Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
File: hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json)
Hash identifier: KWH7WPUFidKR2wMa1e6OSFL+/P0HtFeRtcE5kDhD4D8=
Subject key identifier: 0E:FF:DA:39:F8:B5:D4:D1:91:2D:9B:68:FB:50:97:70:F5:78:96:DE
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial: 0199FEEBA9566B4E2A17C58F5F00BCBF7511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
Manifest number: 0F65
Signing time: Mon 20 Oct 2025 00:01:21 +0000
Manifest this update: Mon 20 Oct 2025 00:01:21 +0000
Manifest next update: Tue 21 Oct 2025 00:01:21 +0000
Files and hashes: 1: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: xLPr/MOEnb7RBss6cLwQc3AbBEwmMmOY7SglJzvqjFY=)
2: pkoA1nbX0r8lwiVwxbfu80R8kOU.roa (hash: dAPrEkvaKQk5s5Z7WHpV1G3F1Sw4lOg/QTiasC7ZX1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a9:56:6b:4e:2a:17:c5:8f:5f:00:bc:bf:75:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
Validity
Not Before: Oct 20 00:01:21 2025 GMT
Not After : Oct 21 00:01:21 2025 GMT
Subject: CN=0effda39f8b5d4d1912d9b68fb509770f57896de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:79:50:b6:87:aa:8b:ef:7d:02:15:d7:4f:
22:57:94:02:1c:f2:e1:09:04:8d:62:0c:fe:e4:be:
32:71:51:28:ed:e9:88:fb:45:d2:c5:55:1d:5f:f1:
99:9f:4a:77:f4:a8:6e:cf:f8:7d:8e:5d:e8:73:f8:
6c:13:50:46:35:6c:cf:6c:f1:2f:be:92:e7:23:ca:
6d:3b:bf:4d:b6:2b:66:23:31:1a:d4:03:75:9d:28:
a9:b6:12:72:64:65:5e:34:96:82:ed:cc:65:d1:95:
7d:bf:0b:f0:da:4e:13:44:d3:15:d1:50:46:01:47:
5d:08:54:89:11:e9:bd:0f:2b:f0:f7:cb:1d:83:97:
8d:2b:1b:e0:17:77:78:1b:89:91:f9:69:05:8d:12:
8a:ea:05:fe:82:b1:cc:1a:9f:5e:b5:8f:43:38:fe:
1a:65:94:fa:26:8b:35:11:76:e6:47:16:b0:63:c2:
43:f4:2f:dd:d3:11:a2:91:52:dd:cf:83:61:85:74:
86:60:be:62:4f:10:e1:ff:3f:31:d6:d6:f3:68:85:
ad:89:14:a2:76:6e:d2:ac:19:b6:3f:97:ed:02:c8:
bf:7a:ac:23:c7:64:b2:eb:55:7a:c2:0e:66:83:5c:
70:d9:e8:7c:cb:b2:1d:ab:c4:95:6c:78:66:c4:1a:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FF:DA:39:F8:B5:D4:D1:91:2D:9B:68:FB:50:97:70:F5:78:96:DE
X509v3 Authority Key Identifier:
keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:dc:01:ab:b6:c8:ec:8e:1b:94:a8:c1:ed:09:e4:bd:05:34:
80:9f:54:13:89:c1:61:20:e1:b7:20:79:11:43:73:54:4d:e7:
4f:35:90:66:ba:83:22:f7:a0:69:ee:81:d6:ef:49:cf:ca:2c:
3b:01:a9:6d:0c:c7:fb:d2:ae:7d:18:06:a1:df:90:1d:a1:c1:
34:95:38:7f:2c:fe:84:91:c9:43:3e:9a:aa:05:e6:b7:03:0d:
52:3d:37:2a:a2:87:a3:5e:78:a0:13:f5:80:b1:f0:81:1d:e9:
47:02:e0:0b:0f:f4:5c:91:05:64:cb:f9:b2:82:e9:09:12:e6:
c2:a8:7b:e0:04:23:36:47:4c:1b:08:17:40:fd:fc:62:b3:ce:
95:a8:43:6d:0f:7e:82:2a:92:84:a8:b6:b8:d7:64:89:54:8a:
c9:89:12:a5:e3:3e:4e:f4:e4:19:12:f8:35:20:01:fa:cc:c5:
63:07:43:81:6c:7f:b5:78:40:a9:62:1c:29:69:53:1b:f2:a0:
e5:82:64:7f:bd:db:72:fb:e8:c6:5d:3e:02:0b:96:9d:48:a0:
b0:3c:04:a6:54:46:3c:64:5a:a1:88:82:7c:fb:c5:4a:10:5c:
6d:5a:b6:c0:e0:e4:a4:49:21:f1:d7:62:62:e4:0b:02:ed:2d:
41:eb:e6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:52:23 2025 by rpki-client