Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier: leToR+2i22ndgK5H24jqNdbBrh/RXc5UE8jrN8THnrY=
Subject key identifier: A2:97:FA:2F:D2:EC:4D:5F:C1:99:2E:91:E0:A7:E3:14:80:D4:CA:C5
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 0199FBEAA9B1F622DE87D0BC31F007244D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number: 0B24
Signing time: Sun 19 Oct 2025 10:01:23 +0000
Manifest this update: Sun 19 Oct 2025 10:01:23 +0000
Manifest next update: Mon 20 Oct 2025 10:01:23 +0000
Files and hashes: 1: d4QzmUrPPbJQxMw96G7I8wKAY_8.roa (hash: kCIIAo6mIinxOh21iDNSoj9jRYqWTcCgtvPqYHHPUqY=)
2: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: 5GkIw74+YXi3G7VBPe7aq0dgMw+/Mwr6GpOB4rdcTLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a9:b1:f6:22:de:87:d0:bc:31:f0:07:24:4d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Oct 19 10:01:23 2025 GMT
Not After : Oct 20 10:01:23 2025 GMT
Subject: CN=a297fa2fd2ec4d5fc1992e91e0a7e31480d4cac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:7f:4e:9c:e2:69:e0:20:44:09:ac:04:59:
57:0b:ed:72:e8:b6:e8:0b:a1:13:84:11:e1:a4:50:
db:7d:88:34:1e:ac:bd:0c:d8:ae:60:64:4d:64:58:
46:a0:52:24:7b:b4:a2:1a:95:ac:6c:ca:b9:3e:ea:
e8:64:6d:fc:7e:23:00:b9:6e:ce:4f:ae:25:93:4c:
0a:40:b2:01:7b:5b:e5:91:a0:2e:46:14:1d:fb:cf:
32:93:2d:d2:97:73:c1:34:91:7e:0e:09:4c:7d:00:
bb:3f:e9:87:23:39:16:51:23:a7:f7:ed:8e:85:27:
11:93:33:ba:6c:b4:36:60:6e:fc:ba:6e:cc:92:85:
5f:99:5c:b8:7f:f0:c6:49:ae:cc:47:6d:bd:57:a7:
d3:6b:86:5a:44:24:d1:16:5a:8a:32:9c:8b:89:cb:
56:1f:ab:35:6d:d6:48:04:82:56:de:c9:a2:dc:3f:
74:85:05:96:59:b4:bc:4d:48:26:17:27:f9:72:f4:
50:5d:e9:43:e2:0f:4b:9a:08:5a:df:b8:2d:00:10:
14:12:57:0a:ee:4a:78:79:c4:e6:46:cc:a7:7e:6e:
4c:84:5a:e5:2c:73:df:77:4a:f8:cf:ce:c5:05:f5:
0b:47:49:a2:47:1b:33:f5:54:79:29:85:7d:cb:69:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:97:FA:2F:D2:EC:4D:5F:C1:99:2E:91:E0:A7:E3:14:80:D4:CA:C5
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1c:f3:07:5e:0d:09:25:3b:66:d7:50:90:56:c6:b5:a0:40:
7f:93:6d:91:d8:08:a2:d1:2f:c9:f9:38:93:6a:b2:48:3e:6b:
93:cd:b4:df:cb:e1:2b:af:9b:57:6c:19:3f:1f:ab:96:ef:87:
0b:e2:8c:00:e8:e5:5b:34:dc:e9:f9:24:5f:1e:6b:1f:2a:f7:
fd:c1:24:3f:75:df:1f:52:9d:12:29:39:5e:f0:b9:90:53:52:
ae:29:7f:bb:2a:36:07:e4:5e:35:3b:0a:f1:b6:93:49:3d:4c:
23:6a:42:47:e7:7f:b8:05:25:17:b1:69:69:e7:a8:c3:24:e7:
0e:94:60:e3:f3:09:3d:21:22:ad:af:4a:4b:b3:3e:f6:2e:ad:
bf:72:36:28:5d:cc:f6:93:32:d4:b3:2c:29:49:42:4e:8e:24:
ec:63:9b:25:cd:19:41:eb:00:ba:9b:38:dc:3e:f8:f0:3e:a3:
cf:17:6d:73:1b:6e:3c:ca:eb:c6:79:dc:9b:87:60:7f:a8:8a:
14:ce:e8:c3:4d:c5:53:4e:26:04:e8:d1:1f:c5:68:05:ff:82:
e4:93:fa:e5:05:39:42:64:7a:08:39:25:39:41:f6:e4:6b:b6:
27:b8:54:c0:64:3c:05:0b:e2:4d:df:7d:9d:53:0e:a2:85:72:
84:36:37:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:03 2025 by rpki-client