Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: uAOJH12acfoLkibfY366Ef6YxzXl2YINcpbA48RpSzo=
Subject key identifier: 40:45:18:CE:E5:40:D6:5C:5A:5F:63:28:3D:D9:33:5B:57:D4:44:8A
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 0199FCC6130D0C8552494FC2D53EDD78AA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:03 +0000
Manifest this update: Sun 19 Oct 2025 14:01:03 +0000
Manifest next update: Mon 20 Oct 2025 14:01:03 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: qFiCSCqyAE+1A7FY7TiefeitiH10mjJ9TE4gSISMNmQ=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:13:0d:0c:85:52:49:4f:c2:d5:3e:dd:78:aa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Oct 19 14:01:03 2025 GMT
Not After : Oct 20 14:01:03 2025 GMT
Subject: CN=404518cee540d65c5a5f63283dd9335b57d4448a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:51:b5:21:64:51:be:4e:72:f1:31:16:8f:
f5:10:0f:61:da:20:7e:03:dd:d7:2f:95:cb:58:54:
e8:6e:82:c1:67:3e:5d:c7:78:27:8e:5b:53:9c:42:
99:7a:65:d2:0b:cd:80:4a:f2:62:8e:e7:81:4c:8d:
9b:49:e4:90:58:ad:51:89:b3:47:21:93:02:4b:65:
72:06:b6:26:ec:70:31:15:f8:f8:98:48:51:63:a6:
3c:e7:89:e2:3a:e2:6f:ee:7a:20:ec:a9:63:d4:93:
b6:10:0d:b9:34:69:57:ca:2e:dd:43:6f:cc:96:1b:
9f:3a:c8:ff:9a:d9:02:75:e1:c8:2e:01:1a:f8:6a:
14:b2:07:87:f5:74:99:0d:ce:56:ae:76:1a:1a:9c:
32:30:8b:2c:24:05:9b:3e:05:6a:fc:4e:bb:70:21:
38:7d:d6:4f:8f:96:b4:2c:b2:bb:2a:73:2d:36:65:
5c:ab:b6:c5:af:fc:0c:c1:b4:0e:80:6f:89:fe:6c:
9f:db:71:65:07:d0:9e:34:99:b4:46:1b:fa:b0:63:
89:ec:f1:af:7d:03:1c:43:68:a1:10:95:1d:eb:f5:
21:12:35:f6:28:ac:1b:73:9c:96:71:58:e5:31:2d:
46:a8:b3:15:d0:8f:68:2c:c9:9a:20:0b:a0:9d:c5:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:45:18:CE:E5:40:D6:5C:5A:5F:63:28:3D:D9:33:5B:57:D4:44:8A
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e3:af:a8:82:f4:1a:4d:14:95:32:b8:f1:fc:aa:bf:ae:f4:
28:19:46:de:9e:92:24:eb:e4:14:7c:80:0a:85:31:8d:81:1e:
f7:a9:3e:94:1b:4f:ff:4b:69:31:33:69:60:ec:9e:df:69:ab:
e3:85:62:7f:59:e5:8e:e5:88:ea:08:47:2c:c4:bf:72:84:01:
74:97:3e:52:05:32:01:63:57:48:87:f7:96:47:3e:f4:ab:bd:
01:9b:6f:55:50:20:0f:05:5a:19:39:8b:f6:02:42:8a:4a:c3:
65:55:0b:e0:8c:87:b6:0e:93:1d:b3:c5:f2:f3:c4:d2:4f:47:
0a:59:c7:4b:b0:c7:74:77:6a:f2:ab:ec:f7:15:56:42:6b:c2:
04:1c:9c:05:bd:5f:01:a8:34:8f:51:a3:2f:c8:29:4f:b5:03:
e7:0d:81:66:55:ce:c0:a9:1c:87:29:53:d4:47:eb:e3:7a:14:
5b:c4:c0:7b:4c:a4:28:07:b3:a7:44:4a:2c:4c:0d:04:ae:be:
2d:85:ae:4e:66:e3:78:d4:fc:71:ad:db:d1:b6:69:eb:63:ac:
a8:cb:96:fd:e8:c8:cc:e2:dc:97:b1:1f:5b:74:01:e4:be:c1:
e8:5e:5f:24:2e:f1:ad:05:4f:33:f6:58:1a:28:5c:9e:27:ad:
a4:a5:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:09 2025 by rpki-client