Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: j8Z3YnNSkXKSbgpTHJQKxpKfbUsAK4a+oVZmfb9F3fo=
Subject key identifier: 78:19:62:66:FD:93:7D:7E:10:C2:57:F7:2C:80:1D:6D:EC:05:6C:5F
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 019A2A79F9D08253ED807BCCCC1EFD525E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 11:00:28 +0000
Manifest this update: Tue 28 Oct 2025 11:00:28 +0000
Manifest next update: Wed 29 Oct 2025 11:00:28 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: kJqFvQnrxktrjac+apZf5XzAD8qlClc3iGBJ1LuU4Qs=)
2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:f9:d0:82:53:ed:80:7b:cc:cc:1e:fd:52:5e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Oct 28 11:00:28 2025 GMT
Not After : Oct 29 11:00:28 2025 GMT
Subject: CN=78196266fd937d7e10c257f72c801d6dec056c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:9e:de:ac:85:45:20:99:21:51:77:b2:1e:
0c:55:85:10:a7:42:35:4b:17:7e:28:9d:a0:d3:99:
ab:6a:7a:0a:b2:61:be:7c:5e:58:a4:f1:d6:bb:10:
38:08:48:dd:8a:43:46:1c:d9:9a:15:13:66:68:47:
14:0e:4a:ae:67:e8:88:7c:70:0c:29:80:31:52:ac:
ef:c5:e3:6b:96:64:b4:8b:27:89:f8:42:17:9c:06:
a9:a7:e9:ba:93:b0:0b:b8:29:20:ef:26:68:db:c0:
0d:12:43:c3:81:73:2c:c4:5f:58:8c:cb:bf:b8:9c:
5b:43:5d:6e:9f:53:f5:dd:6b:c4:08:b3:ff:8f:9c:
14:dc:6c:00:2c:38:fe:ce:8a:29:d8:ff:e6:25:47:
ba:5f:23:33:6c:92:c0:f6:1e:91:54:41:fe:21:a2:
b2:b0:6c:a2:7d:39:f3:27:fd:a4:e6:24:bc:8d:ad:
f8:11:4c:70:6a:e8:0e:1a:da:69:0f:be:49:b8:c9:
1a:50:ed:4b:93:ef:07:7d:b1:02:2e:fc:22:27:de:
fb:30:5a:2d:38:1e:f4:fd:7c:53:e6:10:91:4c:52:
97:11:cc:d6:b0:fe:42:2e:d2:25:cc:42:ae:6a:ae:
22:8e:ec:8f:b4:aa:fa:cf:3d:14:c4:9d:64:07:4f:
be:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:19:62:66:FD:93:7D:7E:10:C2:57:F7:2C:80:1D:6D:EC:05:6C:5F
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4e:f3:80:3b:28:52:c8:3f:7f:80:46:e7:d5:bb:97:ba:35:
d1:75:6b:dd:96:72:fe:28:ac:4c:85:2a:cb:c2:c0:b3:df:76:
91:8a:55:b5:78:57:30:7e:07:e1:8a:64:3a:57:b9:8b:11:90:
54:0e:ca:d2:9c:93:a5:45:cf:d6:7e:43:f6:1c:b8:04:e3:a0:
3f:6a:8f:2f:14:d6:32:32:6a:9c:06:be:a9:ed:e3:50:20:ca:
22:9a:04:10:ff:67:e2:f7:c7:0e:84:d1:22:43:8c:5f:67:4c:
96:de:85:77:d9:90:aa:9d:d7:ea:38:fc:ca:0d:82:d3:e8:a3:
8b:9c:0f:c2:a0:bc:f0:5a:45:b2:f4:5e:54:72:eb:18:b5:dd:
73:da:88:03:bc:94:76:84:2f:8d:c5:fb:01:bb:05:ac:04:55:
35:42:16:50:95:32:d6:f0:1b:05:a7:4c:b8:77:06:32:58:50:
2e:a6:de:52:13:16:b1:07:71:96:18:4e:73:1e:bd:6d:70:d2:
5b:d6:dd:07:0f:bb:ff:d0:01:55:a9:e0:c3:21:8c:7f:74:c2:
ee:56:18:24:bf:f8:5a:92:a0:2b:2a:29:9b:19:b4:e6:67:83:
48:3b:35:17:1f:8c:ff:e6:05:cc:7f:90:ab:94:90:ca:44:41:
77:8f:16:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:08:45 2025 by rpki-client