Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: bbe1KcLO/kXDTdXgOrLCvEdSacN5YUF/CNJIAGW7yAU=
Subject key identifier: 3A:92:D2:FB:BD:EA:A9:DB:3D:54:9A:E3:F4:0C:A1:F5:39:F6:88:03
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 0199FAD8253C69BA203DDF5644CBD1C93C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 05:01:33 +0000
Manifest this update: Sun 19 Oct 2025 05:01:33 +0000
Manifest next update: Mon 20 Oct 2025 05:01:33 +0000
Files and hashes: 1: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (hash: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=)
2: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: T1seu4O2WNAwhhgcgnNWWFPigEr9H3r5PC5wcVKLiWw=)
3: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (hash: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:25:3c:69:ba:20:3d:df:56:44:cb:d1:c9:3c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Oct 19 05:01:33 2025 GMT
Not After : Oct 20 05:01:33 2025 GMT
Subject: CN=3a92d2fbbdeaa9db3d549ae3f40ca1f539f68803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e3:e2:65:cb:6b:6a:d8:2a:af:20:d9:55:48:
39:00:86:94:16:fe:1d:d2:d5:6c:01:b3:67:f4:f5:
b9:a7:43:98:23:25:cd:7f:b1:68:31:50:da:d4:57:
9e:d9:0a:d5:bb:c6:a7:dd:e2:c6:de:5c:e7:45:3a:
c0:6c:46:57:19:27:22:82:60:36:d3:13:24:7d:1f:
51:6c:5a:e1:13:af:62:ab:d5:d5:25:40:ae:e4:69:
a0:86:43:07:29:fd:c5:bb:60:a4:04:16:a4:bd:4f:
68:b8:3f:6c:84:d9:7e:c2:da:4c:d0:ab:7e:a3:8f:
1b:cc:ab:3d:41:85:79:44:b6:0a:98:97:3f:a6:23:
5c:4e:c1:1c:c3:06:58:a0:1b:a5:a8:0d:11:86:dc:
c9:57:c5:a9:44:4b:9e:8b:ca:06:39:a2:14:d0:4d:
a8:17:4a:89:26:fc:ca:c7:e7:df:d4:27:1b:b0:c6:
cb:76:3c:f6:d4:d7:3d:54:fa:21:e2:40:4d:ea:78:
ad:7f:54:93:75:f8:8b:73:90:23:53:68:e2:df:16:
62:c7:0d:fc:e6:9f:4f:4a:5a:31:fb:f3:6f:f0:4f:
4d:ce:6a:ea:80:40:d2:79:ab:e8:98:ab:69:81:c1:
c2:e1:dc:b0:b4:d7:92:39:84:9c:8b:c5:70:17:a8:
d0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:92:D2:FB:BD:EA:A9:DB:3D:54:9A:E3:F4:0C:A1:F5:39:F6:88:03
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7d:c0:3e:21:e8:f2:ce:2e:7b:3f:f7:fd:31:0e:6f:48:92:
8b:1f:ac:88:c6:98:9f:c0:23:99:5d:6b:f4:c6:2f:1e:fe:3f:
08:3e:a5:97:08:a3:1d:57:da:aa:c0:6b:a0:da:7c:4d:71:7e:
93:c2:bc:e1:c4:40:7c:6b:c3:f9:fa:e9:df:2c:12:f6:3c:9d:
24:97:30:dc:b6:e6:f5:60:ad:64:ae:bd:3f:eb:ba:45:1d:2b:
57:84:70:33:2b:27:fc:3b:79:a6:c5:1a:65:39:f7:9e:8b:f1:
75:ab:fa:82:90:c3:35:13:55:b5:7f:93:40:8a:18:b4:bb:14:
00:01:be:6b:14:45:3a:8f:74:93:fc:51:83:49:0e:bd:ab:5a:
2f:93:d1:a1:f7:5a:15:60:1e:dd:f2:74:c1:0d:80:90:61:b1:
b1:d5:5c:a0:66:d9:5f:41:ae:d0:e3:92:3a:ba:92:d1:d8:65:
14:4b:dd:ff:9d:8c:45:9a:e1:47:d9:b1:05:69:d3:65:5f:38:
a4:6c:b6:21:6b:b7:1c:39:9d:e0:db:fd:09:8e:ae:32:37:61:
64:a7:11:7c:45:e2:ba:5f:38:41:66:d6:f0:6f:8b:c8:aa:c2:
5f:5f:0e:12:95:80:ff:31:2f:59:24:00:4b:38:18:38:80:d0:
bb:b3:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:16 2025 by rpki-client