Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: 84J/swi0AyRxoIdPu0TykKejIzHXhVLbbVQxwZaOigA=
Subject key identifier: 23:06:05:04:04:AD:A6:9E:2E:4D:E4:B1:49:32:23:86:3A:A6:74:BC
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 0199FA6A663A3E1BBFF26D8F298E9AF48A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 03:01:40 +0000
Manifest this update: Sun 19 Oct 2025 03:01:40 +0000
Manifest next update: Mon 20 Oct 2025 03:01:40 +0000
Files and hashes: 1: S-FqJ5rHJScfH16THhv-Awb7K-Q.roa (hash: qZ4G5Ir5+2IF3qwAQCRLSDxYrzLLeDBCxC9VdbkE9zU=)
2: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: MwB+N8NmtmYUxNd3nzYtw1prTWOuF659oaWuuIG/WK8=)
3: ie3Ij3d9SbHwlFZKN1iAPlTDPF8.roa (hash: LDgmzuKBYv7wHEv9dhDlxCP+uQjNRE91nisvU0AfRTM=)
4: pWgX5JiF8p7IJPd1N7EyBTiovEk.roa (hash: b0ArhWGdNOXnp+wzwnp1QcD9Bn6HmXnGIfByPMG51fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:66:3a:3e:1b:bf:f2:6d:8f:29:8e:9a:f4:8a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Oct 19 03:01:40 2025 GMT
Not After : Oct 20 03:01:40 2025 GMT
Subject: CN=2306050404ada69e2e4de4b1493223863aa674bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:ab:e4:27:ac:f4:4f:c4:c0:95:85:c9:f9:
36:97:02:14:1f:d1:0e:7b:3c:17:b5:1a:92:66:7f:
bf:0f:18:b1:61:c8:19:e3:3a:1e:e1:95:4c:b6:fa:
c2:9f:38:83:82:06:62:2c:d9:5e:88:06:fb:cd:59:
3c:10:a3:fd:17:62:79:79:91:5d:30:78:93:40:6f:
3b:fe:cc:ea:8f:fc:3d:bd:1f:c1:bd:7a:fc:fc:81:
f1:e0:b7:67:66:c8:5a:72:0d:d8:0e:69:48:f7:1c:
e7:d0:4e:0d:a0:38:df:4b:44:bf:62:ff:73:3d:99:
d4:fa:47:d8:bd:52:66:0b:0c:1b:d4:bf:ff:46:e1:
f2:e5:b6:02:d5:b6:40:a9:f4:66:1b:75:92:01:77:
49:05:f5:09:13:2d:fd:cf:ac:fe:47:02:26:db:3d:
d0:6d:ad:fa:ef:72:05:7c:3f:c1:7e:6f:fb:82:45:
5b:dc:17:22:b9:d2:08:12:e6:70:de:ae:a6:01:5f:
ea:fe:e1:a8:56:00:77:6d:2c:d7:2b:52:b0:73:6e:
c1:b7:72:c9:68:ce:57:bc:db:69:fb:11:b0:85:a1:
09:89:2d:61:e6:9f:2f:02:11:b3:c6:b9:cc:a3:e7:
c7:25:4f:a9:c9:e5:f9:c1:20:7a:0f:d2:c7:f3:b5:
3b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:06:05:04:04:AD:A6:9E:2E:4D:E4:B1:49:32:23:86:3A:A6:74:BC
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:04:b0:ff:ee:c1:20:4a:53:70:59:ff:47:5d:b1:ec:18:78:
e3:47:b5:ab:ed:e1:03:01:6a:81:b7:12:f0:8e:e5:61:6b:7a:
18:0e:82:c2:5a:ca:24:ca:52:70:7b:11:2b:ec:81:e6:fd:26:
42:80:91:63:c5:e6:6f:a9:61:74:7d:d7:8a:44:f3:2d:db:06:
50:f3:26:a2:5a:cc:67:bb:6d:81:02:53:3e:8b:52:4e:8e:44:
c1:05:9a:f8:43:68:8e:ef:f9:04:ac:d7:c8:b8:05:75:ee:5c:
7a:fd:17:e1:32:cd:50:f9:a8:c9:c3:93:46:5f:a0:b4:c0:97:
75:ae:dc:32:4c:56:05:0b:41:be:be:a7:ae:9c:ca:f9:28:d3:
2a:b2:fc:bb:d8:b6:92:8f:7c:17:93:37:75:9a:76:ea:2b:ce:
4a:fc:3e:8c:bb:fd:04:f6:81:cf:c9:57:75:d3:fb:b4:2f:15:
29:62:68:10:cb:42:20:a8:17:84:d0:9e:d0:03:ab:59:c7:90:
81:7c:0e:af:c5:25:10:ea:a6:30:a4:7d:19:c8:a9:93:74:c8:
70:23:a8:25:3a:96:6f:ed:2d:16:d0:50:d5:7f:d0:90:3d:bd:
4b:92:40:3d:d1:0e:4d:51:ce:ea:42:32:82:8a:6c:c4:6a:a9:
60:03:32:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:02 2025 by rpki-client