Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier: eHirGqukCUt0IbXq8CfcRjUeqCEJQVLq63g/ZScp7GI=
Subject key identifier: 48:4A:CA:3D:C2:04:CB:46:DA:86:E6:BB:0F:84:CA:F9:26:7E:72:99
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial: 0199FE7E0435EEC5E0B15C289471184B6ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 22:01:35 +0000
Manifest this update: Sun 19 Oct 2025 22:01:35 +0000
Manifest next update: Mon 20 Oct 2025 22:01:35 +0000
Files and hashes: 1: A4RzpDr3gOL8P149IxhrXzrosA4.roa (hash: yOCvJbe7MwqK0UFIIbITRG8d1PF4w5162JM6G8QiNYc=)
2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: NAjL96UPSet7LtSOwZxV0vJOq+BURmfXs7ffCNwF5TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:04:35:ee:c5:e0:b1:5c:28:94:71:18:4b:6e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Validity
Not Before: Oct 19 22:01:35 2025 GMT
Not After : Oct 20 22:01:35 2025 GMT
Subject: CN=484aca3dc204cb46da86e6bb0f84caf9267e7299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:7f:0e:f0:74:10:07:4e:78:62:4b:fe:51:
4d:2e:d9:a5:f2:4e:f9:d1:9d:d5:f5:dc:06:4e:ed:
ae:d3:28:b4:5c:4a:53:40:38:f9:71:c5:15:d4:78:
16:30:c1:3f:60:a1:1a:92:df:ec:48:8b:a3:27:c0:
9d:16:4d:1e:5f:c8:07:a1:0f:7f:fa:72:0a:20:19:
a3:5a:4e:58:02:69:b7:ec:c8:85:45:fb:3b:f9:74:
ee:57:4e:01:2e:74:7e:d4:91:28:1c:7a:09:4e:09:
5e:2d:55:ee:83:e1:86:c2:20:0d:82:4e:2d:a2:1f:
d2:9a:a6:00:47:5d:6c:66:0a:e4:3f:0c:69:3f:f8:
7f:f4:fa:31:7d:e8:fe:f5:03:2b:c0:0c:0f:7d:3b:
48:30:18:75:b0:b9:f0:62:a9:f3:61:6c:91:28:27:
69:41:1b:11:34:13:a7:5f:b4:92:9e:aa:b7:db:a0:
27:9a:35:5b:cb:2e:d9:74:a0:ad:62:d6:a0:a2:b4:
a9:e3:f8:88:89:80:b7:ae:c0:f2:fb:f5:d6:51:39:
d8:d4:2b:f5:a2:cf:67:e5:53:5f:ec:73:a5:98:85:
f3:c1:b7:d9:ab:4f:02:cb:12:37:e2:6a:93:ba:95:
a8:73:65:0a:fd:5c:5a:0d:b3:0a:ec:af:5c:b6:78:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4A:CA:3D:C2:04:CB:46:DA:86:E6:BB:0F:84:CA:F9:26:7E:72:99
X509v3 Authority Key Identifier:
keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c8:f7:47:8c:3f:43:49:30:09:51:2d:2e:36:a6:62:02:a7:
f3:77:c4:06:ab:20:80:b8:d2:3d:31:09:f5:8f:8b:58:9f:23:
c8:06:10:54:c9:0a:be:26:de:32:44:f8:e1:46:27:84:33:12:
07:f5:67:03:d8:b7:64:74:95:b3:7d:68:5c:d1:a5:a9:a0:ae:
e6:03:be:7a:d0:fe:9a:24:96:ee:b5:33:2a:96:7f:d5:dc:fe:
a0:14:5c:90:fd:80:d3:91:7f:23:ee:35:07:46:67:ca:cb:b3:
f1:60:e3:eb:50:19:07:45:ed:f6:af:e2:83:0c:59:cc:64:a5:
70:c5:ca:d5:00:d5:87:d1:6f:7d:27:35:14:18:b0:8b:7c:aa:
72:36:75:f2:26:0c:43:84:ae:29:60:36:4b:a4:a7:20:1d:98:
3a:c6:8e:bc:8b:52:3b:c4:2b:88:d2:1a:eb:c6:e5:e3:97:08:
2e:40:46:30:1c:4e:4d:d9:67:ea:41:a6:ec:70:a0:f0:4f:ea:
cb:db:55:06:10:84:00:6f:10:e9:33:1e:ef:49:af:6e:35:01:
1d:01:db:56:07:40:07:dc:6b:72:02:08:41:5f:80:86:f0:af:
ef:8c:1f:88:a9:4a:ce:80:1a:8b:61:6f:68:a4:78:f2:c6:b2:
a8:23:07:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:37 2025 by rpki-client