Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File: hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier: TbgfzAWUUzKIuWwE2AKdSElCfp12SILdXClienXmlq4=
Subject key identifier: 15:EC:51:F6:FB:1B:BE:4F:F3:87:93:EC:CE:8C:ED:3C:90:7E:1A:5E
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 019A22F7BDB4FCB80937AB1ECE0246DEE3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 00:00:52 +0000
Manifest this update: Mon 27 Oct 2025 00:00:52 +0000
Manifest next update: Tue 28 Oct 2025 00:00:52 +0000
Files and hashes: 1: ESXrpZgGSFTBEiaTfpuO1Ua_m8o.roa (hash: fDiB8gqQjZSMqzctJDGZ4eRYCm04M7zaIMybwkgd7NA=)
2: OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa (hash: R7u83JZv+jgtAvgDHO6iu/lmN813J7jjtpcNdpp0wSc=)
3: SY3ZqrZlsamFdxroiGiYXJ5gcVY.roa (hash: xkCC9spBf1ER1WQbzhUiifntsvYj+ggONAikx8P5lU4=)
4: a9hV5v7mUiE4DnyjTCLFaLF9E48.roa (hash: dRABmrzUalUqXSxyUGJSYnEylJa1e3qLhaBosE0bOrA=)
5: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: nGqPk4pZV9mLVq4yG19cJr1JM9WHZY5t2nGzVfiXNyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:bd:b4:fc:b8:09:37:ab:1e:ce:02:46:de:e3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Oct 27 00:00:52 2025 GMT
Not After : Oct 28 00:00:52 2025 GMT
Subject: CN=15ec51f6fb1bbe4ff38793ecce8ced3c907e1a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:fa:9d:b9:b8:b2:c2:a1:b1:59:df:49:f4:
46:f8:07:96:0c:78:32:ca:9c:8d:ac:12:06:75:6a:
c4:10:80:f0:2c:06:6f:58:c1:ca:f5:e9:3a:75:c8:
2b:65:5d:66:14:c7:a7:57:dc:3d:5c:97:48:e8:52:
69:bd:4b:45:7d:c4:d9:2a:35:36:25:a7:25:34:99:
f2:68:25:89:02:c8:95:92:65:09:3a:01:05:9d:92:
bf:25:37:d5:07:2f:01:79:54:6b:6a:6b:04:de:fd:
49:df:cf:03:3b:f6:ae:0b:df:d5:3f:f2:65:6b:13:
fd:e7:6b:ac:66:d4:af:31:80:a8:f8:da:72:ae:0a:
04:fc:5d:a5:e5:df:d7:66:e3:5e:20:98:e1:71:4f:
60:a0:9c:27:05:67:0c:22:e1:74:7b:42:9b:7b:e7:
60:6b:1b:04:04:b7:b3:e4:b4:14:52:0d:36:e3:85:
8c:3a:25:5e:3c:e5:50:bb:bd:ff:0b:8a:e3:cc:4d:
36:be:dc:90:f6:93:b8:8e:ad:75:66:42:83:be:fe:
7c:65:04:3d:26:50:a3:be:dd:d7:57:ed:7d:6f:3c:
c3:9f:18:f4:3a:7f:aa:75:77:fd:ae:e3:66:c4:a6:
ea:54:dc:4d:d5:42:4f:d5:aa:30:5f:c3:87:51:24:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EC:51:F6:FB:1B:BE:4F:F3:87:93:EC:CE:8C:ED:3C:90:7E:1A:5E
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e6:fe:28:9f:3f:ca:4d:7d:7e:a3:f1:ca:6a:a8:06:31:51:
f0:ad:3b:e0:06:7c:b1:b8:db:64:12:9f:9a:2e:fa:b8:c0:0c:
bd:1d:56:7d:70:01:bb:9c:d7:fd:c4:29:72:14:a8:f6:45:a7:
6e:96:aa:49:11:0f:97:ce:d6:1f:dd:55:b4:a8:2b:c1:cb:c0:
46:a8:09:9d:40:ec:7e:99:c1:ec:99:30:f7:24:1f:f2:f7:01:
ff:23:22:aa:31:16:03:f6:75:a5:b2:78:59:33:aa:ac:d2:2e:
a7:80:df:9a:6d:36:1d:63:35:d0:8a:f3:8f:af:04:5f:18:1e:
9c:50:01:e3:0a:b4:f6:59:b0:24:7c:a7:6c:1c:60:7e:c9:09:
cd:b3:77:06:f5:f8:3d:78:dd:35:50:a4:8b:9f:2b:b6:22:bc:
13:f8:92:cd:8f:d0:b1:6d:39:c7:ed:ad:b8:ae:15:6f:67:bf:
79:b6:39:9d:91:1a:0a:e6:87:33:a2:1d:15:f3:b2:13:55:53:
90:c2:96:b4:be:e9:ac:e4:82:f6:3f:5f:dd:12:1b:3e:ba:fe:
a8:e4:b6:9b:30:43:e2:eb:3a:8e:4a:08:5b:2c:72:52:90:70:
5d:a3:2a:0e:e3:99:73:25:c7:d8:70:d1:18:71:87:12:f7:d5:
9c:0c:3e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:13 2025 by rpki-client