Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
File: rh6ygNFyKEakQSTExi0AWfYa8kI.mft (raw, json)
Hash identifier: S9Mwju24C2B5YlaZvou9beLrFOJFs/HrEQ3mmVqoDi0=
Subject key identifier: E6:75:D2:F7:74:97:76:D8:AA:54:62:EB:E9:F1:DD:15:19:94:23:AC
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial: 0199FC8FA6624980804E0B84892A5323D294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: AkkqTkgoNjucTbIenc-XdoQnIZI.roa (hash: 22rbMnk8MBt5UQAAhQP9wIF7s9K2LwR7KpEuXLLCYQA=)
2: rh6ygNFyKEakQSTExi0AWfYa8kI.crl (hash: YsO8kQ90euERQ1J6f75jtuA3ADcHMY1gb/cThKjp4Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a6:62:49:80:80:4e:0b:84:89:2a:53:23:d2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=e675d2f7749776d8aa5462ebe9f1dd15199423ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:c5:06:24:61:7d:ed:c2:42:9a:b2:c2:50:
49:13:89:a4:82:72:e0:be:08:c2:42:82:fb:bb:90:
5c:8b:e9:3a:91:cc:87:be:ac:c5:36:78:09:e2:ce:
a7:7b:09:ec:9d:50:72:cf:25:86:8b:13:40:44:c7:
29:4a:88:05:f3:ed:33:d9:3f:e5:db:f3:c5:a5:72:
6d:d6:99:3e:fb:d6:28:4e:e5:4d:c6:05:45:91:14:
6d:2a:bb:c1:a5:f5:a7:0e:8a:15:ce:a3:40:c4:10:
d0:b2:4f:5a:8f:ed:9e:9b:e5:8f:14:7a:61:32:da:
1a:a4:2f:1f:67:a5:72:be:81:5e:66:e3:87:76:a5:
94:87:ab:5d:a9:87:55:d1:48:cf:8b:c7:f1:51:be:
60:63:eb:35:bc:37:66:29:ac:46:bc:c1:e1:c4:e2:
11:c0:c0:50:d7:d8:15:41:94:82:3b:a2:46:2e:45:
cc:21:a4:d0:ef:42:6a:57:b6:55:f4:00:80:03:26:
49:4c:90:6b:8f:d2:3d:41:1e:24:df:14:1b:33:ab:
a7:83:37:69:5e:00:6b:26:9b:d8:f8:eb:85:c8:db:
f9:1e:ac:de:5e:e5:19:5f:53:31:6f:76:1e:49:db:
ab:12:cf:6a:62:4b:b2:41:3e:65:99:68:a0:ee:33:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:75:D2:F7:74:97:76:D8:AA:54:62:EB:E9:F1:DD:15:19:94:23:AC
X509v3 Authority Key Identifier:
keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:71:42:d3:ca:ad:fe:b2:b2:bb:25:5d:f0:f2:80:9d:36:f4:
69:aa:7f:81:ca:7e:81:76:ac:5f:6e:18:fe:8c:6a:a1:fa:b4:
10:e8:a0:95:f9:5c:69:93:56:15:95:72:d9:30:44:f8:86:7e:
8d:d2:7f:a4:b8:57:dc:11:9d:c6:3a:9e:72:98:a5:0f:20:c0:
87:37:ac:26:0d:8d:13:21:94:53:0f:32:d9:dd:36:06:84:b6:
cc:75:b1:ef:1b:22:70:5e:bc:35:79:87:c3:5e:09:d7:6d:ca:
63:06:c6:0d:ba:39:0d:38:9c:1a:dd:fb:7f:b3:45:0f:eb:66:
f3:e2:28:2a:b1:b6:3b:1a:fb:d6:0b:b7:39:40:e5:73:3c:7d:
2f:01:c6:44:42:ab:76:ea:31:8d:5e:4b:22:f6:2a:eb:63:9c:
fd:c9:19:3c:79:7d:f0:ce:61:14:40:68:3e:ad:bb:5c:75:c2:
eb:83:f8:e9:8e:31:c0:da:69:28:15:67:fc:57:4d:07:ba:43:
e9:f1:a0:3d:3e:ba:a1:13:66:dd:0e:d8:2a:74:2d:48:3a:45:
da:fd:b2:d2:2c:8f:44:41:13:61:4d:82:d4:e1:d4:6c:bb:15:
2b:79:2b:e2:3c:21:4a:5a:29:6f:1c:f3:c3:83:cb:b6:26:03:
28:9a:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:41 2025 by rpki-client