Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: 95cBeKLfHDqwAJIJ4cxLSZfZ1mtO3NReRtgrQ/cC6fE=
Subject key identifier: 51:64:F4:9C:15:29:AD:D1:63:C9:B7:BD:5D:78:C6:1E:3E:F6:67:30
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 019A2E56E5B45A9688675C244FEE20FE3B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 16CB
Signing time: Wed 29 Oct 2025 05:00:38 +0000
Manifest this update: Wed 29 Oct 2025 05:00:38 +0000
Manifest next update: Thu 30 Oct 2025 05:00:38 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: tg0TYvTUOWTB08Mc880sgDjU+F7h2F8IGcUEeALzepE=)
2: t2I34y0ofKpembvBe1b_-CyvIM8.roa (hash: mSrCvo09CP/j+cfORar+o3HK77VwUvlajzCQ530vifA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:56:e5:b4:5a:96:88:67:5c:24:4f:ee:20:fe:3b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Oct 29 05:00:38 2025 GMT
Not After : Oct 30 05:00:38 2025 GMT
Subject: CN=5164f49c1529add163c9b7bd5d78c61e3ef66730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:8c:fa:f0:d9:5e:4e:e9:97:6e:a9:98:3e:
f5:0a:9c:91:45:83:bc:b9:61:3c:45:0e:4b:04:5d:
67:2b:08:db:36:c6:93:43:64:69:a4:22:a8:bc:83:
00:af:ea:4f:8d:2f:44:e2:a3:b2:52:df:04:bb:7d:
7f:08:c0:4b:a9:1c:a2:a6:0e:fc:7e:ce:1f:57:88:
a9:13:b5:48:96:cc:a6:14:48:c4:bd:f7:86:bb:32:
9e:77:fa:b5:09:76:2c:d2:9b:a2:88:03:b3:fd:19:
40:6a:71:9a:3b:a9:67:9d:1a:de:a5:d7:69:84:f7:
a6:b6:4b:76:32:fb:66:0d:ac:d1:d9:84:2b:cf:45:
73:86:ee:f2:24:7c:17:25:9b:79:a1:8c:14:5f:8e:
12:e1:27:bb:b8:9a:53:6a:de:9a:d0:4a:93:ef:0e:
69:ff:26:ee:af:15:e1:05:6f:e7:92:06:64:d5:87:
61:13:25:dd:8d:05:05:7e:de:86:98:24:3c:ee:35:
15:25:86:c4:13:98:d4:b4:9c:26:35:93:e5:8a:b7:
65:d9:01:de:53:2d:96:64:3c:60:96:74:06:81:be:
64:0f:cf:22:af:c0:68:7a:cc:e0:94:e8:e4:99:06:
86:2e:47:b2:c1:54:93:91:c5:84:e2:6e:65:1f:14:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:64:F4:9C:15:29:AD:D1:63:C9:B7:BD:5D:78:C6:1E:3E:F6:67:30
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ee:6d:61:dc:e2:46:b0:8d:48:7c:15:b1:5c:79:da:07:73:
e6:ce:3f:df:47:b9:48:b2:c4:c7:fb:7d:7c:00:c2:4d:cb:3e:
2d:9a:c7:ac:8c:7d:96:b2:c0:8b:38:4f:37:d2:c0:63:94:81:
a1:76:8b:b6:55:b9:a3:96:58:77:0d:4f:61:bb:a4:83:00:1e:
f3:05:dd:8c:da:2d:a5:91:cf:06:21:5c:f0:20:c7:ca:50:43:
3c:14:c9:0e:96:43:b3:88:37:fd:6c:83:f9:38:a5:6f:db:76:
7c:63:55:93:df:34:5f:a8:e9:a6:4c:8d:4e:54:9b:75:c3:0e:
a4:d1:aa:4d:21:98:12:00:59:a3:b7:60:9e:69:8a:d0:2e:27:
3b:b8:20:2b:7f:9e:09:b9:b7:55:cb:a9:5b:e7:49:6b:59:ab:
8f:8b:f1:b9:90:e3:9d:b1:47:ce:53:33:72:27:ac:6d:25:db:
82:cf:ba:ea:df:47:07:99:74:d3:14:a3:70:e2:cb:11:99:58:
e5:72:56:48:48:53:09:98:f3:a8:8b:25:79:36:8f:50:e9:29:
32:03:8b:4f:be:7c:8e:e6:e3:2a:e4:8e:c5:df:04:aa:16:10:
7e:6d:35:af:a9:7b:94:c0:9c:33:d1:8c:c9:32:fc:c0:35:2c:
63:8c:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 08:34:02 2025 by rpki-client