
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: liJasZ2/Kj7PtXxFCS33OlOS4LaRO+cKBYqfV87qC4A=
Subject key identifier: 87:B3:F8:F2:FC:3B:57:8D:96:5B:CE:0D:A4:EC:8B:4D:CB:87:3F:39
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 0199C268E567052E20E48FD76B2C36740073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 02BA
Signing time: Wed 08 Oct 2025 06:01:18 +0000
Manifest this update: Wed 08 Oct 2025 06:01:18 +0000
Manifest next update: Thu 09 Oct 2025 06:01:18 +0000
Files and hashes: 1: 3412M_EtpZn6LWYcU4f3oIK6xWg.roa (hash: 0CHNt2RVOJ0fr7rsHxwpKCupnQAvdSeftNGlZDlJ/Ag=)
2: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: 2vi1NjMbJOZC+EBljC8q0zKO3mEouyCzjOGGeA2DRjw=)
3: S1nE70948dC5DoQ6HvBbscWKaKw.roa (hash: rrKy+sC3QNlyr1Y5CMFJM8t+NCjq84nz7sTi50q+o50=)
4: g6q7q2HLmrL68PDSTTyRIYBNcJY.roa (hash: eTY6Q+eiIrBv9YE0+f1h1CVgS/oOAfzZcA42kSmU6+0=)
5: tVe9NnJO2Z95ZTZ1L61RChKUAa0.roa (hash: f4jqfRGm53uIrMSNBpcr7YiVL+9kyYDEvd948D1JBYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:68:e5:67:05:2e:20:e4:8f:d7:6b:2c:36:74:00:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Oct 8 06:01:18 2025 GMT
Not After : Oct 9 06:01:18 2025 GMT
Subject: CN=87b3f8f2fc3b578d965bce0da4ec8b4dcb873f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:1a:57:6b:0a:43:1c:41:b3:bd:7b:89:a3:
07:fb:71:b6:d8:59:d5:06:c9:1e:79:91:ca:b3:a3:
46:f1:f4:0b:d5:83:71:c9:ee:b0:c7:c8:a6:9b:cd:
d3:90:ef:40:8e:59:bf:ce:06:e7:39:d2:d4:07:04:
2b:2b:b8:58:e0:8b:3f:bf:ac:45:28:1e:7a:5c:f1:
b9:23:18:96:aa:1c:27:43:ea:ba:04:c2:71:71:0a:
fb:33:ea:00:62:ad:f0:1d:fe:98:d2:15:7e:c9:ef:
a0:07:7c:dc:3c:b7:4d:88:d7:41:d1:06:80:0d:c2:
1a:41:25:5c:06:39:a1:17:12:b9:0d:26:ff:47:9e:
c4:db:a6:f1:27:47:05:ea:65:92:e2:e0:de:e4:c2:
20:26:7e:92:c7:a2:75:8e:2f:31:ce:a1:51:5b:56:
dc:2e:74:40:51:13:c6:3f:9a:d0:4d:26:29:62:2c:
34:58:38:24:da:22:e3:ca:3a:72:3b:15:f4:48:c7:
e2:51:00:0e:1b:2b:2e:21:a8:5f:7d:b7:3f:e5:39:
75:ae:02:de:92:c9:b6:e3:e3:14:8d:5f:19:7e:66:
71:98:bf:87:b6:53:d9:de:d1:18:72:e0:3f:44:6e:
18:cb:27:a7:ba:4b:87:a6:fe:89:6d:56:07:b7:51:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B3:F8:F2:FC:3B:57:8D:96:5B:CE:0D:A4:EC:8B:4D:CB:87:3F:39
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f2:d4:a9:f4:12:63:11:7b:88:fd:e3:66:58:b3:dc:d6:40:
70:49:0b:60:be:7b:e7:7d:6f:ac:59:28:1e:6d:dc:30:19:ff:
cb:ea:13:9a:21:d0:c1:58:5e:17:3f:02:51:e7:3f:fc:95:5f:
b5:bf:26:36:be:c5:85:9f:60:f6:c3:cf:79:e2:33:81:ef:c2:
93:db:9f:ed:18:de:e1:ac:ca:61:37:31:78:6f:cd:25:76:29:
cb:e7:0e:87:ec:64:89:40:52:d3:b0:dc:f0:80:20:06:51:68:
91:d1:4d:9f:e0:2d:3f:3f:94:b0:69:83:eb:c3:da:54:7a:d9:
61:28:1f:a2:02:2f:a2:8f:e7:eb:49:5b:c6:27:b4:18:e5:f4:
7a:8d:c4:f6:5c:be:d2:0c:a0:8b:5b:bb:14:fd:bc:6b:27:a8:
30:2e:6d:60:1b:f8:1d:32:f9:fa:85:64:37:05:89:a7:84:3c:
26:7e:cb:ba:eb:56:59:f7:a2:d9:c7:20:09:79:2f:74:88:e6:
e0:28:89:61:71:32:de:e0:8a:27:4f:73:38:cc:4e:0d:b3:e9:
af:65:99:4a:ba:a1:e5:88:1f:be:77:3a:72:5c:14:69:25:63:
e4:e9:39:95:4e:64:58:e2:e7:76:26:22:5e:c9:09:9f:f3:18:
49:0c:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:40:07 2025 by rpki-client