Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File: hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier: ytaE4TzJk2hJX7v4WYLgzPseC45pEsvne8kju/PJnCg=
Subject key identifier: 86:93:E8:9A:8D:53:6C:3D:DF:43:6F:E1:E1:7D:FD:CF:68:9B:42:D7
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial: 0199FBEAF3AB9A179A7665E27559A807633F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:42 +0000
Manifest this update: Sun 19 Oct 2025 10:01:42 +0000
Manifest next update: Mon 20 Oct 2025 10:01:42 +0000
Files and hashes: 1: TYsIS3O-zzJUM31FOE8V5LwUjck.roa (hash: PgdOwzc5CsTmGlgxhk4B6gx5Y87krg/eEL18bNqE8Rk=)
2: Zqcute0EJxNZqsLIYM5IZaAu0eA.roa (hash: Ka5B3hGdb3O+/SiQ/oll6eB0Rldz6LRmTl/iQ6A8Wb8=)
3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: o6ZQbnwuvUx8LtF5UUtqd0I2LesU6zgCDD7DJ03N3VY=)
4: pruyBDp_cEEXKvqRx1kQTDgs6oI.roa (hash: noTc5adRBPeIH3/LBjn/ftfA3EYuQEQb7IQr66+/vn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f3:ab:9a:17:9a:76:65:e2:75:59:a8:07:63:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Validity
Not Before: Oct 19 10:01:42 2025 GMT
Not After : Oct 20 10:01:42 2025 GMT
Subject: CN=8693e89a8d536c3ddf436fe1e17dfdcf689b42d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d9:b0:a0:c2:57:b1:3b:b0:1d:d9:d2:32:3b:
4e:8d:51:d4:de:ed:60:c6:e9:1a:b8:87:eb:ab:dd:
69:ff:43:b3:e5:88:5f:89:f2:40:d1:bd:78:84:27:
9d:a6:a9:56:b5:d7:28:f3:0f:3e:47:93:8b:a4:b7:
68:94:79:05:56:53:ee:37:84:42:1f:be:83:e7:e4:
ad:74:a7:1d:23:1b:7f:cd:ed:93:8b:15:f2:91:23:
85:7f:97:2b:36:ce:32:8d:c4:cd:64:9b:12:ee:75:
02:5f:f8:92:d2:6c:46:b9:53:62:69:9a:9a:c6:97:
10:d5:c4:ba:f6:3a:98:d7:ad:47:b7:ef:1c:87:d2:
8a:aa:48:21:f9:67:15:16:52:3f:f3:b8:6c:aa:ec:
bf:22:b4:2b:bc:7d:7b:41:13:d6:8f:25:fa:77:31:
96:39:ef:dd:9a:eb:21:72:5c:fd:c7:cb:69:d9:ec:
a8:c1:0b:f4:a2:3b:b2:5b:f8:d8:86:9b:43:43:8e:
74:ec:5e:d1:ff:d0:df:c8:a5:a8:32:a2:1c:bf:50:
9a:e0:a8:34:77:3f:22:67:4d:69:21:1d:8d:6a:d8:
28:2d:b3:a9:c1:f0:68:d0:71:27:01:c2:cd:fc:84:
46:43:0f:16:c8:34:2b:60:2c:cc:0c:9d:be:8b:18:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:93:E8:9A:8D:53:6C:3D:DF:43:6F:E1:E1:7D:FD:CF:68:9B:42:D7
X509v3 Authority Key Identifier:
keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c9:8d:38:d4:58:ff:ab:04:88:f4:27:43:fb:7d:f2:c1:4d:
09:ea:34:7f:23:29:54:07:d3:c7:77:c1:eb:68:cb:a7:b4:c2:
13:73:9f:b2:4b:44:50:5a:c8:6e:cf:d5:34:ac:4b:19:68:85:
43:d2:26:a0:71:26:a0:4e:f6:db:c9:d7:56:a1:55:63:8c:cd:
a4:8e:2e:67:0b:63:94:73:9a:59:bb:5d:04:4e:43:13:81:e0:
90:a3:71:b5:0f:11:79:26:5e:00:86:af:b0:48:07:9f:40:d4:
be:17:16:14:5a:d8:8f:e2:e9:9c:ef:e9:00:96:19:27:05:f5:
34:3f:15:23:d2:c1:eb:e8:4d:24:f0:fb:55:7d:08:ed:b7:60:
d9:27:0c:8c:f9:3e:71:55:54:6a:9c:06:92:d3:1f:67:e0:7a:
f6:e5:44:ef:aa:e5:38:26:a2:05:6a:83:cc:d0:8b:df:82:92:
e3:21:cb:18:c1:f6:e2:7e:c4:56:dc:f1:f1:b3:20:45:53:65:
37:82:11:42:c5:b0:aa:f7:a4:24:44:09:ba:99:55:08:23:ff:
ee:82:7d:5d:de:66:17:4c:be:c1:f5:71:a4:ba:89:a0:0d:d5:
50:7c:9c:98:8c:ab:1c:b2:62:de:4d:3b:70:16:6a:ff:8b:a8:
e4:b7:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:42 2025 by rpki-client