Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: dfT66N7W35gtfroE/2AepZNzmNX+XG+fBVi8B+xlzGQ=
Subject key identifier: F5:A0:10:B0:45:7F:06:0C:C2:C5:A0:04:C8:F5:0C:BC:A2:64:61:DD
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 0199FCFD23E36C3C3C56FB65C0B4AA839E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:12 +0000
Manifest this update: Sun 19 Oct 2025 15:01:12 +0000
Manifest next update: Mon 20 Oct 2025 15:01:12 +0000
Files and hashes: 1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=)
2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: VSyBrbw7XtjcNBgXVw0lFeS3Azc87S9W/7FxdwmZrIg=)
4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:23:e3:6c:3c:3c:56:fb:65:c0:b4:aa:83:9e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Oct 19 15:01:12 2025 GMT
Not After : Oct 20 15:01:12 2025 GMT
Subject: CN=f5a010b0457f060cc2c5a004c8f50cbca26461dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:07:1c:34:47:fe:58:29:0c:8c:98:6a:30:
00:bd:27:0d:54:8d:f0:c7:f4:80:82:5c:6f:7c:34:
0c:e3:83:b3:e1:96:db:f6:b3:88:fd:a2:a9:d8:2e:
41:7c:d0:30:d4:6e:ef:93:35:49:df:d7:1b:c1:91:
90:d4:c1:b6:63:4f:01:23:c7:28:99:2a:bb:4e:3d:
46:33:b1:70:73:36:15:ac:ea:04:83:4c:92:dd:10:
7f:43:de:38:7a:6c:2f:d9:73:7b:3a:18:8e:c1:8b:
d0:b4:9f:f3:b7:6f:dc:fc:21:e2:78:60:41:af:d2:
08:94:53:9a:1f:3d:b7:38:86:ad:93:17:da:9d:78:
90:b9:35:45:5b:1d:86:c9:0e:01:f5:1a:a4:22:fa:
c0:62:52:4b:92:b2:fe:fb:8a:67:f3:8c:2e:fa:72:
22:0c:55:13:ee:b8:bb:93:be:83:20:3a:7c:5a:eb:
99:2b:c9:dc:6f:ac:8b:70:70:d8:ad:cb:d0:ce:7a:
36:0e:c4:d5:00:0a:e6:c3:32:5c:6e:a0:90:11:f8:
bb:37:ac:3f:d7:2c:04:d7:5a:de:9b:f3:30:83:80:
e8:38:5e:44:70:e5:aa:9f:3b:3d:21:80:bc:aa:9b:
c3:e0:07:20:58:ec:5a:ea:f7:e8:57:b6:33:66:99:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A0:10:B0:45:7F:06:0C:C2:C5:A0:04:C8:F5:0C:BC:A2:64:61:DD
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:25:6c:06:67:88:37:7d:a4:90:02:81:16:7a:08:2a:c1:94:
c8:e9:61:21:1b:10:b8:be:ad:6e:e9:31:a8:03:d3:6f:0b:d1:
99:7f:a1:ca:33:5a:75:e7:52:85:86:a3:1e:92:45:d0:f0:4c:
07:6a:e9:bd:d3:a9:95:34:fb:9c:ef:12:35:70:01:49:18:18:
81:0c:4d:ab:1a:f8:11:53:7f:40:33:0e:cf:a9:35:01:15:c9:
a6:19:a6:5e:cd:63:f8:16:8f:0d:ad:68:d6:b7:eb:7b:7d:1b:
c7:6c:68:b7:19:12:ab:6a:2a:1c:0e:3c:33:c4:90:39:ed:b4:
08:1e:90:48:de:88:bf:f3:b8:d9:a7:64:51:0e:01:46:12:3c:
b8:a7:8f:24:ca:7a:c1:cb:1d:f6:a6:40:20:9f:5f:01:00:ca:
43:ca:7c:1a:b4:31:78:c8:3a:9e:43:3e:1f:eb:cd:49:c7:81:
e9:11:e4:f1:d7:19:0b:ec:97:02:41:be:8f:b1:b1:8d:37:33:
22:e8:0b:08:91:61:9d:e1:7d:90:57:4c:6b:00:94:5d:af:dd:
57:89:3b:74:24:68:59:4a:0d:d6:e7:b0:28:64:1f:5b:e9:24:
9b:9b:54:71:d4:fb:7d:92:28:34:c4:cc:1b:50:0d:cd:c4:0d:
f6:fe:02:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:43 2025 by rpki-client