Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
File: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft (raw, json)
Hash identifier: tYNOyIKZ9b5tBuiOh6oW3ydPEHM7RmEpvwdtMLjVZrk=
Subject key identifier: B3:9C:E2:34:CA:E7:E8:D5:FB:9A:61:24:DE:60:EB:44:80:70:6E:FD
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 0199FB458F424D179C8C0B787077435FA439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
Manifest number: 167F
Signing time: Sun 19 Oct 2025 07:01:03 +0000
Manifest this update: Sun 19 Oct 2025 07:01:03 +0000
Manifest next update: Mon 20 Oct 2025 07:01:03 +0000
Files and hashes: 1: 9lF4Wddkx_RwPlb5HR8sz7VHAqw.roa (hash: Hn4j3J9eHkRE5z1tLuZOLQRVHX7ZllrYe5IpQOpZT5Q=)
2: KX-LT3dz707Vp7hkt51mW7kN47w.roa (hash: B+a9FfO6NerOzeUWDsk9OJMmWDCrppwYJ3/nJz/k+A8=)
3: VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa (hash: +w/UxWBt5Z4UXYZ4yW2TIYsp5hWJ/kYYtNU8YXQGHVc=)
4: bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa (hash: FBjUOC9XwfJYZbTFVZbjXTw1auYANpnx/KFKsqWsZiU=)
5: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl (hash: vCtoMZSFU3vhue7yCwFBZmuihDdbtKA2ckkTcR9Qtts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:8f:42:4d:17:9c:8c:0b:78:70:77:43:5f:a4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Oct 19 07:01:03 2025 GMT
Not After : Oct 20 07:01:03 2025 GMT
Subject: CN=b39ce234cae7e8d5fb9a6124de60eb4480706efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:9c:8d:63:ca:0a:29:23:20:8e:ff:b6:5a:
ad:60:91:4b:95:18:30:ff:cd:76:f7:f9:33:bc:dc:
9e:46:29:60:44:b7:94:28:4a:86:a7:c5:84:81:6d:
f5:00:df:76:f6:97:19:ed:1f:c3:18:ea:9b:37:6c:
8b:69:f3:97:63:a5:64:21:59:96:ad:78:3c:43:09:
c1:14:cf:80:10:43:86:75:f2:01:c0:8f:30:ae:f0:
59:d7:b2:ce:57:d3:aa:36:1a:c3:cb:3e:e4:80:0e:
f2:12:c1:50:e4:2c:6f:04:2b:8a:2b:2e:33:c6:b3:
b6:fb:c6:a5:84:2b:59:f5:67:67:ad:a8:38:ce:54:
82:94:c3:ff:97:b8:2f:8c:46:90:d4:68:09:77:2b:
d2:1e:a0:c8:33:1b:e5:d6:8a:3b:54:9c:3f:e3:13:
f5:b9:40:ae:d0:39:e9:12:ad:9f:2b:71:c2:a9:9c:
c7:b2:23:b5:93:d4:bc:28:0e:43:81:4d:c0:28:1b:
25:5b:1d:48:70:e4:ad:e9:7f:df:79:18:b9:16:64:
42:7f:6e:be:81:ba:1d:df:c0:bd:24:64:10:ae:ef:
70:92:6b:95:11:81:c5:0f:35:e7:95:d7:62:ce:da:
17:ea:56:11:66:e6:82:4f:90:6f:09:24:e9:a1:d7:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9C:E2:34:CA:E7:E8:D5:FB:9A:61:24:DE:60:EB:44:80:70:6E:FD
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:26:f1:ad:8f:22:14:b5:54:52:8a:80:b3:8a:21:a5:2d:70:
21:f4:85:aa:32:80:d8:64:2c:73:d4:6b:02:fe:d0:47:76:eb:
c9:06:b2:16:19:42:a1:3c:fa:5c:cf:45:c8:91:c4:d3:8a:d3:
bf:30:d4:2f:dd:d1:1c:2d:6e:8b:e3:45:7b:d8:8f:a3:c0:30:
20:fa:8e:32:23:e4:ca:9e:c6:8f:89:18:14:ea:76:2c:17:de:
09:38:cb:23:a3:b5:96:c3:76:d4:57:58:b6:dd:77:c1:4f:d0:
64:d2:13:43:f5:ff:dd:ed:83:b2:5e:2f:a5:fd:c4:54:53:59:
7f:ce:15:38:56:3d:6f:c8:e0:9b:d9:59:06:d8:f2:8a:91:73:
af:f8:6f:b0:47:dd:80:a4:01:50:58:a4:4d:5a:65:7d:e2:72:
f6:ee:85:b0:be:cd:8d:7c:4c:8d:d0:42:2b:e4:61:48:92:df:
7c:92:e3:bb:8d:c4:c4:3b:ed:09:fb:6c:fc:b4:d9:6d:c0:6e:
6d:5d:8d:9d:08:00:6a:e8:3d:bb:da:07:18:99:51:0a:9c:20:
fa:a7:7a:23:21:b7:bc:75:da:e3:b4:1f:7c:1d:29:00:fc:02:
2e:43:c1:88:0c:a7:ea:07:8a:7d:99:ae:b4:7e:a1:6d:58:22:
01:77:8b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:56 2025 by rpki-client