Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
File: R_hjAUxgM_HYkkKz5elWFIn5wmo.mft (raw, json)
Hash identifier: Nu1HEcMdE61RSFDexuIqiJBVAzjiPV88ARbFEeDljWE=
Subject key identifier: F0:05:FD:07:8D:25:0E:BC:E2:08:84:4A:99:0A:12:AF:44:7C:F1:9D
Authority key identifier: 47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
Certificate issuer: /CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Certificate serial: 019A006C3C438677D3F8177F5D3B7C1D1BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
Manifest number: C7
Signing time: Mon 20 Oct 2025 07:01:24 +0000
Manifest this update: Mon 20 Oct 2025 07:01:24 +0000
Manifest next update: Tue 21 Oct 2025 07:01:24 +0000
Files and hashes: 1: B9bjJc5Oae9PEKPXIiXsKsSs9WQ.roa (hash: KKshRszJ3ZpgC0vij+vjmzbzFw7agfxG++MlKjyF07Y=)
2: R_hjAUxgM_HYkkKz5elWFIn5wmo.crl (hash: V29PS0+Ghoez9vUgW3EA4Efv+rnye5qkGBUV0efRqCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:3c:43:86:77:d3:f8:17:7f:5d:3b:7c:1d:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Validity
Not Before: Oct 20 07:01:24 2025 GMT
Not After : Oct 21 07:01:24 2025 GMT
Subject: CN=f005fd078d250ebce208844a990a12af447cf19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:4e:79:ff:5f:46:7b:bf:b1:2d:21:7f:75:
2b:bd:43:4e:a9:bf:a9:52:c1:d4:86:c4:7c:13:50:
db:46:87:12:29:94:90:26:db:c8:e7:a0:92:68:cd:
db:1c:57:97:78:32:be:04:e3:76:3a:8e:7b:de:81:
d5:4f:5b:f9:8b:b9:b9:c1:e6:54:2b:b6:b1:36:00:
ad:76:a3:37:3d:5d:a5:c9:b0:a3:0c:53:48:ed:33:
de:b3:74:a5:a7:52:2b:fb:24:58:60:b0:61:64:ba:
f1:61:cd:12:66:f1:03:1a:f2:a4:d0:9d:2a:63:07:
c2:8c:9f:49:25:1a:ed:d4:c2:2d:0d:3b:2d:0f:ab:
0a:84:4d:68:e1:1e:73:81:2d:8f:58:77:76:23:76:
95:e4:02:ea:eb:47:b6:ca:30:a3:64:98:c1:79:bb:
44:9d:a7:77:a9:be:1b:21:fe:4c:e4:11:d7:d5:6e:
0d:f2:dd:77:72:cd:32:e5:97:a3:26:05:4c:41:c6:
c7:39:0a:f5:09:07:84:d6:cf:a1:0c:3d:69:49:2e:
b7:9f:19:b6:f1:12:8b:17:1a:f9:4a:fa:52:06:51:
78:a9:70:79:8c:25:f5:81:17:16:50:d3:82:f1:9a:
54:21:97:07:4e:14:d3:38:d1:2f:cc:4b:c6:a9:84:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:05:FD:07:8D:25:0E:BC:E2:08:84:4A:99:0A:12:AF:44:7C:F1:9D
X509v3 Authority Key Identifier:
keyid:47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ab:f2:2c:1a:33:8d:a0:ea:f9:36:11:63:ee:04:c0:90:24:
9b:96:a3:68:f0:ca:b6:ec:aa:c8:b1:d2:56:fb:14:a9:e5:0d:
