Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: UlYso1eqA0hsEGuyvcZdzlo7Nd2d/6NnZZQ/hSy0uEQ=
Subject key identifier: C3:EB:D3:B1:E0:83:29:BC:13:A9:28:91:04:E3:E9:4B:DD:01:30:4E
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 019A1D9A7140FEB0CDD21BE2AD8F32967EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 160D
Signing time: Sat 25 Oct 2025 23:00:52 +0000
Manifest this update: Sat 25 Oct 2025 23:00:52 +0000
Manifest next update: Sun 26 Oct 2025 23:00:52 +0000
Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=)
2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=)
3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: TiQ5jnRAEKLz+DSTrq63fTu0HCsaAxWpFr+w6iXa+qg=)
4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:71:40:fe:b0:cd:d2:1b:e2:ad:8f:32:96:7e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Oct 25 23:00:52 2025 GMT
Not After : Oct 26 23:00:52 2025 GMT
Subject: CN=c3ebd3b1e08329bc13a9289104e3e94bdd01304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:21:59:59:ae:1a:9d:4c:e3:98:be:51:06:
30:42:7d:8e:65:43:57:15:1a:ec:97:f0:d3:2a:af:
6e:9b:d9:1a:38:b5:28:8d:7f:30:b0:7c:a6:74:04:
ec:cf:37:6e:0d:88:c7:fa:21:10:b5:65:3e:5b:99:
6f:49:18:fb:1e:bc:15:60:45:da:ce:19:d9:7c:ec:
9a:f6:f8:a9:7a:6c:9b:2a:d2:3e:22:89:dd:ba:b7:
f1:ef:a8:12:9d:4b:b0:60:27:9d:70:68:42:5d:14:
09:cc:15:1a:11:9c:5f:01:22:ae:ba:e9:80:5d:93:
66:83:e3:eb:76:a0:33:d7:94:60:c6:94:8b:6b:29:
d7:6b:2d:81:ea:2d:d8:59:d8:42:0f:9b:22:75:ac:
2f:ef:07:cb:22:2e:ae:1c:79:f3:68:bf:78:6f:6e:
32:b4:f2:15:d1:4b:e6:1d:a2:2c:cf:72:5b:8e:ef:
f9:de:d3:82:4d:97:70:1f:51:a7:6c:2b:44:b2:f7:
4f:a7:e5:2e:0a:34:bb:01:f3:84:d8:ff:ac:58:c3:
45:66:46:c7:65:fd:48:74:e1:e3:15:0e:03:0d:71:
fd:18:4e:b2:d4:a2:54:38:96:c2:e0:6b:91:22:60:
00:a9:e0:e1:37:48:18:6c:86:56:23:6c:d7:09:6b:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EB:D3:B1:E0:83:29:BC:13:A9:28:91:04:E3:E9:4B:DD:01:30:4E
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:71:9c:1b:fa:ab:e3:a7:3f:69:45:35:96:a6:a1:42:09:32:
a1:21:e3:03:ce:6b:17:8d:65:cc:b9:b6:78:56:53:9a:74:e8:
fe:5f:9a:3d:07:de:00:9f:00:5f:53:8d:3d:6c:aa:9c:27:a6:
21:a1:72:e2:3b:bb:36:ff:84:51:24:42:66:56:6e:ec:fc:6d:
25:8a:b4:a7:ec:16:b5:76:81:67:98:6b:ca:0f:1a:52:3c:f7:
a0:82:b6:c6:02:e9:ad:a3:ee:5b:ea:36:6f:01:43:17:07:3f:
c2:4a:15:b5:98:d5:29:5c:0e:1f:ce:04:02:9b:da:d0:a5:5a:
00:05:bc:ef:d8:6e:28:d4:32:43:72:f6:c4:1a:e0:c8:9d:b6:
64:69:b5:86:5d:5f:d1:c9:d7:f0:1d:a2:87:e7:69:42:c5:8f:
d9:41:8a:94:f3:e5:82:8c:f8:02:d0:3f:a0:72:16:cc:5f:cd:
93:da:86:83:1b:cb:6c:58:ca:65:5e:ec:95:45:8a:08:dd:5c:
e5:65:57:5a:f7:80:bd:d0:f1:11:ac:7b:75:f8:de:9c:60:fa:
b7:fd:d9:63:a2:0d:d5:3d:a6:d2:b4:2b:e1:16:63:c5:ea:60:
70:59:77:df:3e:80:56:dd:95:12:54:cf:b6:c3:f5:68:77:a1:
f1:5e:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:58:18 2025 by rpki-client