Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: 58HqvZtv07j5uKwGK4MlRQYPW/wGNnWP+Yshs7prbHk=
Subject key identifier: B1:6E:FB:0A:A8:6B:AC:43:E3:F9:51:61:CA:8A:F9:98:82:D3:E8:8D
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 0199FA6A3BD7A0D9C85B3FFD30DE776531FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 03:01:30 +0000
Manifest this update: Sun 19 Oct 2025 03:01:30 +0000
Manifest next update: Mon 20 Oct 2025 03:01:30 +0000
Files and hashes: 1: BhSQf1yX1uLwgzRbSbyaxC2Eyyk.roa (hash: QYypOcFPdcc9ArENcLdBU9X1TsVQ+7g/yqAYCtsdaqk=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: X03yVaPkSR7GbsQJg5KMmidVaKTHuFTMJsGESeNIODs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:3b:d7:a0:d9:c8:5b:3f:fd:30:de:77:65:31:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Oct 19 03:01:30 2025 GMT
Not After : Oct 20 03:01:30 2025 GMT
Subject: CN=b16efb0aa86bac43e3f95161ca8af99882d3e88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:45:d0:0c:f9:87:2e:8a:48:1e:cc:ec:1c:
0a:a1:e4:49:00:47:9a:98:2e:05:70:fc:35:76:92:
b1:8f:95:ba:29:6c:df:21:95:17:a9:ba:06:ae:e5:
cb:11:e8:79:ff:18:95:40:a0:24:bc:9a:68:da:05:
de:ed:bf:98:02:44:1d:1f:77:d7:a4:0b:cc:71:cc:
ae:89:57:4b:a4:c2:f5:69:7f:a7:58:70:d4:43:7c:
e8:3d:bb:e9:cf:b2:0b:f8:1c:c4:01:91:f2:c6:94:
24:e2:03:3d:44:e5:25:d1:d5:27:6d:34:6d:eb:7e:
b4:6d:c5:be:c6:42:ab:e3:db:56:7b:65:c3:82:05:
dd:dc:da:f6:34:e5:15:fb:5e:7d:39:bb:ca:7a:79:
eb:ac:f2:c5:70:57:76:90:03:c6:b1:7a:cb:4b:c3:
84:71:3d:94:29:24:fc:da:dd:a5:b4:b2:33:7c:19:
2f:f4:89:31:5b:1f:2c:f5:8f:6a:12:8d:ec:44:c5:
07:ba:ef:62:fe:21:5d:0c:76:e3:50:6d:23:c8:50:
4c:ec:23:fa:b4:bc:20:f5:af:ee:12:14:bd:98:a4:
6a:22:95:cf:5c:54:96:15:e3:83:11:39:85:af:14:
cb:fe:73:b3:a1:8d:43:f9:8b:4b:38:76:34:bb:63:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6E:FB:0A:A8:6B:AC:43:E3:F9:51:61:CA:8A:F9:98:82:D3:E8:8D
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:26:25:0e:8a:cd:99:80:e2:35:15:06:cf:b4:18:aa:2d:ad:
33:0f:a8:af:ff:db:a3:19:60:ae:c4:48:1d:3a:9c:d3:4d:0e:
9a:c2:98:9a:d2:67:93:b3:1e:ac:d7:d2:03:7a:cd:d9:02:c0:
93:7f:22:89:40:cc:16:69:1c:ae:12:65:b1:62:ba:84:d5:06:
c5:dc:87:e9:75:1c:5f:ad:3f:e7:41:57:35:14:6d:f8:e4:e7:
7e:38:6e:4c:10:ca:4d:ca:21:1f:7f:04:90:76:76:50:45:87:
ec:81:1b:b6:87:2e:b3:5a:2a:3c:5a:32:7e:67:0a:5a:01:b0:
e2:7d:7b:7d:77:f0:c4:a1:fa:2c:7a:f5:52:ad:ff:03:c5:5d:
3b:98:fe:14:fa:5b:e6:9d:73:09:62:e5:84:5c:bc:f9:08:2d:
2a:44:e9:e4:6c:24:ce:61:f6:cd:d8:d3:ab:64:e6:6c:63:cc:
c2:05:6e:b5:d0:b5:96:80:f1:73:6f:e6:ce:b0:a4:9d:60:41:
8b:de:37:66:2e:03:af:ca:cf:c4:cc:ce:a1:91:a4:af:45:24:
7e:73:fa:ba:9e:f9:91:b2:95:9e:72:7b:25:31:9f:a3:85:d1:
ad:1b:f9:31:29:c3:ca:66:eb:cf:13:5a:8e:7c:d1:be:5f:8c:
99:87:69:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:06 2025 by rpki-client