Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: +67KDR2HlVwiLtpZ72okCkGNeP9/UOgFqnDx/YmyxKk=
Subject key identifier: E7:37:AA:C6:7E:D2:3B:8D:F5:AA:76:87:7A:35:5D:26:F1:9F:C2:E3
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 0199FB7C77E938D16F4C7685FAD052BE1CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:02 +0000
Manifest this update: Sun 19 Oct 2025 08:01:02 +0000
Manifest next update: Mon 20 Oct 2025 08:01:02 +0000
Files and hashes: 1: 4NKKaipkT34nKtWhfa19D74f25c.roa (hash: YTaiys0RSHABRCWEassKEE2Fqko+03tYIMHlBHkZyig=)
2: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: thIiqbI3G0pDaTMhdmJtlGk4z+Y4G1Pr+D3aRH9LA9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:77:e9:38:d1:6f:4c:76:85:fa:d0:52:be:1c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Oct 19 08:01:02 2025 GMT
Not After : Oct 20 08:01:02 2025 GMT
Subject: CN=e737aac67ed23b8df5aa76877a355d26f19fc2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:57:cf:d9:b5:44:ad:15:a0:44:f0:84:9c:
70:92:ac:93:6a:79:52:f9:bc:a2:c0:2b:eb:e7:d2:
2d:7a:97:fd:62:22:5a:61:5c:98:65:02:dc:c9:0f:
06:88:0c:f8:11:29:1b:10:73:cf:5c:1a:b9:54:9f:
99:96:b7:03:15:1a:74:98:98:77:c0:33:42:e2:78:
a8:71:52:97:6f:4d:c9:65:fb:14:26:48:07:d7:2d:
15:91:4a:4e:ba:2c:91:32:41:9a:e8:e5:7b:52:65:
a4:77:d3:60:39:58:e7:1b:ee:15:22:85:06:a8:69:
f2:7f:96:94:3b:9e:b3:fc:21:4c:04:05:26:30:e4:
e5:21:03:26:42:d5:6e:ae:01:1d:0e:92:fc:c4:6f:
14:b8:df:6a:a6:ef:00:9d:a8:77:09:fb:e4:b2:86:
57:dd:13:e2:a7:85:49:06:dd:b5:5d:ba:e6:19:b7:
59:cc:ad:73:f7:24:15:4a:64:15:91:05:be:8a:b5:
95:7d:c7:ec:0b:5d:cc:94:c5:bc:4e:d8:84:bc:90:
7c:c8:35:c6:86:e0:0b:68:4d:a0:50:e9:42:38:47:
12:ed:30:53:17:bc:c1:3c:88:ba:7b:88:75:d9:e8:
22:da:c0:f9:c3:39:3a:5f:fc:f4:26:b5:f7:e1:25:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:37:AA:C6:7E:D2:3B:8D:F5:AA:76:87:7A:35:5D:26:F1:9F:C2:E3
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:46:c0:65:f5:6e:f1:c5:af:f8:28:06:1b:a3:17:da:86:a0:
f2:09:6d:f2:1f:f3:e9:45:48:52:95:e8:e1:dc:ec:67:d3:12:
83:b4:b0:90:ae:62:41:f5:6f:8c:73:12:1b:ef:a1:0f:55:99:
b3:1b:17:03:6d:d2:db:0a:05:81:38:da:24:63:dd:e8:cf:8a:
63:eb:a8:db:aa:7e:bf:d6:f3:f5:50:e0:e5:77:08:28:7a:56:
80:41:42:3a:d9:ca:18:60:1c:45:52:5c:a6:bf:c0:02:9e:f7:
cf:b0:f3:1a:9f:e2:5d:22:5d:ff:29:11:d8:b7:2b:34:2d:25:
5a:b4:d4:68:c4:f5:0e:65:06:45:67:6e:54:9e:48:68:ab:0d:
df:ec:a0:4b:99:03:92:0b:aa:14:56:26:5b:f4:bd:39:b2:e6:
76:e0:b0:90:d2:8a:00:d4:de:09:07:dc:3c:06:67:ef:b7:dc:
ce:3e:a3:fb:7a:80:4b:fd:4b:c6:59:47:e4:7d:81:81:b3:ed:
e4:6f:4d:1c:c5:02:cc:f8:37:e5:03:f8:5f:30:3c:00:48:7b:
4f:aa:fa:38:58:54:b5:8f:1d:8d:8a:4e:eb:48:b8:c5:36:1e:
5a:a4:29:48:b7:1a:ea:c8:1c:6c:62:9d:92:55:55:4b:8d:bc:
8a:ed:f3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:11 2025 by rpki-client