4f:c8:d1:ca:58:e1:38:94:8e:f9:d4:99:2c:ba:6a:9c:69:1e:
76:94:9b:3c:94:d0:8c:fb:43:2b:bd:f6:7e:63:a6:da:37:5d:
9f:b4:a7:89:16:dc:9d:b8:a0:be:08:52:b5:47:cd:80:cc:27:
0b:93:c7:1a:0f:d2:b2:3f:b3:4a:e8:3f:b6:ba:50:07:b4:4a:
19:5d:d2:12:f5:de:8d:aa:06:7a:26:a9:d3:52:7f:dc:1b:56:
6d:94:6a:08:6d:54:8a:1e:e8:0d:a4:9b:e3:4b:32:04:9b:ea:
83:dd:1c:ab:df:22:a9:f9:92:03:91:54:09:17:2f:94:84:4b:
cd:4c:4b:7d:3c:eb:49:cc:79:18:30:b7:c4:2d:c3:0e:26:37:
b0:24:aa:4d:41:ea:79:45:77:08:bf:e3:90:b4:98:02:5a:a3:
16:d4:f1:4c:8b:14:49:ad:b3:f1:2b:a7:9e:74:79:41:77:97:
4b:76:0d:74:5f:a2:7b:8e:34:d3:8d:5a:5a:7e:13:67:ca:81:
d0:a4:ec:4e:1e:a3:90:e3:29:27:5d:a4:54:3b:a4:18:1d:96:
a1:ee:cb:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbDxDhnfT+Bd/XTt8HRugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Zjg2MzAxNGM2MDMzZjFkODkyNDJiM2U1ZTk1NjE0ODlm
OWMyNmEwHhcNMjUxMDIwMDcwMTI0WhcNMjUxMDIxMDcwMTI0WjAzMTEwLwYDVQQD
EyhmMDA1ZmQwNzhkMjUwZWJjZTIwODg0NGE5OTBhMTJhZjQ0N2NmMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9VOef9fRnu/sS0hf3UrvUNOqb+p
UsHUhsR8E1DbRocSKZSQJtvI56CSaM3bHFeXeDK+BON2Oo573oHVT1v5i7m5weZU
K7axNgCtdqM3PV2lybCjDFNI7TPes3Slp1Ir+yRYYLBhZLrxYc0SZvEDGvKk0J0q
YwfCjJ9JJRrt1MItDTstD6sKhE1o4R5zgS2PWHd2I3aV5ALq60e2yjCjZJjBebtE
nad3qb4bIf5M5BHX1W4N8t13cs0y5ZejJgVMQcbHOQr1CQeE1s+hDD1pSS63nxm2
8RKLFxr5SvpSBlF4qXB5jCX1gRcWUNOC8ZpUIZcHThTTONEvzEvGqYT1twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAF/QeNJQ684giESpkKEq9EfPGdMB8GA1UdIwQY
MBaAFEf4YwFMYDPx2JJCs+XpVhSJ+cJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUl9oakFVeGdNX0hZa2tLejVlbFdGSW41d21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83OGVjODktYmJkNy00NDAzLTgzMjUt
OTgzZGVjMzRiZTRiLzEvUl9oakFVeGdNX0hZa2tLejVlbFdGSW41d21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83OGVjODktYmJkNy00NDAzLTgzMjUtOTgzZGVjMzRiZTRi
LzEvUl9oakFVeGdNX0hZa2tLejVlbFdGSW41d21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6vyLBoz
jaDq+TYRY+4EwJAkm5ajaPDKtuyqyLHSVvsUqeUNT8jRyljhOJSO+dSZLLpqnGke
dpSbPJTQjPtDK732fmOm2jddn7SniRbcnbigvghStUfNgMwnC5PHGg/Ssj+zSug/
trpQB7RKGV3SEvXejaoGeiap01J/3BtWbZRqCG1Uih7oDaSb40syBJvqg90cq98i
qfmSA5FUCRcvlIRLzUxLfTzrScx5GDC3xC3DDiY3sCSqTUHqeUV3CL/jkLSYAlqj
FtTxTIsUSa2z8SunnnR5QXeXS3YNdF+ie440041aWn4TZ8qB0KTsTh6jkOMpJ12k
VDukGB2Woe7Ltw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:32:03 2025 by rpki-client