Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: lwE2oIfYc+1dq+oqcVJ2WJTegkXcKggMzye+OthLLsU=
Subject key identifier: D4:D0:72:78:88:13:9E:F9:47:25:35:02:A7:F8:4D:90:DA:3E:69:A9
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 019A0259CABBDC4904BA5B0163933FC396E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 16:00:30 +0000
Manifest this update: Mon 20 Oct 2025 16:00:30 +0000
Manifest next update: Tue 21 Oct 2025 16:00:30 +0000
Files and hashes: 1: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: yERjzM/PirasG9El9GTRLi/u1MqilhXIYXGDjr3dW78=)
2: qzdc_fwaLRJwIIHpIg8vA5h4lo0.roa (hash: V/FGmYc5ZjOuTnWlxFYXLE8AFUo6wdD1TCze3ez9KOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:ca:bb:dc:49:04:ba:5b:01:63:93:3f:c3:96:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Oct 20 16:00:30 2025 GMT
Not After : Oct 21 16:00:30 2025 GMT
Subject: CN=d4d0727888139ef947253502a7f84d90da3e69a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:22:7e:4f:23:f4:90:5e:2d:93:c6:86:1b:
80:43:c2:30:8f:5b:9f:37:cc:32:83:b1:a8:bb:6a:
a0:8e:f7:83:e1:68:76:a8:a1:34:c2:2d:85:96:04:
64:e9:70:a8:10:8b:91:4c:17:54:68:59:6c:01:04:
b6:8b:84:fa:8b:32:9e:d9:d3:0f:a9:1c:71:a8:45:
a2:d1:7a:0e:b5:72:40:52:72:f3:a8:a4:26:da:d5:
0c:1d:d7:75:7b:fd:75:3d:dd:5b:e4:ff:49:ab:31:
86:5b:eb:d3:6f:bb:c0:6b:7e:b4:17:7a:2e:ee:0e:
fc:f5:fb:b3:3c:d8:15:19:4a:1c:4c:3b:4b:23:2b:
1a:0b:88:15:ee:b0:f0:c9:74:a9:85:cd:d8:89:9c:
2f:8e:1d:d8:3d:9e:2e:ad:ef:ea:75:54:d3:4c:26:
c7:19:81:13:35:e2:81:fb:60:4f:1e:e2:ad:65:70:
54:09:f0:44:1a:13:fb:a8:01:43:ff:d6:02:64:02:
7e:72:9f:fb:97:4e:64:28:6e:9c:c8:d3:7b:44:3d:
55:ba:42:ee:51:16:5c:46:a0:9a:e9:ee:27:ec:f1:
eb:6b:15:20:4d:bc:fc:ed:a1:84:79:7e:8b:6d:c1:
bf:13:4d:dc:98:70:38:5b:31:80:8f:a5:92:a6:d0:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D0:72:78:88:13:9E:F9:47:25:35:02:A7:F8:4D:90:DA:3E:69:A9
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:08:11:7f:44:dd:d6:3b:49:0d:57:bb:93:1e:19:a6:d2:b0:
bc:bd:81:c3:fe:14:a0:f6:e0:1c:d2:07:4e:0d:b4:0c:77:f8:
05:bf:5a:e9:a9:e7:1c:a0:b4:a4:38:3a:05:08:79:9b:ca:09:
2c:5f:25:19:e2:fc:34:0c:73:7c:dd:e4:92:76:e3:54:d2:0e:
82:de:53:6e:e8:53:d8:96:81:6a:c6:ab:b7:04:3b:72:7b:47:
b7:ad:4b:1f:da:57:27:a3:e9:89:f5:e0:3d:8d:2a:6c:29:91:
30:46:5a:56:35:f3:38:9d:50:cb:97:71:1b:d1:02:b6:76:25:
2c:f9:66:69:c6:15:1e:2d:80:ef:3f:8e:6c:0e:55:eb:e4:14:
26:ef:3f:82:88:68:7b:8f:0c:4b:bc:ee:94:80:a6:a8:4e:8d:
a8:ba:b4:c3:1a:b8:c8:09:fe:67:cd:87:1f:b7:2d:4c:9e:0a:
44:17:71:5f:b3:25:a1:8f:83:9d:fc:65:12:cc:95:a8:95:28:
94:19:55:a3:05:62:93:29:e3:7c:bf:2b:e6:fa:04:fc:61:c9:
21:b2:40:a4:77:f3:5a:1d:88:81:a4:4b:61:92:69:29:bb:27:
96:c4:b9:53:ce:e0:43:10:26:dd:08:50:b6:a1:db:bd:6f:10:
37:1c:69:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:39:55 2025 by rpki-client