Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: 7tt74isMO2c22u9F55KF/QEfGwEEd3Ojyxb0ecqLcmI=
Subject key identifier: E8:62:73:99:EC:16:DE:1A:C3:77:79:EA:0C:0D:52:4D:FB:7B:6F:26
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 0199FE47105B770B06BF5F9FE7C1C6570DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 03C2
Signing time: Sun 19 Oct 2025 21:01:33 +0000
Manifest this update: Sun 19 Oct 2025 21:01:33 +0000
Manifest next update: Mon 20 Oct 2025 21:01:33 +0000
Files and hashes: 1: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: rPRAkMpIdOYqVxS+0kRLM6EsBmwiU29i+FSv4Yfddyc=)
2: nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa (hash: IlnUSzXgTeo7Aecj19DyZcjG2TpAU9jXATfOU6kk97U=)
3: zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa (hash: 51C5X4gm2WkYmwXfFe/uw6oyIL71jLkdgjDOyTD+5rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:10:5b:77:0b:06:bf:5f:9f:e7:c1:c6:57:0d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Oct 19 21:01:33 2025 GMT
Not After : Oct 20 21:01:33 2025 GMT
Subject: CN=e8627399ec16de1ac37779ea0c0d524dfb7b6f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:29:3c:8d:2b:7e:16:ea:bf:25:b6:4b:06:
e0:32:78:6a:1c:f8:d0:0f:a5:9f:a1:32:32:91:9f:
d4:81:f5:60:d2:62:ac:b3:10:ae:60:e3:c6:59:e8:
14:dc:96:93:3a:80:9e:30:37:c7:cf:29:b5:6e:c7:
a3:cc:91:9d:7f:f2:76:ba:13:65:ec:1f:42:11:67:
42:61:f5:55:92:e1:55:ae:5e:fb:16:bf:6c:c2:4c:
b6:f4:e7:1a:83:2c:10:b1:6f:32:58:4c:09:45:ba:
37:e0:83:05:06:f9:e3:06:5a:ef:d9:54:8c:3d:90:
dd:2d:b6:e1:38:9d:10:00:cf:e3:a8:d3:3a:88:46:
ea:b6:03:8b:d1:f3:93:ab:50:6a:d0:b0:24:2a:09:
7c:a4:ca:90:79:12:5b:fe:61:5a:c7:1e:00:ca:c5:
5d:8e:ba:42:32:20:00:95:9d:37:e2:bd:27:22:7a:
46:ad:7b:7f:12:c0:9f:d4:22:21:31:3d:fd:d6:a7:
e2:ce:3d:dc:b9:2e:ca:af:2e:04:54:6b:09:02:7f:
e7:e0:7f:e9:33:8d:5f:a5:c0:fe:28:01:d1:5e:dd:
3a:ab:64:05:a3:59:a2:f1:37:3b:a2:96:b3:c3:5a:
d3:f1:c8:55:75:ff:62:b2:25:29:f3:21:a4:14:c7:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:62:73:99:EC:16:DE:1A:C3:77:79:EA:0C:0D:52:4D:FB:7B:6F:26
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7f:08:72:ae:28:c4:4f:ad:29:eb:7a:1c:88:65:8a:bb:66:
4e:dc:a2:34:b0:18:f4:6b:00:2b:c6:5d:25:cb:72:99:4e:ae:
55:b6:7e:2f:b9:4c:cc:ef:af:1b:9d:32:20:3c:ac:0e:b3:31:
47:2b:d3:47:bb:48:33:2c:c2:a1:78:94:70:72:9b:46:e8:38:
18:c9:5e:25:41:23:ff:23:5f:e5:2b:1b:9d:dd:00:63:30:97:
0a:32:aa:8b:8a:a0:0e:27:b5:8e:ed:74:7c:51:31:6f:c4:5c:
65:97:a0:7d:5b:ff:ab:05:e9:2a:73:3a:47:15:dc:bb:5d:bb:
50:29:08:64:df:9a:d1:96:b3:2d:34:e7:58:c2:14:99:b8:3e:
c5:77:09:7f:0d:67:42:97:31:57:42:33:d3:22:a4:ba:ea:2e:
d8:2f:9c:12:8c:b8:c9:d4:68:9b:20:a2:6e:f0:2f:ef:ba:fa:
bc:1d:c9:92:0b:6d:ac:0a:b4:b2:cd:76:f0:e9:8b:d0:f2:a3:
f8:89:07:8f:e3:2f:0f:53:ee:d2:74:44:7a:3b:16:32:f1:4b:
20:0c:08:33:a8:c6:2c:7f:41:11:f6:fe:63:1e:1e:b8:e3:ce:
e7:37:e3:70:2b:e7:3d:53:44:54:4e:d8:d3:b6:42:d8:2b:57:
ce:c4:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:32:29 2025 by rpki-client