Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: N1e6C2rbG2W6Zui2GqE9SVoU10kGQS+yUj2jougeBKk=
Subject key identifier: E0:D0:E9:58:19:10:80:5D:EA:69:61:4E:57:B0:47:E1:B9:9B:19:42
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 0199FB0F1B425608FCB534EEA8E1F0C3F6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 1375
Signing time: Sun 19 Oct 2025 06:01:35 +0000
Manifest this update: Sun 19 Oct 2025 06:01:35 +0000
Manifest next update: Mon 20 Oct 2025 06:01:35 +0000
Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=)
2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=)
3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: qWZO8WYcjyyb0fbBQrYnxke0tFPtNSZCgVG8cUUMbRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:1b:42:56:08:fc:b5:34:ee:a8:e1:f0:c3:f6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Oct 19 06:01:35 2025 GMT
Not After : Oct 20 06:01:35 2025 GMT
Subject: CN=e0d0e9581910805dea69614e57b047e1b99b1942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:09:67:c1:24:46:be:68:24:b1:fc:c9:b2:
0e:3d:5d:c0:56:46:88:1d:d0:3a:c7:a8:8f:e8:d1:
8e:0b:73:71:44:c5:38:f7:51:5b:59:5f:99:6f:5b:
f9:28:f2:39:40:3c:be:67:c1:77:91:d9:73:8a:11:
01:89:ab:a2:ad:f0:2a:93:bd:76:d7:05:bc:51:e5:
f7:48:56:6a:d1:6e:d1:74:1d:fc:6b:68:19:a9:c9:
45:5f:97:e3:9f:75:39:72:df:6e:d8:ed:34:3e:fd:
91:a9:5d:9f:f1:01:94:92:e0:43:eb:a1:ae:3e:b0:
48:49:e9:12:2c:d5:f7:a2:33:ef:cf:d9:f1:24:5e:
a3:29:c8:ff:bc:2f:16:3a:af:9e:dc:06:49:c2:5b:
86:cd:b4:77:50:31:48:5e:89:b7:58:4a:21:43:b2:
05:6d:38:2d:e3:b9:44:2d:d9:cf:cd:0a:66:34:5f:
23:1b:7a:72:97:b3:13:8f:2b:e7:3d:68:45:56:98:
15:ea:9e:87:6e:f3:71:d6:87:f4:cd:b7:84:e0:31:
99:d5:0f:a5:fe:f2:d6:ee:e3:12:1c:b4:40:2f:52:
74:88:b0:67:10:63:e8:25:fc:49:88:54:89:a1:42:
f2:c5:19:ff:ed:d6:a9:3e:fe:a9:5e:ab:da:26:e4:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D0:E9:58:19:10:80:5D:EA:69:61:4E:57:B0:47:E1:B9:9B:19:42
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5f:cb:c7:7b:17:4d:34:2a:b7:63:cc:2e:85:c8:69:58:86:
71:1b:1b:3f:64:2e:f5:4e:bd:07:43:86:ad:1e:1d:4b:ab:c5:
10:27:4b:c0:ca:00:2f:e1:b2:92:e9:cc:2a:dd:da:c6:21:b3:
6f:65:e3:ce:80:ac:bb:9d:df:e5:0a:58:77:6d:1a:37:fd:ab:
75:37:42:f2:04:23:5e:f2:27:45:17:f2:ea:98:87:f9:f4:ce:
9d:cd:72:92:82:cb:c6:2c:4c:69:12:a9:c8:db:cf:fe:e9:b5:
0a:5b:bf:98:fe:41:12:07:ab:04:35:18:07:30:5e:51:49:05:
f8:88:b0:3e:21:59:8c:c7:d0:78:b1:30:8a:17:88:44:a5:1b:
dc:d2:ec:a9:ac:30:39:02:86:b5:46:bd:7e:c4:04:e6:70:54:
30:57:c7:c2:95:cb:88:2b:25:f5:33:69:9c:a7:10:07:a9:dd:
f3:94:0b:e8:59:8f:48:7d:9b:04:5c:2e:7d:59:c3:7a:3d:08:
23:db:59:68:9a:b9:6f:6b:ad:78:76:34:f1:37:4d:a2:14:7e:
ff:1b:ee:07:9d:56:79:eb:fd:2f:05:92:61:d5:ad:7f:a4:2b:
9e:28:17:ce:09:fc:db:0d:8d:9e:20:15:20:24:85:9d:83:73:
7d:99:e2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:16 2025 by rpki-client