Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File: hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier: iuCOvlI7n76m/WGr+S+A4JyUVhLseF6TFHzIm1hDnhk=
Subject key identifier: 89:AF:E0:B1:D9:86:69:EE:14:8B:13:8A:FD:FE:EB:0F:54:C7:17:76
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer: /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial: 019A21AE0441150D01727EB8EA608C3DA1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number: 16FB
Signing time: Sun 26 Oct 2025 18:00:43 +0000
Manifest this update: Sun 26 Oct 2025 18:00:43 +0000
Manifest next update: Mon 27 Oct 2025 18:00:43 +0000
Files and hashes: 1: 4OM3TuNkPVdmDzic95IjszBtoQA.roa (hash: dt9wokazgTd6EaqSSQPyaNUyIvDqSau9vaZZ+2FBCWU=)
2: POoeZ9JcIrFPhJTeWPU8jpK_vAc.roa (hash: ToulLGENoP/7yn7Jgz/qlwSorKjiORy0BAk4ycS9VNQ=)
3: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: xxagNUldEeD8PSUfAtvq78CSGtyhGR2o3hHa34vlgT8=)
4: qeftSyRSXmAOVqQRtKtHutbh0zk.roa (hash: VtULu7reN7PL4/u/6gxMFu7joJNl642+iClkA1K3FD4=)
5: tISHEAHtpJDdCS4l3Yug27J3cB4.roa (hash: MfAYQ6HspqhfS9luXY6/Ub4o3vZ2098dY5v7aRHURxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ae:04:41:15:0d:01:72:7e:b8:ea:60:8c:3d:a1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Validity
Not Before: Oct 26 18:00:43 2025 GMT
Not After : Oct 27 18:00:43 2025 GMT
Subject: CN=89afe0b1d98669ee148b138afdfeeb0f54c71776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:df:bd:30:2f:58:3d:fb:d1:04:82:8c:a6:
45:49:b6:0f:12:9b:0c:dc:b4:73:91:e7:8c:a8:64:
4d:42:7b:b6:d6:1a:19:a2:72:7a:0a:ec:67:1e:d0:
19:7c:42:23:40:1d:22:4a:c3:4b:7a:90:6f:f2:ae:
21:71:da:35:ac:5c:e7:92:af:11:c5:c5:3d:3c:51:
37:05:de:8a:f6:ab:50:61:72:ff:c8:eb:40:f3:40:
b2:0c:13:fa:9c:ee:aa:fb:1c:77:08:e1:cb:c1:16:
88:71:21:eb:af:82:9f:65:9c:47:f2:ce:31:46:20:
47:86:ab:0e:75:ae:fa:cc:4b:c9:86:4d:68:77:9d:
58:43:5c:45:a7:e3:94:2c:91:52:23:4a:a5:24:98:
d9:75:8e:9a:55:79:f3:db:f0:da:53:88:c8:ab:d8:
3f:3d:d1:d0:41:0e:df:5f:15:de:fd:48:a3:ff:a5:
e5:f7:b1:52:4e:d7:8a:19:f1:59:c9:49:cb:f5:b1:
31:df:25:24:63:11:f8:4f:e5:69:29:37:d8:b1:45:
ca:75:cc:cf:24:c7:58:81:d7:62:35:b5:78:04:a3:
ea:c8:78:e3:4a:b4:ab:bd:48:4f:ee:09:7f:ec:7e:
2b:4e:8c:57:7f:7c:72:ea:a5:73:72:3e:43:97:0c:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AF:E0:B1:D9:86:69:EE:14:8B:13:8A:FD:FE:EB:0F:54:C7:17:76
X509v3 Authority Key Identifier:
keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:17:a8:8d:90:64:33:5a:c4:b1:1d:5a:27:1d:4a:76:23:46:
