Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: pkedIIUrrsnyWZt+fVSbDL8sBrMKxWGxbKfQZz1l3sY=
Subject key identifier: 53:92:EB:7D:EA:37:6B:F8:4F:8C:8B:A9:39:95:86:4C:DB:A1:5E:30
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 019A2EFBD66A37E51CC61701941359229FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 1100
Signing time: Wed 29 Oct 2025 08:00:47 +0000
Manifest this update: Wed 29 Oct 2025 08:00:47 +0000
Manifest next update: Thu 30 Oct 2025 08:00:47 +0000
Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=)
2: d9E6C3QPOt9u78MI9SfBmesK5F0.roa (hash: h3w+IvIr5e7qvP+/FTOi1Iivorry4KUdkg2Suq8DTl0=)
3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: SfSdyC4fkUbibFM9Jiu/FEaI6RG8S8Vl4cH2EJtuyqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 07:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:fb:d6:6a:37:e5:1c:c6:17:01:94:13:59:22:9f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Oct 29 08:00:47 2025 GMT
Not After : Oct 30 08:00:47 2025 GMT
Subject: CN=5392eb7dea376bf84f8c8ba93995864cdba15e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b0:21:a8:3a:c0:94:97:77:c9:d5:ee:d4:03:
ce:b2:1a:14:1e:97:9a:c3:c3:3f:c3:dc:98:ca:04:
6c:c2:4c:04:17:8c:7f:01:7f:de:6d:9c:01:4b:1c:
7c:be:b9:3f:8e:b2:f3:6e:20:5f:ac:29:54:a2:a8:
34:84:50:de:b7:b8:de:d2:e8:5b:ca:21:4a:11:a8:
c9:a5:f6:cc:97:fd:42:c9:fa:90:34:26:ae:c3:2e:
21:8d:99:9f:e2:54:2c:5e:55:e7:12:e8:1f:9c:fe:
81:49:90:fb:49:cd:66:95:93:f7:e2:af:ed:78:7a:
ea:0a:02:2f:3e:02:cc:23:0a:89:1c:ca:57:31:94:
dc:3d:23:cd:28:bd:89:ab:16:04:c6:c7:7e:6a:95:
9b:99:17:c7:57:bc:85:97:88:de:79:fd:47:20:30:
d3:68:fe:a5:93:92:b4:3f:03:3c:91:23:f5:3f:12:
d5:3c:58:ad:36:27:40:ee:5c:10:e2:99:4a:37:b4:
a9:a1:92:06:30:84:75:1a:fc:00:1f:40:a6:28:24:
3d:7b:32:e5:e9:d2:c3:19:cc:00:f8:aa:fc:53:72:
a4:f3:5e:33:77:f3:6b:6a:b2:d4:18:9e:d0:64:07:
0f:f8:f0:e1:b6:9e:58:67:8e:71:32:6e:61:75:e6:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:EB:7D:EA:37:6B:F8:4F:8C:8B:A9:39:95:86:4C:DB:A1:5E:30
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:90:db:ac:37:ec:51:b9:25:12:32:08:7a:68:9c:c9:0f:fc:
62:50:7e:c0:c1:c3:c6:71:59:94:42:e4:c4:f8:81:7b:20:16:
8b:d5:bd:3b:e2:b9:b7:94:96:c1:5c:50:a8:72:69:d9:f0:46:
5f:e7:c5:c4:4d:1f:ab:3d:79:a0:19:c7:a4:37:29:51:5e:c4:
70:ec:ec:47:b0:d4:e7:16:5a:ba:f1:2a:71:c8:d5:a9:e2:9f:
06:22:93:8d:23:47:27:36:98:88:e8:98:5b:f1:c1:51:3d:ab:
f5:6c:a2:71:d4:2b:40:6e:ce:35:f4:e0:d6:6a:79:7f:6e:6c:
03:8b:d0:86:a7:af:82:47:6f:51:dc:0f:76:bc:87:f6:b3:f1:
25:0c:26:cf:bd:37:1f:dd:77:cd:90:dc:de:26:41:55:57:d9:
a4:a1:f6:f5:01:91:a8:10:46:03:fc:c2:91:c5:45:96:73:2f:
aa:65:aa:08:7c:84:67:dd:23:74:e7:5e:cf:f3:1e:1d:8c:c6:
4e:57:59:79:2e:cc:61:9a:69:6a:78:e4:eb:38:5b:a8:08:35:
bb:bb:8b:ea:bb:d6:d0:0d:66:ae:2e:92:74:d8:dd:cd:56:58:
c4:bd:46:cb:53:ef:28:e4:46:fa:9f:41:2b:10:ed:25:d6:a8:
5b:8e:d5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 10:09:54 2025 by rpki-client