Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: FAHh4nJQRnxPoJXJEmy23YTwwJLDLJ9FdoUbm9suOQQ=
Subject key identifier: 0C:58:F8:8B:3D:FA:75:50:BE:E9:EE:43:F6:2E:DF:60:60:36:28:F8
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 0199FC58B6F5BCA5722AFE940D1469519121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: 02AF
Signing time: Sun 19 Oct 2025 12:01:36 +0000
Manifest this update: Sun 19 Oct 2025 12:01:36 +0000
Manifest next update: Mon 20 Oct 2025 12:01:36 +0000
Files and hashes: 1: E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (hash: TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=)
2: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: vzVLCM8ANnIFwaR8xNXpl2TNkjxYwLZCDw780HWSCeU=)
3: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (hash: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b6:f5:bc:a5:72:2a:fe:94:0d:14:69:51:91:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Oct 19 12:01:36 2025 GMT
Not After : Oct 20 12:01:36 2025 GMT
Subject: CN=0c58f88b3dfa7550bee9ee43f62edf60603628f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:57:03:e6:3f:14:92:40:08:b4:ce:ca:c0:
89:3e:bf:f7:cd:f5:fa:66:c7:27:f6:8d:59:52:b8:
a5:f6:27:c0:9e:6f:d3:79:98:d4:ee:90:d4:06:2b:
4b:69:8a:d1:3f:c9:ce:a6:7f:a7:24:b6:fa:81:13:
cd:f4:dc:97:e0:7f:df:36:ea:15:63:6b:cc:81:c1:
18:5a:a9:57:20:76:12:d9:d8:fd:42:0c:5a:82:b5:
ec:38:44:a8:30:36:3d:ec:7c:52:e9:c3:39:84:2e:
f9:5d:e9:88:78:e5:41:1b:cf:69:1f:03:16:64:6b:
75:27:34:ef:40:ae:0a:ca:21:db:85:b8:02:0a:2e:
9a:51:ef:ad:d7:de:02:49:aa:73:e4:d0:c6:6f:54:
7c:ca:e1:ba:43:dd:57:53:a7:9a:20:93:84:ce:70:
3c:b3:15:7f:95:2a:8a:ce:32:6b:a8:cc:4f:ed:bd:
97:1f:c7:8a:6d:72:6b:94:52:f5:a4:4e:e4:48:ee:
63:f2:d6:3e:3a:d3:95:72:2c:e0:c8:94:15:bd:28:
57:95:f4:d0:a7:9c:79:ea:3f:26:51:16:cf:f6:eb:
29:9c:bb:bf:45:ba:47:b2:28:9f:2b:32:7a:5f:6f:
ca:f4:a3:9e:a9:df:91:48:a0:78:7c:be:52:4f:6b:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:58:F8:8B:3D:FA:75:50:BE:E9:EE:43:F6:2E:DF:60:60:36:28:F8
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3b:74:15:92:c5:fd:9b:32:d8:ea:6e:b6:23:6c:94:38:40:
b8:96:89:83:55:2e:66:91:e2:04:e4:14:5e:62:b1:f8:fd:f4:
23:2e:df:ed:86:21:49:58:b6:52:a1:39:76:28:5c:dd:16:f0:
53:eb:13:61:5f:c8:b4:aa:18:53:75:03:a0:16:50:95:c1:8a:
4c:64:f7:65:17:04:d3:97:36:72:28:ca:5c:f2:74:50:02:cf:
e2:1c:c6:03:9a:87:41:2f:7f:d6:e3:67:77:07:cc:25:ef:90:
d6:53:04:de:e8:90:ac:81:8d:b8:2f:29:d9:b9:36:15:ee:56:
44:c3:c5:c3:4f:88:73:c2:eb:15:90:56:bf:62:79:96:eb:99:
aa:fd:1d:48:99:83:32:4a:d7:c7:bf:f8:5e:9e:83:84:28:2d:
27:f0:11:ea:e2:9f:77:3a:f2:b7:a3:41:58:97:57:37:97:c2:
09:d8:9e:bd:03:21:2c:08:e5:86:6a:db:cf:7c:de:a0:d7:77:
6e:d1:04:6f:12:6f:70:dd:0c:7d:ed:6d:53:31:cb:a1:ca:31:
e1:17:ed:fa:2f:2c:43:aa:10:99:89:08:1d:99:67:5a:3a:88:
f4:be:54:29:80:69:a4:c3:1d:13:16:42:f7:86:94:42:cb:7b:
62:f5:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:36 2025 by rpki-client