Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File: hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier: +pG14LrE7SiNV/lCkdwEWVd3A189ru5HA/kvmaAnvls=
Subject key identifier: 9C:31:80:26:EE:35:CF:44:CC:B3:E0:BA:66:C2:FE:21:99:25:03:93
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 0199C48DCE3E9F697D4AD1AB9BB9CE456DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number: 12E9
Signing time: Wed 08 Oct 2025 16:00:51 +0000
Manifest this update: Wed 08 Oct 2025 16:00:51 +0000
Manifest next update: Thu 09 Oct 2025 16:00:51 +0000
Files and hashes: 1: EAjdVmmPDgRsaYdJzqxZsWJ1dtQ.roa (hash: MpPa88zI8gAyzjuIqd3qZ9dmTTo9CAG0jQ+czPWKrY0=)
2: ZpIa8d84ZFXt_ZFQqAeQWbEn8cE.roa (hash: yg+iHdLIlyvv1zJT3FKVPdTj2ezKdgH8bzRxXJFfD+M=)
3: fw-9UYbBKED3FPK1cxwcKkMCFm0.roa (hash: jRUQB1Fr5hDxlkTn2IWZrgIhUE7mB/LkFsYZT2IUhmk=)
4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: zANAyhEPo0yucs0Mh2CYAK0GMXRdrK3ukPlfup7XPC0=)
5: pT_R2pT5fkigCUc46LgmyNvu26w.roa (hash: f5EDq84NioAgiZfb2l0opuOPnSnHoDIa4FyPu++58Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:8d:ce:3e:9f:69:7d:4a:d1:ab:9b:b9:ce:45:6d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Oct 8 16:00:51 2025 GMT
Not After : Oct 9 16:00:51 2025 GMT
Subject: CN=9c318026ee35cf44ccb3e0ba66c2fe2199250393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:41:3d:48:43:45:33:fc:3c:4f:a3:75:a4:
25:93:6a:ec:10:43:8f:0e:67:9c:c5:24:fb:ec:a6:
7c:30:8f:5c:53:a3:41:9b:e0:2b:c8:6a:76:5b:03:
85:9e:db:21:22:96:86:75:b7:80:c1:bc:5a:28:03:
8b:74:e1:52:0e:84:5f:cf:8a:c5:99:98:0e:97:12:
61:60:96:40:14:55:f0:19:49:a4:4c:b0:61:04:20:
01:d9:1e:67:5b:f9:13:89:98:aa:c0:7e:c7:68:79:
3b:9c:9f:00:e3:07:6a:aa:a6:8c:47:d4:79:ad:21:
42:13:5a:e3:dc:7d:f7:1f:32:02:79:d3:ba:88:9c:
ea:54:43:d4:11:a2:00:0d:ec:34:9a:00:59:52:e3:
a4:18:bd:72:d0:4e:ac:58:f6:f2:ab:31:92:d3:8e:
f0:2e:83:0e:77:7b:57:bc:fc:8e:0c:9f:3b:71:55:
52:04:16:0a:cf:b5:f9:60:c2:ee:be:50:b5:30:c1:
3b:2b:a1:f7:cd:46:b9:10:37:22:16:8c:4f:31:90:
2d:3a:2f:54:3b:e3:63:7e:c0:2c:cb:97:be:68:9e:
27:5a:57:68:30:3f:01:3e:12:a2:54:aa:06:d5:fb:
db:e4:63:43:95:d8:cc:51:f9:60:b2:2d:84:df:7a:
eb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:31:80:26:EE:35:CF:44:CC:B3:E0:BA:66:C2:FE:21:99:25:03:93
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7d:86:ab:95:f4:e4:5a:1a:af:ec:18:1f:9b:e3:96:ed:88:
7e:14:e2:ac:e8:48:46:39:54:d2:85:06:7c:15:99:8a:e6:f5:
1f:26:95:65:b6:8f:15:32:d5:2f:54:82:c8:98:c7:f1:a7:4d:
5e:cf:8f:3e:17:06:cd:73:b0:0c:f6:fb:8d:9f:66:96:a2:e0:
50:43:c3:2f:8f:8c:60:99:95:75:ac:6a:2d:c8:5e:f3:35:1c:
bb:e0:fe:1d:7a:0b:27:61:dd:39:13:7c:05:90:09:0c:ec:41:
0f:99:c0:46:a2:c3:5b:23:14:74:50:5d:63:3f:19:bb:64:f6:
06:03:9e:c8:27:98:56:5d:d5:9c:e4:5c:9e:6f:7f:b2:eb:23:
08:7f:06:3a:0c:d6:03:f0:13:b5:f0:0f:bc:02:72:6c:2f:8f:
0f:ae:eb:ff:05:aa:3f:90:bd:9b:dc:c5:c9:d9:6c:8b:9e:b7:
4a:37:37:79:01:36:96:36:3c:6f:b1:f4:c4:0e:5e:7e:7b:3d:
ce:ce:96:72:b1:58:3c:c0:47:5b:5b:11:71:db:9e:04:b6:2f:
f8:99:ad:ef:d2:6f:07:e1:7e:b8:a2:36:6c:43:dd:86:35:f0:
b0:56:de:6b:07:73:1f:da:57:49:2b:12:40:e4:82:7d:ed:6d:
d2:09:69:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:22:57 2025 by rpki-client