Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json)
Hash identifier: fn1eQNuHu23mlgrR0fMGqE+sQy1oemeIhMeMAFStQf4=
Subject key identifier: 90:9E:D1:BA:0A:B8:2A:6A:04:74:66:52:47:08:84:3F:97:43:F6:63
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 0199FDD90DE1C1F8930F3C1C4BCB2167E725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
Manifest number: 16F0
Signing time: Sun 19 Oct 2025 19:01:24 +0000
Manifest this update: Sun 19 Oct 2025 19:01:24 +0000
Manifest next update: Mon 20 Oct 2025 19:01:24 +0000
Files and hashes: 1: IZeoqEY95eSVV0eYYLX8T3tHlCs.roa (hash: LO4oh4VYMguVhAQpzzJsbYN82/uMVEn2vgRLSpasT1s=)
2: LJnxaD0i6KMHQc1A1Myl7JzH7gk.roa (hash: BOqHp3/8Lrk2VNXTgZj56poMzxkbv3v/wNmy6/SirSw=)
3: NewZ8pp4liRlRqK_bUM9ux7lUdY.roa (hash: e2V20fh5Bna/npvAqL/4q48RnUBDa1PMa1ud3KkuSzU=)
4: OMAWMgjFkntxY9hjh7x9HjopsUQ.roa (hash: fC4Wynjh9RIf9v3k1CSQsuZtxFupNj1veyw3ZlhI/Jw=)
5: QHrhoLDtZR3zPElOqqmMq3qzkao.roa (hash: NXLg9El+SZKbOxc9Fad+2P9R3XvjaMUu4aKcgfvxLco=)
6: VTgIeAjnu6QDITPutn3ZYiX28hw.roa (hash: 1qNSFP6+K7IEMjkOk6A/QLlgZfO6RHOCGRUYacl+A9I=)
7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: QK7lf9Vc2gAvPiBIGy2paKsF6wJpQPjrfVQnjNcMG0s=)
8: kYOzNphxQuuMN-KEH5LcxfVfKho.roa (hash: ZqTwzdBEFFNTdg6mPtQfwSsq0u9CJRd378DWfNVX+no=)
9: wYF_ylL7pnBo9OaIzACNhn9RjFU.roa (hash: RTPtjL/eZ7d6GsDAAsmLFavUlJqeMCconuqgqwEBbU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:0d:e1:c1:f8:93:0f:3c:1c:4b:cb:21:67:e7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Oct 19 19:01:24 2025 GMT
Not After : Oct 20 19:01:24 2025 GMT
Subject: CN=909ed1ba0ab82a6a047466524708843f9743f663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:77:a8:c5:12:60:cf:bb:45:2c:4d:9a:a0:
74:6a:85:7e:f2:60:9c:ca:29:d8:29:e4:5d:e6:34:
90:00:ad:e3:59:0e:bd:b2:08:05:40:30:36:3c:3e:
16:3c:eb:80:26:11:78:fa:0d:ce:d8:84:00:47:84:
7a:15:db:1e:e3:23:95:be:f1:90:a4:88:65:94:f0:
68:36:4a:38:dd:2d:48:1f:3a:f6:c6:dd:a1:23:50:
62:e7:aa:37:f2:29:ec:d8:59:6d:1b:93:1b:14:59:
ed:18:fc:d3:af:56:81:22:0a:5a:39:01:f7:3a:62:
b4:58:07:b1:03:69:22:c7:db:61:94:11:f8:d1:ee:
3c:d2:03:3c:f2:1c:74:78:18:1e:95:51:88:8a:77:
41:4a:2a:91:8f:20:db:f9:0f:58:1d:9d:55:bc:19:
dc:2d:d4:ec:ed:c5:1d:5d:07:02:b7:cf:29:e5:4d:
24:c8:98:c9:f9:f4:16:43:21:99:f4:f1:29:3f:25:
36:17:0d:71:ea:f3:5a:3c:2a:36:76:27:ea:0a:ad:
59:30:c0:ba:36:dd:3f:fe:05:f2:9c:56:9b:6e:b4:
2b:ba:4d:fb:61:85:ca:5d:b8:5e:6b:8c:57:85:cf:
21:84:96:07:54:84:f2:95:1d:1f:5c:dd:e3:57:46:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9E:D1:BA:0A:B8:2A:6A:04:74:66:52:47:08:84:3F:97:43:F6:63
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:72:e4:2d:bb:54:a1:c3:9e:66:6f:2c:49:4c:97:71:92:4d:
b0:15:83:53:04:63:b1:66:88:e6:39:89:7c:97:b3:5c:84:5e:
bb:c0:7b:fa:4e:ac:2e:4b:86:fb:e7:1e:d0:18:61:d3:8b:f8:
20:d0:64:59:be:5e:79:c0:25:42:0a:85:c8:9e:c6:e3:1e:cc:
ce:95:19:fd:04:23:ee:11:30:2f:ac:5b:11:b3:87:cf:8c:bc:
87:08:20:70:ef:4f:b2:54:06:3c:76:1d:91:d6:5b:4b:92:90:
6d:8c:dd:54:1f:11:69:7e:62:a7:b6:42:6a:63:53:38:e6:b7:
23:e5:bd:ba:8d:8d:6c:da:aa:61:96:7e:c9:3a:1b:6c:9e:79:
b4:c1:b1:77:07:ca:79:2c:d3:5e:97:f7:d9:c1:d8:88:e7:ff:
92:2b:ee:9e:41:5d:3c:1d:ab:42:56:c2:e4:45:b8:27:77:f4:
84:08:74:e5:3e:b3:3c:18:64:fc:b3:7f:8c:31:2a:d0:f6:56:
f2:5a:8f:96:1c:ee:2a:cb:80:20:30:e1:21:b5:63:ec:70:83:
74:92:d3:95:74:93:6c:69:7d:86:1d:57:36:3c:9d:3a:42:ea:
dd:d9:45:f2:11:b5:a4:a0:89:c2:ef:61:44:c1:77:ab:37:64:
2a:57:38:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:37 2025 by rpki-client