3hCkuPs7vLM=)
2: MTIEPm-UTrRJO5GkIDAlc0UbzLQ.roa (hash: nVeKeAW6vJuUEVgfnDWMk7tY9g53T2JINJDassyHDH8=)
3: XOmOBh50cvCvJmnFjaJhaHYW2sE.roa (hash: 6F6wNjub6rC7wNAaFOeBE6JJ3w2cU7C6GJM4bNB9ZQQ=)
4: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: LQQuo0J1/aCvot2KaGmPstxP0bgt7dcR9cOLSfTU4EE=)
5: viZJ1ILrK-Lhvo6EpJnhGu2o9Q4.roa (hash: VBEvk2C209Y5tb0FL9tK/NrEWGQ6MCpm2RIBK/aQkDU=)
6: yXMAz21dFW6Sf1HAb5KDTn2Yy0g.roa (hash: dMxwivy3WoBvzsdqovQyIDGqZ1EWhn2L/4sgtoX9AUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:04:b6:84:27:45:32:1f:25:8f:b8:85:7a:ce:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Oct 19 22:01:35 2025 GMT
Not After : Oct 20 22:01:35 2025 GMT
Subject: CN=84d7d68dcb105170c822b1c766692d3edebafdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:bf:4a:2a:a8:83:c8:c1:b7:71:78:b8:e2:
dc:8f:7f:af:75:69:a9:16:7e:43:01:1d:b3:3a:80:
d9:e5:f4:33:bf:ca:30:11:db:a1:b0:24:fb:39:09:
3c:61:0f:3c:d4:9b:48:ae:ad:95:78:a2:d0:ec:d8:
0d:33:f7:72:95:25:5e:11:ad:0f:7f:8f:c2:d0:ce:
ca:8b:2c:22:9b:6e:ee:00:e3:c5:56:be:1c:c3:db:
cf:2e:df:66:22:17:cd:e9:57:49:3d:0e:29:80:1f:
7d:c2:ec:42:1f:c1:cf:98:9b:e4:59:41:b3:f3:fc:
c0:a9:78:2c:00:09:d5:aa:96:a5:0a:e9:85:34:c7:
e2:a4:4a:48:4b:a1:97:00:54:b6:bf:e8:e7:1b:56:
07:ca:2e:82:f5:33:7d:af:89:8e:a8:3f:58:90:ec:
45:ea:18:b4:5f:09:1b:af:e4:6b:7f:8e:02:e1:67:
51:56:81:b9:9b:6e:cb:44:bc:83:7c:2b:66:ba:7c:
01:a6:f7:f4:b7:40:97:46:9b:57:59:8c:b6:8d:ec:
8f:5f:d1:4c:66:58:ba:bb:2f:53:ef:fb:7e:16:12:
28:d3:28:9a:b4:01:c8:f1:4d:04:f3:bb:ac:c5:d1:
16:c9:d8:a8:78:83:1f:8d:77:c7:3d:db:7c:a0:39:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D7:D6:8D:CB:10:51:70:C8:22:B1:C7:66:69:2D:3E:DE:BA:FD:B7
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:44:0c:fe:d6:f7:04:83:e7:e2:76:5a:76:f6:56:28:29:b7:
e6:95:43:66:87:f2:2a:01:e8:10:e6:3a:86:f7:f3:ce:64:3f:
50:67:a7:84:b6:f8:8e:a0:58:9f:32:7c:14:05:91:03:43:45:
10:f5:4c:e5:8e:1c:40:92:a1:61:8e:6e:48:3f:bf:f2:98:ea:
01:ca:5c:6a:6b:bc:21:8f:3f:30:aa:ac:ae:72:85:d2:f1:25:
e0:77:21:6b:23:5c:9b:27:35:37:2b:72:03:da:8a:d8:5d:4f:
b7:43:a2:5a:bb:84:5b:39:df:da:3e:d7:8c:89:cd:be:d9:42:
e7:e2:6b:70:ea:d0:ef:91:c8:33:40:cf:51:24:ff:dd:af:72:
e9:c6:e8:7c:4d:8f:6d:c0:d5:8c:b7:a5:c3:af:bd:b9:0d:87:
a2:fd:a4:1d:7b:c2:54:b6:d1:64:94:e5:bb:28:fd:df:54:7a:
e9:5b:e4:a5:ba:6c:7a:b3:de:33:1d:b7:5b:52:0c:4b:32:43:
f8:54:be:fb:30:45:fc:00:24:00:5b:c8:d7:02:64:f3:f1:43:
51:83:46:7a:d2:f4:73:6c:1b:1e:5a:0a:8d:ab:50:9f:83:50:
7d:a8:96:b5:2f:39:c6:00:8e:4c:00:85:7b:3f:67:0e:f0:76:
6d:44:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:01 2025 by rpki-client