Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: uq3qH+91zYe8nCTx0iTKveKuHP2MiTNAGC+EEewlN3I=
Subject key identifier: F9:16:8D:34:EC:FA:2E:42:F6:5B:7A:A1:2B:71:DA:D6:19:B4:C5:92
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 0199C4C4EDCBC6827D29E3BFAEE05FF82047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 16C4
Signing time: Wed 08 Oct 2025 17:01:04 +0000
Manifest this update: Wed 08 Oct 2025 17:01:04 +0000
Manifest next update: Thu 09 Oct 2025 17:01:04 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: 2fwtQfXqGTgwLDsvSCM71C4fwT5VQ8vufHkB3A8gKsQ=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:ed:cb:c6:82:7d:29:e3:bf:ae:e0:5f:f8:20:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Oct 8 17:01:04 2025 GMT
Not After : Oct 9 17:01:04 2025 GMT
Subject: CN=f9168d34ecfa2e42f65b7aa12b71dad619b4c592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:c9:b5:a7:3c:39:03:84:d1:03:77:37:54:
0e:ca:56:d0:16:8f:f8:fe:59:ab:7b:eb:9f:33:91:
1f:51:cb:80:77:30:bb:2e:fb:a9:64:e7:83:81:66:
de:d2:bc:df:41:3b:4b:63:1a:85:c7:b5:e7:9f:09:
82:6e:39:9d:2c:e8:5d:cc:a7:cb:be:d2:f8:6a:c1:
7b:8c:12:97:05:2f:f7:52:c8:89:1f:d1:7b:1a:77:
b9:37:56:ca:40:f1:52:c6:68:66:42:3d:5b:de:7b:
8e:d1:9d:af:0f:0d:b7:e1:9a:01:af:87:68:2e:c9:
d1:c1:03:dd:89:db:d3:96:98:4b:fc:9d:44:2f:d6:
19:0f:f5:ac:48:68:18:b9:9a:f1:1f:f8:06:e5:a6:
68:36:b7:4a:99:93:4f:a5:55:13:38:3c:c7:f3:5d:
a2:ed:0c:3f:1b:e6:41:92:ad:30:68:d4:40:f6:d9:
2e:41:af:3c:14:7b:5e:5f:3b:f5:a7:a4:aa:e0:a1:
e8:4a:ad:7a:86:f9:72:1f:0a:35:02:61:2c:bd:e5:
7c:c9:65:80:18:12:59:80:dc:02:37:b5:1f:09:37:
8a:1d:b0:d9:bd:8f:2f:64:3d:b4:d6:79:ef:10:15:
36:0a:93:a8:2d:68:ee:9c:20:4a:4e:f8:91:89:0e:
4a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:16:8D:34:EC:FA:2E:42:F6:5B:7A:A1:2B:71:DA:D6:19:B4:C5:92
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1e:4f:9a:76:d0:2f:b5:51:cd:89:1c:26:68:43:03:b2:10:
36:c2:93:9f:15:5c:d4:fe:98:46:dc:ce:d9:03:52:4a:d6:c2:
c8:c8:2d:18:03:82:ac:31:21:14:dd:fd:ab:dd:46:5f:21:d0:
6c:99:d6:ed:ac:d9:be:69:62:7c:f1:59:ba:f6:26:46:17:62:
85:ba:85:1f:55:fd:e7:76:82:4a:0b:59:dd:a1:28:ab:a8:a6:
09:be:f6:44:d6:3b:eb:44:99:1e:5d:51:46:65:ad:f5:fd:90:
91:1e:8e:1e:2e:9f:9f:f1:1e:9a:e4:82:4b:b8:2f:55:77:e2:
6e:71:4b:ff:5f:ed:b1:c4:c9:d6:6c:d1:7a:c4:b4:64:59:3b:
46:65:d8:4f:d2:8f:85:f0:4f:00:e3:5a:93:2d:7d:92:c4:c0:
70:9d:62:b6:30:f5:1a:8d:a3:90:65:09:1e:92:52:e2:c6:90:
cb:e1:e0:9b:b9:5a:76:18:87:23:d9:ff:f0:02:f8:49:88:2b:
7a:f6:31:60:1e:89:73:67:ef:90:2d:b5:0e:fc:13:7e:5c:8a:
a0:02:d2:d4:97:9b:f1:b4:61:42:94:f4:0e:00:13:11:4b:4e:
14:c7:a6:7e:4e:f1:5d:88:9f:ba:51:fe:36:5e:b6:a6:9c:e7:
f2:af:23:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:27:04 2025 by rpki-client