Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier: pJ6nGjbmkjEDtJAHuHxEaYkBS0rIqC3g8Lm4NW0HGAI=
Subject key identifier: 17:02:99:B9:4F:54:12:54:CC:27:A8:42:52:0E:C5:EA:E0:1C:A3:EE
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 0199FD348EDD445A139B74BC9B307FEA0678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number: 1678
Signing time: Sun 19 Oct 2025 16:01:44 +0000
Manifest this update: Sun 19 Oct 2025 16:01:44 +0000
Manifest next update: Mon 20 Oct 2025 16:01:44 +0000
Files and hashes: 1: TpP1ghqsvudxwpVNjEnVhO4RWww.roa (hash: 4+AlZPeiYc4qPwqWqByXnBYBTrZOMTJuwqjVuo2TCds=)
2: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: ZsFu3E7frPEnqHAifslvK6yC1ZFOOU0OavN13PfTbwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8e:dd:44:5a:13:9b:74:bc:9b:30:7f:ea:06:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: Oct 19 16:01:44 2025 GMT
Not After : Oct 20 16:01:44 2025 GMT
Subject: CN=170299b94f541254cc27a842520ec5eae01ca3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:33:4b:03:b7:1f:a0:51:bb:d6:c2:65:80:
5a:9a:47:10:b4:83:15:1f:e7:b2:35:2b:01:c2:af:
ee:41:ec:f4:c5:87:da:36:b3:1c:b1:ed:6c:0e:20:
3e:41:2e:b7:55:10:15:98:5f:ba:5b:e3:eb:d3:81:
24:2e:24:10:77:26:96:83:66:a6:b3:1e:8a:6b:43:
78:61:37:c0:05:84:79:5a:64:f0:f4:ed:14:86:4a:
ac:f0:6c:c8:54:87:12:b0:b6:e0:0c:86:df:f7:43:
f5:a9:e4:20:c3:68:3b:2f:e9:d6:54:26:87:78:86:
8f:ad:b8:63:bd:e4:2d:09:77:fd:80:d3:27:f8:8e:
6c:f0:dd:35:6b:3a:93:00:3a:2f:a7:dc:1c:26:ea:
41:16:1e:f7:ba:12:c5:b6:44:82:b5:f5:46:d0:67:
66:dc:12:3f:26:ec:67:1f:e4:f8:87:e8:25:fe:be:
94:3e:42:39:be:49:4c:2e:65:33:51:f2:25:10:b1:
2d:92:88:bf:e5:48:dd:0d:c4:59:a1:88:c8:39:63:
bb:3c:ca:30:75:16:6c:12:16:bc:06:fb:9f:93:19:
4d:41:4d:d3:b4:2b:29:2d:09:9d:2a:c1:bc:e8:ee:
dd:f2:d7:34:a2:89:95:18:c8:01:d1:02:38:05:c9:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:02:99:B9:4F:54:12:54:CC:27:A8:42:52:0E:C5:EA:E0:1C:A3:EE
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:44:56:9d:d2:cd:75:b4:47:52:57:22:e9:e3:dc:b0:46:ee:
72:a2:34:fc:69:a6:fb:00:f9:6c:b4:72:72:e0:2e:b3:66:2c:
a8:81:ff:41:12:27:b5:5a:47:68:49:45:ea:a9:89:0a:82:b0:
15:05:93:a0:e0:b8:13:05:3b:19:9b:4d:77:34:6e:d2:17:32:
da:0c:07:4b:ff:fa:95:78:d2:3c:44:86:a1:6a:71:3e:9b:f6:
46:9c:1b:d8:38:81:ea:0a:58:f2:5d:2f:a8:cc:97:4f:97:b1:
dd:a2:5a:30:41:87:34:c8:5d:4c:a3:16:2d:47:cd:9f:5d:dd:
63:0d:e3:4b:fb:18:37:e0:93:b5:59:87:20:17:ca:7a:a6:7d:
a6:1c:7f:88:b1:a4:d9:3f:26:7c:ab:07:98:3f:0a:e5:25:f6:
67:b4:1f:1a:72:58:0c:be:b2:42:ce:ee:72:43:0f:ed:8f:69:
41:74:20:bb:d8:d8:5f:e9:95:b5:3d:84:8f:f9:f4:38:4c:1c:
09:da:b4:40:1a:31:68:53:ff:d1:0e:b6:31:9f:fc:79:32:d6:
a0:68:12:d4:ea:51:a5:5f:c1:28:78:86:5c:0b:40:99:49:84:
ef:16:ff:09:93:13:8f:a0:60:42:a3:d7:2d:3a:11:be:a9:de:
b0:ba:8a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:14:12 2025 by rpki-client