Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
File: Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json)
Hash identifier: Aq/guHol2ZPabxaqS0tAvfOdkbHy/axtQm/EpNkOeOQ=
Subject key identifier: 15:D6:EB:F0:F9:86:77:65:DB:63:07:DA:BD:33:D4:52:96:F7:58:D9
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial: 019916BED4C996E80A1B74D88C6A84DF6FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
Manifest number: 0A03
Signing time: Thu 04 Sep 2025 22:00:28 +0000
Manifest this update: Thu 04 Sep 2025 22:00:28 +0000
Manifest next update: Fri 05 Sep 2025 22:00:28 +0000
Files and hashes: 1: 1qUuzp1BSb73YBxt2G1-L71RBo0.roa (hash: RsoVHiN4hMhxH5nMDIM8Pr6yKP0XCEu41kBjnTbcTNQ=)
2: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: c0N0sHdEcAAnef+XvAu9a920Ga25xcgOZMiQcLch6jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:be:d4:c9:96:e8:0a:1b:74:d8:8c:6a:84:df:6f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Validity
Not Before: Sep 4 22:00:28 2025 GMT
Not After : Sep 5 22:00:28 2025 GMT
Subject: CN=15d6ebf0f9867765db6307dabd33d45296f758d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:11:93:76:b2:5c:45:99:f5:eb:c9:0c:02:90:
3d:b6:09:a8:0c:a7:9c:f8:2d:ab:69:6d:28:8e:e8:
10:c6:9b:0a:cf:de:dc:e4:b0:5e:3e:89:c0:e7:8e:
5a:d8:cb:f1:a5:0a:32:85:ba:84:10:2b:20:3a:80:
ad:1d:a0:59:77:20:ba:e4:5c:5c:c1:f2:25:5b:70:
06:8f:c2:a6:98:e1:b3:0c:1a:38:d7:51:be:31:d7:
f1:2f:75:ff:d3:05:b0:74:77:6d:7c:64:a6:21:e1:
ce:2d:b6:5c:0b:7a:25:af:fa:af:5e:00:6e:82:ce:
57:19:01:24:a6:55:40:cb:64:dd:8c:2a:a1:aa:55:
95:24:f6:d7:dc:31:0e:fd:70:97:a7:00:d8:89:f0:
e7:d5:03:2c:79:56:b3:c3:7a:50:03:90:b8:95:37:
3c:df:3a:27:df:87:5e:bd:2a:06:30:69:c7:be:c4:
83:07:a7:7d:e8:62:d9:cf:e8:f2:93:27:9a:6a:75:
69:dc:5a:42:07:02:fe:99:91:a7:a1:07:e0:91:85:
68:0f:61:3b:64:7d:02:72:fa:65:35:a6:f5:10:75:
f9:d3:a3:2e:73:84:f9:6a:e6:8e:fe:df:5a:17:11:
53:e4:d0:54:f3:7d:f9:40:b2:30:3c:39:23:f2:52:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D6:EB:F0:F9:86:77:65:DB:63:07:DA:BD:33:D4:52:96:F7:58:D9
X509v3 Authority Key Identifier:
keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fc:e5:cf:4a:17:37:1d:56:92:19:8e:2d:64:17:56:f1:84:
ef:ac:28:45:93:1d:dd:07:49:44:31:cb:f5:ab:d5:2c:67:d4:
18:80:47:c0:5f:b8:72:98:7d:78:cc:a2:f5:ef:b5:57:6b:bc:
d4:9b:6c:9c:ce:07:4a:19:7b:53:a8:df:63:d9:78:72:ab:05:
07:ae:5f:f2:41:7a:18:ae:c0:0c:89:9e:52:1a:61:a6:da:19:
be:04:14:24:c2:92:98:9a:5d:ef:15:14:b8:b7:b4:6c:73:51:
1a:8a:7e:22:67:31:58:83:a1:03:95:ee:a3:f6:03:09:4f:f2:
06:12:4d:8f:bc:da:0a:eb:a1:12:79:e0:25:37:eb:88:c5:29:
2b:ea:d8:f9:46:5e:d0:a3:7e:35:4d:46:76:94:44:f0:a1:41:
8c:56:41:11:43:1d:f9:cf:16:de:bd:8e:6c:08:81:d3:be:0f:
88:6a:27:15:07:01:82:24:00:ee:6d:69:43:c0:91:70:b2:60:
9c:14:23:1d:bb:5b:e5:d8:91:52:77:0e:aa:5a:85:b7:8c:b8:
f5:21:43:30:fc:54:ab:ac:04:64:33:f0:b9:3f:84:cc:3c:e8:
48:92:96:70:11:6c:29:58:26:c9:e9:9a:69:f9:3b:ee:79:b6:
f7:ab:82:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:37 2025 by rpki-client