
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier: aHnhtwBS2ArbpKnDH6/EVxmRLaE3mxjU6kjw3oV5F3Y=
Subject key identifier: 27:75:0C:5B:2C:D3:F8:21:2D:EF:AE:D4:18:B7:CF:11:C7:EC:8B:66
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 019937259467A8DAF89D72AAE6CF7799405C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number: 13BC
Signing time: Thu 11 Sep 2025 05:00:33 +0000
Manifest this update: Thu 11 Sep 2025 05:00:33 +0000
Manifest next update: Fri 12 Sep 2025 05:00:33 +0000
Files and hashes: 1: 09kK1ESpBv8LiYB9wN6M6ItCuW8.roa (hash: knJCckrITclIVMheMGK5cxyj8YBBf+peiHkDGIWIF80=)
2: F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa (hash: Ib9TkfBhAWRiVd7E8+OAkowsQ7AwC9M2n6bdugTcuJM=)
3: _MYdCgDWaO6XB5gVesQLpQpeOag.roa (hash: nreKDXAy4j3D6W3Lae5rvKwQFMf1x+LsfYxvbzIyjhc=)
4: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: 0FO3UDmUCM38Kf4pWkfjvC8pWTBq9vdEC3a98tb1F/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:25:94:67:a8:da:f8:9d:72:aa:e6:cf:77:99:40:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Sep 11 05:00:33 2025 GMT
Not After : Sep 12 05:00:33 2025 GMT
Subject: CN=27750c5b2cd3f8212defaed418b7cf11c7ec8b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:23:e7:28:19:6e:79:08:6a:a6:9b:8f:d9:
39:79:e0:d8:33:d3:8e:b4:14:53:e3:a4:16:0a:39:
f2:14:b7:97:9a:9a:46:9e:24:a4:2f:9d:6a:c4:34:
2f:ce:bb:76:b1:40:21:15:f4:e2:ff:55:ff:47:f4:
bc:c5:01:58:c3:90:c8:c5:60:e3:00:de:2e:a1:c7:
c5:00:f2:56:cb:41:1a:47:66:02:28:3e:a5:c7:86:
ab:e5:89:bb:45:0d:c4:ea:ce:b7:d5:fb:d5:e5:ae:
e7:52:9e:71:50:81:5f:e0:73:bd:f9:3c:44:72:6b:
71:49:25:29:1e:84:1b:14:85:6a:9b:b5:e0:c3:0a:
5d:fc:c0:ad:6d:a0:75:b1:2b:77:af:61:0b:ae:7d:
44:5c:c8:54:94:03:9b:cb:21:81:b0:8f:ae:86:3e:
b2:5f:fc:c1:41:8d:46:07:87:11:a6:0a:9d:e0:db:
5f:aa:e4:b7:33:3a:60:c3:84:b0:c1:1d:e1:4f:c8:
60:0a:33:08:2c:f4:6e:7f:44:3c:65:3b:b3:0d:64:
1d:98:22:16:d5:53:14:d6:a3:3d:03:64:0e:04:b7:
8e:8d:e4:dd:fc:1a:8f:85:2f:e3:f2:ed:1d:9f:7c:
5c:64:ee:39:1d:33:e0:18:73:df:04:ef:28:ab:fd:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:75:0C:5B:2C:D3:F8:21:2D:EF:AE:D4:18:B7:CF:11:C7:EC:8B:66
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:34:e7:2f:2d:3d:8a:a0:dd:7f:1c:ab:a6:0a:61:fe:69:f8:
d7:9c:8f:10:fb:6e:9f:2c:e3:b6:db:83:9e:70:e7:da:f4:6e:
7b:eb:62:24:2c:7d:bb:30:3a:8f:b9:5e:d7:9c:2a:2a:f7:7e:
b3:03:a2:b5:83:ce:0e:7c:e1:b1:33:aa:04:41:3f:17:aa:56:
cf:f0:e8:a5:d4:32:e7:66:45:3b:3e:24:7b:34:c8:c7:45:c9:
d7:32:f7:a8:8d:16:7e:63:75:7e:19:df:e6:f6:35:71:d2:6e:
b7:23:ef:ef:96:b2:02:e5:36:9c:17:af:b9:5c:1c:2d:84:61:
3e:73:28:1c:45:47:bb:66:18:47:77:42:c9:4d:bd:98:e5:9e:
03:1e:8c:4f:24:87:3f:9e:35:a9:f1:2e:88:4d:b5:19:26:2c:
6d:f7:ef:fa:0d:ac:41:ce:dd:53:d9:b6:e9:ad:73:ec:00:dc:
a5:9a:e5:b6:fa:ab:9c:c6:fe:e7:55:6d:33:bd:61:1e:2d:73:
2e:2e:40:48:6f:ec:1d:0a:ac:25:92:77:ac:6a:8f:c7:42:17:
4d:be:15:21:50:5b:a0:bd:bd:89:20:05:5c:65:83:be:ed:71:
fe:0e:8e:2b:11:c9:ec:82:cb:59:81:55:d6:6c:3b:88:d9:ea:
76:9e:be:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:59:13 2025 by rpki-client