Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: 1leYY5cyvDMoReS/EtEh79GX11sgMDUnxeOkUIHlZXA=
Subject key identifier: 7F:AD:F3:4D:3F:78:C1:98:26:39:E5:87:B5:0E:60:B4:04:30:76:6E
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 0199FCC62E6B217B1699DF492C7AB2DCB5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 14:01:10 +0000
Manifest this update: Sun 19 Oct 2025 14:01:10 +0000
Manifest next update: Mon 20 Oct 2025 14:01:10 +0000
Files and hashes: 1: UzSEdJBP2Gqr1z-0qx79WTsLauw.roa (hash: vl1ow4mOIeKlrrAdbJAJQJmVxWS6mp39VC/9XaCz00U=)
2: XebRYOITfzcAbcv2WQiIUJzp9IY.roa (hash: /LlV1c2jBHdUzm3m7BbrQfvi7DnfI/2A+wzHJz5/0Eg=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: xwbjcNFC/8GRjqZHCNo1TBDQKhXOvVpEZOyay04dTk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2e:6b:21:7b:16:99:df:49:2c:7a:b2:dc:b5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Oct 19 14:01:10 2025 GMT
Not After : Oct 20 14:01:10 2025 GMT
Subject: CN=7fadf34d3f78c1982639e587b50e60b40430766e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:11:eb:45:b1:5c:84:15:3e:3d:ab:49:b3:c9:
1e:7a:71:aa:92:c2:94:76:e3:8f:9f:7e:f7:b3:53:
37:9e:20:b1:45:8a:07:40:5f:2d:ef:1f:03:b3:05:
4f:5a:b1:12:34:3f:eb:27:c0:6f:be:fc:52:eb:71:
36:29:ec:2c:42:6a:3e:a2:a9:63:17:f9:45:bf:7f:
3c:51:96:5d:23:00:fc:7d:9c:f1:fb:bc:9e:69:65:
36:34:f8:ff:82:93:a8:62:09:34:d7:51:6f:60:a8:
ab:2b:b7:86:d3:4f:e9:30:c9:23:16:82:e9:8a:1c:
98:d4:f7:7d:bb:59:7a:83:0a:1c:d7:9f:39:b6:81:
08:7a:24:ea:99:43:0c:a6:72:34:b6:5b:4b:05:56:
e9:d4:7d:40:36:96:85:c9:1d:af:4c:9a:fc:de:3f:
30:7d:dc:a1:9b:06:2e:1b:63:b6:fa:ce:6c:f2:41:
c5:2c:37:60:58:51:c6:4c:a4:03:44:44:b0:51:f2:
69:02:41:8e:98:a7:28:dd:bf:b9:c0:df:7e:24:1d:
ed:6e:6b:e7:e7:83:0d:84:a5:cb:f4:12:be:9c:4a:
67:02:23:a6:80:87:e1:e7:77:b1:f1:50:b2:2d:ee:
77:ed:d7:35:d2:ce:bf:9b:08:41:51:b3:b1:ce:2e:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AD:F3:4D:3F:78:C1:98:26:39:E5:87:B5:0E:60:B4:04:30:76:6E
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:24:93:b3:25:fe:7c:6d:71:6e:22:a3:56:be:28:17:88:93:
96:a1:ea:01:88:3d:3a:3b:71:2d:87:c9:ed:c9:ea:01:f6:f9:
7d:e6:f1:9b:52:83:b8:10:d5:63:e9:1e:d7:7e:48:ae:01:96:
ae:25:98:5f:f6:33:33:b9:08:14:52:28:60:98:fa:24:c4:5f:
09:4c:84:de:da:de:9f:bc:95:58:71:22:db:76:ea:7f:f8:54:
7c:d3:79:ab:16:0f:5b:37:32:55:78:1b:0c:91:4f:76:e8:9f:
68:43:33:dd:33:f1:ff:42:9a:27:6d:f1:06:c1:a5:83:79:82:
48:b3:ec:f3:84:81:30:31:28:b7:0e:b5:5d:8f:f2:d4:61:68:
2c:6c:09:c7:4e:fd:4d:f9:7b:ca:20:20:78:ff:81:b7:15:fe:
ca:44:c1:40:f0:cd:2b:90:3b:01:b6:d6:59:b9:6f:d8:3a:21:
c0:21:cb:dc:56:09:a0:5e:b0:87:bb:64:d5:af:1e:e6:86:1f:
ce:19:a6:65:1d:5a:b7:3e:f4:d4:06:9c:e6:d8:3e:b1:50:59:
bb:44:a2:c3:c1:19:9f:05:3c:c5:6d:78:ec:48:93:ff:9b:17:
6c:5e:10:67:3e:23:0c:82:39:d4:3d:64:b7:cf:a3:a1:c1:45:
a9:2d:3b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:43 2025 by rpki-client