Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: mRIHBABmXKVFSHrVWBInhy5H3v9niQ27HBD4i9wR754=
Subject key identifier: C3:96:2C:A5:F8:09:20:93:09:79:CF:88:59:7B:78:DE:07:CD:13:DD
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 0199FE7DCBB99E0B0FE225BA07AF57F75C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 22:01:20 +0000
Manifest this update: Sun 19 Oct 2025 22:01:20 +0000
Manifest next update: Mon 20 Oct 2025 22:01:20 +0000
Files and hashes: 1: O8vYugo1IMFhRrolkiJ5A2F_9k4.roa (hash: vT082QVsehcKVaVyOGMEheCQhaYoT8jhfxj4aHEzNiI=)
2: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: RVk7Xr6wAQzeprF58ZJjYQZuEYYG3ioBFJOVMWxSYTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:cb:b9:9e:0b:0f:e2:25:ba:07:af:57:f7:5c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Oct 19 22:01:20 2025 GMT
Not After : Oct 20 22:01:20 2025 GMT
Subject: CN=c3962ca5f80920930979cf88597b78de07cd13dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:b3:19:c0:80:6a:3e:a3:da:e4:92:03:ff:
f1:b9:4a:ec:1d:83:23:9a:71:d3:b0:4e:d8:a8:b4:
46:43:98:3d:3e:ca:ca:95:e6:d0:22:fc:cf:98:a6:
f1:c5:0b:2d:74:cb:1f:85:65:66:07:12:f2:8f:65:
72:e8:c4:3d:d1:4b:9a:36:86:58:27:5b:66:20:c3:
64:fd:5e:fd:b2:33:91:02:78:99:68:04:de:a3:61:
d7:dd:37:01:98:7e:4d:4c:a4:af:41:71:15:6c:7f:
7b:b2:11:73:89:3f:03:0b:f8:13:17:45:16:f0:e8:
99:2d:24:cb:a2:b5:37:aa:5e:69:0b:4a:19:c1:0a:
24:8a:24:0c:d8:5b:14:de:0c:dd:c6:94:0e:83:35:
ed:0a:59:a8:f3:ce:6d:6c:ce:9b:48:2e:e5:b1:a4:
de:4f:a4:f0:fe:71:41:0e:0a:ff:d6:ea:e1:44:d7:
52:e9:69:ef:b6:51:45:21:27:00:27:c0:9b:0d:b9:
d7:a3:46:6f:b1:60:fd:a5:3a:ca:03:dd:c8:d4:78:
75:2c:5b:f4:28:38:aa:13:59:b0:42:ae:4b:69:43:
ef:6b:f0:3e:af:d1:0b:02:83:56:9f:62:1a:6e:7d:
23:68:03:5e:f4:6a:81:74:ba:36:ff:01:87:a9:aa:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:96:2C:A5:F8:09:20:93:09:79:CF:88:59:7B:78:DE:07:CD:13:DD
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:21:a1:e9:55:0b:da:eb:11:fb:06:7c:17:f2:66:d8:1d:d3:
6c:eb:6f:8d:d4:29:89:c0:a4:b6:2a:e4:df:ca:3d:4f:f8:48:
0a:fe:41:ab:b5:0e:a8:54:db:31:a5:97:9d:db:8a:a8:07:03:
00:68:b4:e4:2f:cf:5a:70:4b:e2:30:6f:ee:76:e6:88:a1:90:
7b:69:f8:86:fb:72:58:3c:7f:da:7d:8d:7d:91:1e:37:f4:67:
43:b7:99:c5:fb:cf:00:52:d3:e6:db:b1:a4:36:c6:48:44:dd:
eb:ce:3b:25:59:a5:63:5c:54:88:6a:93:d4:5c:33:fc:d2:c5:
11:1a:58:81:8c:3b:8e:4f:90:57:bf:29:6d:eb:b4:ed:e9:01:
d6:28:7a:3d:a8:e6:eb:6b:40:e8:0e:bc:8e:b8:45:99:85:78:
5b:5a:fe:57:3a:90:84:66:4f:02:24:8a:f0:71:4a:86:ec:76:
e4:9e:32:29:f8:da:ae:50:d2:45:83:c7:49:34:65:bb:98:03:
d5:75:6c:4b:55:33:37:89:83:7e:be:4c:2f:a1:7e:0f:07:40:
68:87:e2:e7:c8:9e:11:5f:c9:49:96:27:f4:f1:ef:4c:e0:69:
4c:e1:78:b2:72:55:41:2f:62:73:75:2b:fa:25:5b:5d:7e:7b:
b5:38:97:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:34 2025 by rpki-client