Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: 2II6XrdGtIyQq/2BeDkKDi7k2E/nX3oEwsYRpSHqkEU=
Subject key identifier: 3C:75:90:BF:9D:44:9E:83:27:8E:FE:B0:EB:BC:EA:23:49:46:47:30
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 019A706E19DED65AA9161C47F64E98F82145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 0241
Signing time: Tue 11 Nov 2025 01:00:55 +0000
Manifest this update: Tue 11 Nov 2025 01:00:55 +0000
Manifest next update: Wed 12 Nov 2025 01:00:55 +0000
Files and hashes: 1: Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa (hash: 4kJwTGIfTzijYFZnWzmKmdRlWFcf9MpzIIKmNecHiDM=)
2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: bzGGzkS40TKNez9F6VObeo44k01tElKAVx0OQQNyFuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:19:de:d6:5a:a9:16:1c:47:f6:4e:98:f8:21:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Nov 11 01:00:55 2025 GMT
Not After : Nov 12 01:00:55 2025 GMT
Subject: CN=3c7590bf9d449e83278efeb0ebbcea2349464730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:23:43:33:6d:52:2f:a2:80:2d:c0:5a:f5:1a:
01:a3:ee:68:cf:1e:86:b2:ab:37:6e:90:fe:71:b4:
b4:6d:f2:af:6d:29:57:cb:73:e5:f4:34:de:ce:64:
6b:3f:51:cd:5d:9e:0b:b8:0b:f1:11:d5:53:ee:ef:
6e:8c:ec:f2:af:22:82:42:85:d9:b3:4f:87:0b:8c:
67:5f:a4:64:12:60:21:2e:74:22:4d:de:ec:e8:59:
9a:35:4a:f7:1b:4b:3d:69:75:d2:ea:71:16:81:e9:
fa:b6:bf:d0:8d:82:b6:8f:36:1b:cb:35:8a:11:09:
bd:97:d2:d1:98:11:88:00:bc:27:aa:b5:ea:2d:50:
22:76:e7:56:e0:fa:06:85:44:03:27:0e:b9:94:3c:
15:0e:56:c0:52:75:c2:e7:11:46:8a:8a:0d:51:eb:
23:c2:d8:91:7d:b5:17:3d:b5:7d:2b:9b:8b:39:39:
86:41:4d:01:40:6b:9f:1a:1f:54:73:f2:de:60:bf:
c8:a3:f6:30:ae:c8:f7:a7:83:2e:d3:09:02:6b:a0:
e9:34:1e:4c:52:09:43:3d:6d:c1:33:57:ab:53:c2:
2f:24:d0:fc:07:1d:a5:bc:01:f1:00:dc:c5:24:e7:
7c:e7:e3:ce:71:93:52:5e:55:2e:4a:8a:5b:76:95:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:75:90:BF:9D:44:9E:83:27:8E:FE:B0:EB:BC:EA:23:49:46:47:30
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4d:cd:e1:17:3d:e8:d3:64:78:fa:ee:18:5c:ff:4a:cf:ff:
90:4d:30:76:45:14:c0:5d:7e:83:fa:fb:f2:17:ff:21:e7:a2:
62:0e:b3:b6:f2:ff:7a:df:c3:a6:70:31:1b:48:50:e4:a9:e4:
da:f1:90:67:6b:a8:d2:c1:75:24:c1:a4:26:5c:15:70:16:b8:
9b:9b:d3:28:ab:f5:bd:c9:4f:98:f8:bb:ad:72:9a:1e:82:ac:
b8:55:da:90:3b:78:24:79:34:4e:37:da:af:fc:61:11:b2:71:
34:97:66:c8:1e:96:55:2a:99:f6:15:a5:28:81:dc:ee:f4:ca:
28:f4:96:c7:75:9c:f1:83:2b:6b:47:cf:5f:13:be:ec:ac:11:
a8:0a:8b:bd:df:8e:f7:f9:34:59:60:69:c0:e1:a4:f7:22:24:
82:9e:9f:f4:a1:9f:6f:a2:d5:c2:58:fc:7a:f6:80:ba:11:55:
19:43:24:0f:c7:d3:da:89:97:3f:37:f1:d7:d8:3c:a6:70:1b:
71:cf:7a:71:d1:b4:de:a1:97:a5:21:bb:47:e9:70:69:df:7f:
4e:ed:30:2d:2a:ba:01:d6:4c:46:7a:71:99:eb:4c:9d:f4:ab:
0b:54:4c:c6:23:80:8f:a5:44:c0:19:73:16:98:de:b8:ba:65:
2b:11:05:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:14 2025 by rpki-client