Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
File: rHpOXEMf9seeT1vRtGsF-fRBEM4.mft (raw, json)
Hash identifier: EVVhR9EvcOg+xB63x7U2ov8jrPdBKmllE4wEJ/w4uRQ=
Subject key identifier: C9:1D:A1:52:3A:0D:2C:A5:3F:47:0B:CA:4F:22:DB:17:93:B2:57:2C
Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Certificate serial: 019A0035772024701C46887B97226C6896C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
Manifest number: 0D81
Signing time: Mon 20 Oct 2025 06:01:35 +0000
Manifest this update: Mon 20 Oct 2025 06:01:35 +0000
Manifest next update: Tue 21 Oct 2025 06:01:35 +0000
Files and hashes: 1: YFU0rK0Che90IboZIqxr-FhxEZs.roa (hash: +N2ECLyQEU3So4t+LKUIhIdvw7PoPWjMAcQERFvIBbI=)
2: rHpOXEMf9seeT1vRtGsF-fRBEM4.crl (hash: LazUAdXmMvtQIIfFMu8js6310SuFHEEozaKIop48DY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:77:20:24:70:1c:46:88:7b:97:22:6c:68:96:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Validity
Not Before: Oct 20 06:01:35 2025 GMT
Not After : Oct 21 06:01:35 2025 GMT
Subject: CN=c91da1523a0d2ca53f470bca4f22db1793b2572c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:a8:a7:28:7a:45:ca:68:54:7a:83:70:6b:
9f:f9:3d:50:63:5a:e9:a7:b4:75:01:ff:66:a5:59:
4b:5d:58:6b:9d:96:da:31:75:a8:c5:8d:6c:ae:e4:
c2:30:8a:dc:e1:2e:e8:99:e1:60:0d:03:a7:81:1c:
9f:f6:3f:38:21:b5:d9:1e:4b:49:a8:cf:62:8c:ba:
b2:f5:50:b6:af:8b:c7:f8:59:ff:85:cf:6b:f0:b5:
7b:7f:38:0d:9a:f2:2a:77:a7:01:9f:de:11:d3:1f:
49:a1:f0:65:fb:25:d1:6c:82:d0:80:a2:7b:eb:04:
c5:d2:ad:2d:39:77:83:b3:34:7d:98:17:4f:41:c6:
82:8f:4d:6f:ab:29:0c:06:3d:49:b4:41:aa:ba:fa:
73:5d:84:a5:58:8f:86:7a:6f:a6:47:8e:a6:57:2b:
fc:32:47:44:6e:a6:7e:ad:7e:cf:d3:50:ff:c6:de:
19:2e:83:88:01:c7:8e:60:e8:fe:59:83:0f:23:d0:
7b:19:b6:7e:27:76:a3:37:4f:7c:8b:5a:48:ac:2c:
17:3d:6d:91:27:dc:44:0d:dc:0e:89:e8:1e:c6:90:
4d:fa:64:10:4f:dc:30:d3:bd:5b:ec:21:d5:ae:aa:
df:10:bc:49:0a:21:6e:26:ed:f5:b0:43:e4:fe:3e:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1D:A1:52:3A:0D:2C:A5:3F:47:0B:CA:4F:22:DB:17:93:B2:57:2C
X509v3 Authority Key Identifier:
keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d7:b7:05:61:11:7a:19:dc:93:ee:35:98:d7:53:ab:9b:44:
5e:50:d8:30:d6:a3:d4:a9:8d:00:4a:a0:a4:75:b5:3f:c4:0f:
ef:ba:b5:17:99:32:3c:e5:f9:67:09:d1:4f:44:79:8f:6f:3b:
df:7b:1d:1c:1e:1b:97:28:73:25:6b:ea:d5:ae:2e:7f:d6:67:
ae:9c:72:5e:e9:2b:66:0b:38:56:1c:97:68:6d:56:40:ca:64:
42:24:7b:8e:af:5a:b7:c2:2f:78:a6:9f:06:10:f6:64:16:04:
3d:92:93:14:1d:76:5d:77:c4:28:de:be:d9:26:94:f3:07:9d:
e3:13:f8:b0:97:1f:ba:69:47:bb:5c:05:ab:10:21:9e:cd:85:
15:27:1c:cb:f6:5f:e7:3a:e5:c5:d9:0a:50:5e:60:d6:1f:1f:
38:31:28:23:f1:47:f9:cd:c9:58:98:e0:e4:df:fc:f4:24:19:
96:8e:c7:26:09:b4:dc:57:f8:ef:89:5b:42:f9:0d:96:9a:86:
7a:6b:0c:c7:52:2b:e8:57:a7:53:5b:c9:f1:d6:75:37:b5:db:
f8:7f:b0:b6:c4:8a:b1:d0:bf:03:26:89:f5:6e:52:d3:83:87:
2d:8c:76:b1:83:b1:65:0e:4e:21:08:82:fb:6e:51:46:3f:dd:
a8:9e:9a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:36 2025 by rpki-client