Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: 8S/qeyQbkqlM0lSNXQwWWh16JkxnByPFK/XypALO5Io=
Subject key identifier: F0:98:9D:D3:67:1A:74:4D:90:65:86:B1:76:74:5B:7E:C3:F4:6E:19
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 019A071232D6EAC243D27CC3B7793F879499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 0506
Signing time: Tue 21 Oct 2025 14:00:24 +0000
Manifest this update: Tue 21 Oct 2025 14:00:24 +0000
Manifest next update: Wed 22 Oct 2025 14:00:24 +0000
Files and hashes: 1: Oi0Mexif2IU5YWgRrWRDGcE4Aw4.roa (hash: hcI8ATUfRYduE8yCuLSr8RsjKUn++KtzCI3lWbIhr1A=)
2: RNEIzNGbtOLDhiuIlbx5LtZxiHA.roa (hash: YH3jUp9Z5jmgiTgvLayfiplIuhfqDKTG69/LcYMXnX0=)
3: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: Q6t7bATKcxUJlVsqhWbBHjBaUWv75tOTaMhVhL81+A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:12:32:d6:ea:c2:43:d2:7c:c3:b7:79:3f:87:94:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Oct 21 14:00:24 2025 GMT
Not After : Oct 22 14:00:24 2025 GMT
Subject: CN=f0989dd3671a744d906586b176745b7ec3f46e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:eb:a4:51:90:29:47:b3:cb:17:5b:f5:ac:
52:83:25:8d:ae:7f:b9:aa:fd:31:a0:b4:b0:09:1b:
8c:62:cf:ba:00:34:9e:c0:8a:ca:07:0d:1c:74:0c:
aa:75:2f:73:41:d5:31:ac:f0:55:19:ed:eb:8b:f8:
2c:da:7d:95:3a:d1:e9:a7:e8:ea:06:90:98:a2:17:
83:37:f7:9f:c6:42:08:d5:19:8a:70:33:a2:f4:36:
8f:67:1c:e0:06:38:af:0f:c1:6a:91:32:86:7e:73:
3f:af:a0:98:ab:dc:ef:ed:17:6f:e5:28:4e:5e:cf:
da:a9:c6:6a:24:00:50:44:85:be:d4:e6:a2:b1:f8:
57:df:95:ee:8d:5e:57:69:a7:0b:ba:06:00:3d:6a:
e7:41:bb:56:cf:8f:09:dd:ea:c2:c3:66:c7:aa:70:
bc:d3:97:db:7a:da:c1:2d:67:47:f3:01:9f:91:c8:
f7:6d:d0:f8:a7:71:92:a9:4e:9c:19:d8:1f:48:7e:
df:9a:fb:e9:cf:f9:56:a0:d3:39:cb:85:a1:e4:a9:
d1:f6:ff:79:38:45:85:d7:7f:14:cd:ee:bb:be:15:
df:dd:af:e9:04:8f:ac:e2:94:45:2f:9d:a7:63:89:
e3:96:d0:c9:c5:be:70:d8:2b:57:e6:c4:63:57:66:
24:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:98:9D:D3:67:1A:74:4D:90:65:86:B1:76:74:5B:7E:C3:F4:6E:19
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5d:4b:a2:90:4d:fe:e7:a2:04:9b:43:a2:cc:a8:82:88:52:
20:96:5e:36:39:cc:d0:1a:f8:2e:ea:b7:76:5f:78:8d:6d:52:
c6:32:83:8b:7a:e5:29:45:4a:6e:1a:fd:7b:6d:4c:19:f0:9b:
a8:4e:9c:3c:6d:77:80:44:d9:de:89:fd:8f:c9:4e:89:20:1e:
28:1e:04:fd:bf:d6:cc:ae:5c:8d:e3:9e:fb:f1:c3:85:e4:bf:
81:36:da:d6:a9:42:42:b1:ad:bb:87:44:e7:17:2d:a8:2f:d6:
4f:5a:04:b1:fb:49:89:02:8d:68:1e:6e:e0:e1:86:e0:37:a2:
4c:ce:95:7f:a9:f1:2e:99:ef:0b:b1:79:d0:3e:1d:0a:c5:10:
2f:4e:39:c5:d9:3d:35:f2:9b:2d:80:17:cb:0f:3d:76:fb:55:
53:9b:01:9e:c8:27:d3:22:2a:3e:aa:77:ef:b7:c4:45:bc:9e:
ad:c9:d1:39:37:f5:af:db:aa:a9:3c:cb:9f:72:47:7d:6a:f3:
a8:7b:be:af:c9:f6:79:5b:61:a3:1d:c8:bd:e8:aa:63:23:87:
58:b7:cf:4f:c7:59:37:db:87:f4:68:e5:f6:7a:b4:51:fc:9f:
45:cd:76:ef:9b:01:82:57:6e:24:b5:fe:4d:93:70:5f:a8:ef:
38:0b:c3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:01:39 2025 by rpki-client