Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: uwfrwcju5weIJTEo1fYcQWDozD264tHGCCLUMFOE1J8=
Subject key identifier: 60:A6:CC:13:A4:88:78:B6:E8:03:A0:06:30:0A:B7:76:54:6A:0F:60
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 0199FD348DD8503AE02A7021C288FC98FCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 16C7
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: 5dE_GC4RYmruYsEQCosEswqhvMw.roa (hash: PKjCYy3vCzlACHchkXt5SVZDwsnRqMCgtgL6CJOnCUg=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: ngg5Q7rhVT4wEWNvewi7PIXuK/OjZ0No1v/AUb9VxXw=)
3: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (hash: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8d:d8:50:3a:e0:2a:70:21:c2:88:fc:98:fc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=60a6cc13a48878b6e803a006300ab776546a0f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:2a:1f:a0:6e:32:0b:1e:4d:11:34:71:9f:
df:8e:99:c0:86:66:16:aa:02:ca:88:bb:45:d3:bb:
4f:36:9d:5e:70:03:bb:e0:16:e0:11:41:16:66:1a:
09:b1:55:49:cf:3e:01:01:1b:8c:27:21:e4:7d:ee:
41:e8:f8:02:a3:dd:5e:6a:7a:de:3f:14:70:e0:c6:
8f:85:a7:89:53:55:55:af:e6:b1:0f:59:41:f5:3b:
19:7e:2e:38:a1:f2:f6:fb:18:0f:69:9e:58:09:6c:
5d:da:13:cb:81:cb:11:bd:74:3b:92:9b:8b:10:ac:
c4:bf:a4:05:d9:c1:11:4a:1f:5e:5a:72:44:48:28:
13:f2:95:a9:11:d7:26:c6:2d:08:c5:57:49:d2:e8:
c0:04:ab:0a:fa:52:16:9e:0a:b2:b6:e7:6f:e0:92:
70:ce:d5:d6:c3:e5:15:12:66:bb:74:c8:46:1c:35:
02:8c:a5:6f:06:84:d1:34:25:9f:29:85:e5:e6:40:
a9:4c:a4:81:9f:97:32:dd:e5:21:d5:a2:53:bb:00:
2c:4c:d3:20:b9:66:7c:0b:b7:9e:8d:ab:20:52:8b:
4c:c6:d7:05:2a:21:71:60:7e:b2:49:0f:ee:37:a9:
7b:8f:9f:2e:f7:d3:08:d1:66:0b:86:dd:59:3a:c5:
84:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A6:CC:13:A4:88:78:B6:E8:03:A0:06:30:0A:B7:76:54:6A:0F:60
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ef:66:69:c5:a4:cf:75:f4:08:da:b3:24:ae:cf:48:7b:79:
26:02:a3:07:58:0d:85:30:17:05:d7:65:b8:e3:d2:a8:42:b7:
6d:a8:89:9c:f2:74:77:51:70:cd:af:9a:47:43:5e:68:a2:f3:
75:f5:3c:d0:10:81:c4:e1:95:22:13:c3:50:d9:92:78:61:e3:
89:ed:12:8c:36:13:ad:85:0c:5d:cc:a1:39:bc:ec:c1:e8:2b:
10:ab:61:f0:d8:d8:21:8e:cb:4e:47:0d:37:5a:1e:6e:07:6b:
97:9d:61:54:61:ad:21:a9:71:fe:1e:75:bb:58:96:ea:2e:75:
37:89:a4:0f:cf:06:40:e7:8e:17:33:8f:e2:cb:59:70:5e:b2:
e3:64:6e:15:d0:89:10:c3:5e:18:01:32:fc:82:88:66:26:6b:
06:cc:82:1a:7a:71:c2:27:d3:c3:6a:be:7d:91:76:92:2c:be:
ae:af:13:0a:87:40:3c:6d:ea:8a:ca:cf:91:2e:d3:38:a5:8e:
26:18:a8:69:06:38:3f:a5:b9:c9:11:ee:b0:79:af:51:4d:f5:
b7:b1:50:e1:61:2c:ec:9c:bb:13:bf:ec:e4:d1:52:60:2b:4d:
09:71:e3:9b:f2:d9:ca:c6:17:a1:dc:b8:f0:8a:72:4c:6b:f9:
aa:50:91:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:52 2025 by rpki-client