Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: qTPN6WNCWBY6pR81EDBVhuHONUVrZVGqzbIWMRhKswo=
Subject key identifier: 78:37:48:02:13:9A:B0:F7:E0:E8:96:7E:DF:1C:1D:84:3A:84:0A:0A
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 019965B5EDDE2D062D2C5436DD08464EDDD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 169A
Signing time: Sat 20 Sep 2025 06:00:45 +0000
Manifest this update: Sat 20 Sep 2025 06:00:45 +0000
Manifest next update: Sun 21 Sep 2025 06:00:45 +0000
Files and hashes: 1: 2d0NREbfTK2FI7htmEEh4N4XLQs.roa (hash: EflrGXNj+c0/KROiAUAdkvP3FPssOcN4j+Wc2GCNRt8=)
2: RN4snQmQ10sMC0pt3uecgVuseDw.roa (hash: Sf04OwdvE8nAZA8tEzv2sgqcn/Ip+2j+x7sXM2qpNDA=)
3: TMFEuWpJtp-N546RTZSeOr_ihcc.roa (hash: 15tgIF1xV8iqz3lwud0LDIWMxNL1aGMOQ99+FVGNT5o=)
4: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: KaU83Pm3V2Urb4Pu9RVlvbbOcOfCQJH1IUkqm+04Eik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 00:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:b5:ed:de:2d:06:2d:2c:54:36:dd:08:46:4e:dd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Sep 20 06:00:45 2025 GMT
Not After : Sep 21 06:00:45 2025 GMT
Subject: CN=78374802139ab0f7e0e8967edf1c1d843a840a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:02:8f:41:43:36:b4:23:87:0a:41:48:f2:
9d:f2:2e:f2:88:00:cf:fe:54:77:62:80:ed:40:68:
57:0d:28:3f:f0:38:c7:ad:3c:87:43:40:0b:8b:2e:
cf:24:02:3b:70:b5:9c:b3:37:43:33:2a:47:20:e3:
5f:da:f0:e2:7e:02:19:07:c1:fa:2c:98:e8:d0:c5:
7f:ae:df:fd:93:5e:6b:69:a3:a3:ca:b7:80:e5:40:
7e:00:42:f7:d9:b7:09:53:1b:a3:3b:6c:a1:9a:4f:
e5:ab:24:27:c8:3c:1a:11:1e:c9:00:d8:54:40:6e:
ba:44:2c:d0:a3:89:77:1f:29:de:c3:8a:ae:f0:17:
96:78:36:4d:ba:1b:f8:8a:55:0d:a9:3c:89:9d:c1:
4d:41:e0:b7:4f:3a:65:74:73:0d:32:66:f4:d1:8e:
c7:eb:34:24:b8:2b:67:8d:e3:d8:de:4f:ec:86:84:
b3:45:e2:dc:96:ad:c1:ed:31:12:4b:7e:37:fc:8c:
ec:e4:7e:9d:a8:7d:82:d5:64:fc:3c:1c:59:00:65:
ed:5a:98:b5:88:ba:65:78:21:18:21:58:db:72:b6:
75:5d:23:cf:ca:73:d7:ff:b2:f5:a3:67:e3:1a:97:
a3:9d:bb:6e:fd:de:a8:ea:0e:c1:02:fc:e3:ad:9b:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:37:48:02:13:9A:B0:F7:E0:E8:96:7E:DF:1C:1D:84:3A:84:0A:0A
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b2:f6:bf:c5:1d:3e:1b:76:33:ad:68:a3:af:26:43:8a:06:
bd:44:9e:25:45:54:e2:26:4d:a6:d5:f6:25:ea:11:96:33:d5:
7c:70:8f:2a:0a:4f:44:98:e1:22:b5:43:4f:e4:96:d5:f4:74:
87:9f:b8:43:0b:83:36:fb:4e:af:96:22:d5:de:1c:cb:6e:2d:
f1:e5:a3:c4:c4:05:b4:22:67:a4:0f:5c:42:a4:93:10:2c:c0:
83:33:f8:8d:ec:80:65:5d:d2:d6:76:59:d1:3b:0f:cc:bb:38:
3f:02:87:49:90:d0:23:11:75:1b:71:3f:f3:c8:a3:cc:12:b4:
ee:2e:d4:f7:82:5e:df:e2:1e:8b:99:ba:aa:24:a5:78:66:fa:
90:16:fa:90:b3:1a:95:b6:03:3e:72:a1:7c:f9:5d:69:58:13:
34:7d:00:5c:46:8d:8d:1c:97:ef:c3:72:a8:b0:43:e4:39:f6:
ff:8a:09:17:f1:ac:31:43:5c:9a:cf:fb:31:d7:27:0c:fb:17:
e0:72:4b:a9:bb:dc:7a:92:8b:61:a8:40:ad:5d:f1:d4:2d:1b:
05:a2:71:d4:98:5e:d6:cc:c8:b2:d8:fd:3c:89:73:ff:66:a0:
34:a2:ea:ef:b5:11:11:46:f5:69:39:ee:8d:4f:f4:16:39:9e:
fd:04:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 09:57:23 2025 by rpki-client