Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
File: hNHcYT105sMty5gUzhJr1htSqqc.mft (raw, json)
Hash identifier: coJbpnfnwxVkSBKdFyW/YV+3RRk0qFs1TBzL66SREhY=
Subject key identifier: E3:48:F5:B1:1E:01:4A:A5:3C:81:C0:8F:10:CB:D8:AF:28:B5:C4:AF
Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
Certificate issuer: /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Certificate serial: 0199FC8FAEBD06AF2B6D20B1E95570AA4A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: hNHcYT105sMty5gUzhJr1htSqqc.crl (hash: m558oAOvsABupLt9MF/5Ar3j+EEVdXW21Qyjq4kZ+bw=)
2: qsewLApSJANcPGT3dklt2zSF2HU.roa (hash: bPAVtg7OfBYMMJkAVdTPdE+2AmcR0ogISjqN5CtNEqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ae:bd:06:af:2b:6d:20:b1:e9:55:70:aa:4a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=e348f5b11e014aa53c81c08f10cbd8af28b5c4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:d7:99:9d:19:d9:49:ba:e3:b0:27:0a:b3:
c7:ea:04:6d:bb:cf:e6:dc:79:5d:76:f2:03:29:4c:
96:46:24:ee:4c:bf:f7:5e:dc:0c:21:1e:f0:6e:8d:
3b:f3:75:01:2b:33:96:ed:31:a8:07:71:b1:e5:42:
2d:f5:e0:7e:9a:c7:be:0b:01:1f:d9:b3:54:45:17:
3a:a7:d6:95:00:05:57:8b:ad:31:d4:f9:0d:9b:30:
65:6f:51:c9:21:f5:1e:e9:e8:7f:98:c3:47:19:33:
c1:3c:b3:82:8d:53:a3:e1:32:02:d7:6c:a0:b9:4a:
27:61:1a:15:4b:ee:0b:26:0b:55:57:b4:9f:48:e6:
ad:f1:7a:db:07:d1:b8:d3:85:bc:7e:17:0a:26:22:
90:b7:d4:fb:4b:14:93:32:6c:a9:cd:a1:78:23:8c:
b1:f8:7b:69:fd:bc:84:42:a8:83:38:09:93:11:b7:
3a:5d:45:21:6c:7d:e7:a9:c2:c8:ff:8e:49:66:40:
16:8f:e6:c8:f0:53:ec:60:ea:08:f8:07:5b:e7:22:
34:b8:69:e1:98:86:cd:23:5e:60:7e:76:08:0c:3f:
29:fd:81:a0:32:6f:f6:aa:cb:54:32:6e:0f:57:24:
52:a0:5f:d7:01:d8:53:5b:cb:59:7b:3e:e0:fb:3d:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:48:F5:B1:1E:01:4A:A5:3C:81:C0:8F:10:CB:D8:AF:28:B5:C4:AF
X509v3 Authority Key Identifier:
keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:33:46:72:5d:6c:98:bd:54:e6:fe:53:fa:bc:43:79:ff:90:
8e:fc:51:0c:6b:6b:cc:f4:73:69:39:31:1e:93:d2:03:b0:ac:
2d:aa:e1:44:6d:3e:f2:05:f5:1b:09:e2:2f:ac:60:9f:b7:36:
2b:f5:4a:90:69:3a:57:c9:e0:bc:a1:6d:d0:d5:70:70:70:15:
6b:f3:15:86:2d:ce:f0:46:02:6e:93:69:d9:b4:15:b7:de:e7:
a4:36:68:5f:92:f4:4f:e7:2f:73:06:14:95:1f:80:6a:c8:0d:
fd:57:84:f3:fa:88:79:7c:39:f1:ac:c6:0a:00:76:9d:fc:c5:
30:87:0f:5a:4d:90:88:d7:3b:50:6b:6d:a7:7f:30:6f:b2:3c:
96:f7:8c:12:33:59:3a:bb:da:68:a5:19:fe:62:9e:76:cd:ef:
82:e6:bf:62:5f:e9:65:b6:f6:76:2b:4d:d1:5a:cf:58:df:78:
fb:ea:33:e2:e2:52:93:85:64:6a:2c:a4:7f:98:5a:9d:a8:80:
7e:15:2f:5c:1b:1a:80:f8:b1:8e:9f:b4:b9:65:bb:7a:66:7f:
ed:7a:11:b7:c8:81:d0:36:29:5e:94:ad:11:f2:10:cf:38:b9:
d3:59:d9:ed:79:3b:fd:a7:8a:c4:3c:d6:e8:ae:5e:da:53:fd:
89:78:3e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:58 2025 by rpki-client