82:d8:a8:52:b5:0d:06:46:e7:d3:bb:66:92:88:46:f7:b9:e1:
7f:16:9e:d5:0d:fe:8c:e3:8c:03:dd:65:19:ab:5d:80:47:cf:
79:6b:23:73:d5:75:84:9d:8f:61:08:1a:ba:f8:af:ee:ef:bb:
19:67:d7:a6:d6:f9:66:14:9a:2c:4c:01:f1:7a:88:da:18:71:
99:00:ae:d8:79:31:8f:cb:4d:9d:54:03:f0:ff:61:54:2b:90:
72:14:9f:f9:14:d7:4b:5a:55:4d:37:a3:dc:b5:19:d1:4a:e0:
81:29:1b:1c:83:aa:53:df:a4:97:09:42:21:c2:2b:12:a7:b5:
f8:f4:09:f5:06:d6:fa:57:11:22:75:ba:5b:d8:47:9e:5a:42:
52:20:8f:ae:9c:b0:14:1a:ef:ce:02:30:d9:95:e2:54:d8:93:
ea:b8:0f:48:fe:35:ec:6f:16:71:a9:eb:e5:5d:b3:a2:47:0e:
6e:46:34:3e:87:ef:54:01:34:50:ab:e0:5a:b1:e4:38:99:18:
f5:86:86:f8:c6:09:df:d1:be:2e:78:d0:01:c4:44:63:f4:85:
70:43:67:64:cb:5f:d5:9b:84:1d:c2:c1:85:39:c2:8d:d8:8c:
bf:73:f1:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohrgRBFQ0Bcn646mCMPaGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YmJhZWI3MGIzZjFkMDY3MTYzNThhZDlhMmVjZmVmN2Qy
MTI2ZmIwHhcNMjUxMDI2MTgwMDQzWhcNMjUxMDI3MTgwMDQzWjAzMTEwLwYDVQQD
Eyg4OWFmZTBiMWQ5ODY2OWVlMTQ4YjEzOGFmZGZlZWIwZjU0YzcxNzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh7fvTAvWD370QSCjKZFSbYPEpsM
3LRzkeeMqGRNQnu21hoZonJ6CuxnHtAZfEIjQB0iSsNLepBv8q4hcdo1rFznkq8R
xcU9PFE3Bd6K9qtQYXL/yOtA80CyDBP6nO6q+xx3COHLwRaIcSHrr4KfZZxH8s4x
RiBHhqsOda76zEvJhk1od51YQ1xFp+OULJFSI0qlJJjZdY6aVXnz2/DaU4jIq9g/
PdHQQQ7fXxXe/Uij/6Xl97FSTteKGfFZyUnL9bEx3yUkYxH4T+VpKTfYsUXKdczP
JMdYgddiNbV4BKPqyHjjSrSrvUhP7gl/7H4rToxXf3xy6qVzcj5Dlwy1GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImv4LHZhmnuFIsTiv3+6w9Uxxd2MB8GA1UdIwQY
MBaAFIS7rrcLPx0GcWNYrZouz+99ISb7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEx1dXR3c19IUVp4WTFpdG1pN1A3MzBoSnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjdlYjctZTQ5Ni00YzMxLTlmNjct
OTc5MDJkOGE3ZmE2LzEvaEx1dXR3c19IUVp4WTFpdG1pN1A3MzBoSnZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iNjdlYjctZTQ5Ni00YzMxLTlmNjctOTc5MDJkOGE3ZmE2
LzEvaEx1dXR3c19IUVp4WTFpdG1pN1A3MzBoSnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkReojZBk
M1rEsR1aJx1KdiNGgtioUrUNBkbn07tmkohG97nhfxae1Q3+jOOMA91lGatdgEfP
eWsjc9V1hJ2PYQgauviv7u+7GWfXptb5ZhSaLEwB8XqI2hhxmQCu2Hkxj8tNnVQD
8P9hVCuQchSf+RTXS1pVTTej3LUZ0UrggSkbHIOqU9+klwlCIcIrEqe1+PQJ9QbW
+lcRInW6W9hHnlpCUiCPrpywFBrvzgIw2ZXiVNiT6rgPSP417G8Wcanr5V2zokcO
bkY0PofvVAE0UKvgWrHkOJkY9YaG+MYJ39G+LnjQAcREY/SFcENnZMtf1ZuEHcLB
hTnCjdiMv3PxTg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 00:21:39 2025 by rpki-client