Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier: lUXwjqqRLH5e0h6AYCtbXLgiwYvF1fO0X6F2sFRW9mo=
Subject key identifier: 0E:61:F4:CA:4B:FB:2A:4F:F7:A0:41:95:27:2E:7B:32:85:68:7F:4B
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 019A2553C72D2EA606F41FA3A2A02F508C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number: 1736
Signing time: Mon 27 Oct 2025 11:00:38 +0000
Manifest this update: Mon 27 Oct 2025 11:00:38 +0000
Manifest next update: Tue 28 Oct 2025 11:00:38 +0000
Files and hashes: 1: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: L7c0Uua9dxzyWu+zLJ0k2aZErJakThXCAymzpYXqX1g=)
2: mHSh_L3V-mUCv6CdA4KSmfFb1Mw.roa (hash: ja9RYHbZNB5qyrXGL/iOZ2Xq6jJqt76K69YqeW5Tjl8=)
3: nPf6vPs81jX8tCyyvpUwSrOy0dE.roa (hash: y2CFPQ3qkO9mevFesEexkErie9IwGC/QLDLpCaVtX1k=)
4: o81wfD8zfUv5Zk7pobG3M-ESGYE.roa (hash: jd2IoG9Aa3jkWylMsC2P0Nj5rCgPpJGWPs9lmF6DpLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:c7:2d:2e:a6:06:f4:1f:a3:a2:a0:2f:50:8c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Oct 27 11:00:38 2025 GMT
Not After : Oct 28 11:00:38 2025 GMT
Subject: CN=0e61f4ca4bfb2a4ff7a04195272e7b3285687f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:6f:72:66:d9:59:05:65:78:c0:ee:2e:39:
f2:1b:49:7d:e7:16:f6:d0:f1:60:d8:97:31:00:97:
9b:06:66:50:c9:c3:cc:b4:38:2a:81:7c:f4:c8:aa:
ef:a3:f5:61:73:2c:a1:70:7a:ce:67:33:0b:78:07:
12:21:17:9f:af:6a:60:51:85:63:01:ce:2b:29:b8:
81:08:57:32:46:d3:a6:8d:c9:48:ce:e6:3e:d1:05:
f9:8d:92:c5:33:ba:c5:b8:64:b8:8a:5b:38:9f:24:
64:a9:94:7f:a9:bd:9d:8a:23:a1:d2:70:ee:5c:6e:
e0:dc:6f:ab:71:e0:03:83:b9:12:c4:64:88:4e:48:
79:c5:2e:32:9e:f4:3d:b0:29:23:1f:7a:66:6f:32:
61:e6:0f:6d:34:ad:43:b3:51:6f:5b:a7:77:99:f2:
03:79:c4:b6:56:51:d2:5d:ba:21:e8:1a:ec:b1:65:
95:2e:c3:f0:2f:71:14:33:c9:37:c5:47:34:ca:50:
a9:ea:a6:4b:c5:01:f2:fb:d0:e8:2d:2f:3e:ef:f7:
a5:44:4b:88:3d:5d:e9:c9:03:f6:11:18:58:97:e5:
c6:d3:2d:bf:d5:9a:bd:bd:94:0e:5d:e3:07:04:db:
91:7b:11:d6:8c:e0:72:9c:b9:8f:71:ca:a4:1b:c7:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:61:F4:CA:4B:FB:2A:4F:F7:A0:41:95:27:2E:7B:32:85:68:7F:4B
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:53:f9:a6:ae:be:73:dc:ae:54:9b:4f:99:f1:4f:3d:40:d5:
1f:a3:d6:b1:cb:10:61:bb:38:6b:b9:03:c4:10:96:8a:40:fb:
a9:fa:c5:c4:a2:be:dc:fc:7f:8d:08:d8:83:5b:86:a9:b1:99:
59:20:66:a5:16:89:ce:91:50:db:b9:2d:1d:e0:ac:7f:5a:88:
bf:7e:31:61:f7:86:f5:0b:2c:0f:f4:dc:15:31:de:4c:56:52:
ac:ab:19:a8:96:b8:52:8a:35:2a:6a:ef:e7:18:ac:49:dd:c9:
0d:3f:14:c1:16:cc:1c:99:a6:50:c5:91:10:f0:79:68:05:be:
d6:a7:85:34:fd:94:52:56:45:e2:ae:e0:77:3f:21:0d:50:0d:
8a:d5:ad:0a:ba:e1:48:db:23:10:ed:8a:90:81:79:0b:e4:27:
84:cb:3f:ac:78:c5:70:7b:db:6f:7c:a9:33:60:ec:08:5b:c7:
5f:9f:eb:d0:06:c1:d4:03:32:bf:3f:37:f9:79:48:96:a2:cc:
ca:9f:66:b3:b0:a9:0e:66:ea:a4:ca:86:ea:a5:8d:10:ac:15:
8f:9b:a2:dd:7f:5e:dd:4e:d5:62:14:2f:92:2e:74:28:b6:7a:
1c:5e:3f:5c:53:73:21:69:8e:b8:57:23:4e:65:6e:6a:95:65:
0d:02:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:34 2025 by rpki-client