Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier: XEiEIgDJEfXxDIJJYhUItwj7dCAojhaGPQMJmjD1FDw=
Subject key identifier: BA:0A:3D:06:5C:AD:E9:38:D7:CC:32:CB:C3:65:8A:6B:6C:8E:98:F0
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 019A22C09CB618135B5DB21570868EFD3C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number: 1708
Signing time: Sun 26 Oct 2025 23:00:39 +0000
Manifest this update: Sun 26 Oct 2025 23:00:39 +0000
Manifest next update: Mon 27 Oct 2025 23:00:39 +0000
Files and hashes: 1: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=)
2: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=)
3: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=)
4: gXTQ_DqBbvWK4zOCraUhqqUl7Zk.roa (hash: qOt1Z426R0Ot2Dml4Qmnhu+irkAmbjEf1aZkvn7kIfc=)
5: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=)
6: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=)
7: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: +2HLjPSuUwuWW84d6oYRr/vWMjJUdYBonj6k3k2eur0=)
8: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:9c:b6:18:13:5b:5d:b2:15:70:86:8e:fd:3c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Oct 26 23:00:39 2025 GMT
Not After : Oct 27 23:00:39 2025 GMT
Subject: CN=ba0a3d065cade938d7cc32cbc3658a6b6c8e98f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:b5:3c:bf:96:7b:d7:4a:5b:51:d9:ac:be:
fa:73:24:9b:45:6e:32:d5:39:2e:8b:b5:08:f0:ce:
aa:24:67:94:f9:5c:2a:76:d6:d8:40:64:80:18:d9:
b0:cb:f4:55:20:70:92:79:99:e3:1a:3a:ff:29:06:
49:a0:99:3f:33:76:af:e3:ac:d2:29:9f:ae:57:88:
2e:77:44:56:aa:b0:8b:c3:1b:7a:20:d4:1c:08:26:
2f:1c:af:cd:01:38:5c:87:0d:eb:53:12:f1:10:c2:
f9:25:c1:1f:a3:d6:c6:22:35:0b:23:01:64:25:e9:
6d:35:e8:ea:7e:0c:2d:3f:01:88:6c:36:12:6b:d9:
6d:db:be:eb:bc:35:22:f6:31:fe:9e:fe:63:d5:94:
05:63:6a:53:0e:54:90:4d:ca:f6:70:bf:37:9d:b4:
13:7c:c3:6e:64:28:a3:29:fa:12:69:cb:0f:1c:c5:
26:89:f9:7c:41:4d:05:3c:ab:3b:67:f2:fb:fb:64:
3d:68:9c:20:57:ea:50:06:2f:04:1b:8d:cc:cb:e2:
3b:2d:8e:5c:65:ed:20:af:72:9d:db:0c:8b:f1:6e:
60:71:06:aa:7b:e0:88:8b:c1:07:eb:4e:44:e3:18:
d6:15:2c:6e:b7:8a:49:c6:8f:25:18:a6:e3:64:00:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0A:3D:06:5C:AD:E9:38:D7:CC:32:CB:C3:65:8A:6B:6C:8E:98:F0
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:03:88:4b:d8:ab:45:6c:2b:52:77:c9:5e:67:85:f0:e9:eb:
ec:7a:23:d6:46:82:89:08:ab:8a:44:74:bd:72:28:17:f6:c7:
ba:69:18:ae:44:0f:1e:f6:9b:2a:48:5b:6b:78:55:96:c9:ee:
26:b2:c0:ec:0b:eb:31:ae:55:98:4f:54:5f:c9:10:c4:25:d9:
f4:58:00:03:7f:08:53:05:90:3d:07:27:5c:8a:b1:eb:31:51:
f9:13:a8:16:49:01:21:68:12:ff:8a:97:21:cd:d4:82:04:b2:
85:c0:b9:44:8e:b8:5a:89:60:70:57:28:74:5b:24:f2:57:a3:
14:a5:61:26:28:b4:09:8a:b5:bd:cb:e5:e1:62:12:43:c8:1f:
ee:6c:67:01:17:b0:7a:f7:6d:2c:ce:04:10:72:9d:a0:2b:53:
4b:21:eb:7e:ce:e0:69:3a:73:81:39:d8:ae:86:18:30:aa:22:
13:3e:12:25:2e:17:e6:e5:1b:c6:38:a6:53:1f:25:00:1d:8a:
2e:bb:71:79:b0:5e:d9:13:6f:82:e9:96:be:8f:4d:36:0e:df:
5f:2d:1b:8b:89:5c:25:59:ed:e1:8b:fc:ce:e9:59:39:c5:4f:
e7:f7:a4:cc:44:13:9a:81:90:e3:79:77:50:35:73:81:dc:54:
d9:78:ac:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:10:11 2025 by rpki-client