Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
File: hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft (raw, json)
Hash identifier: x/UrL2Yox/BIMGiUY6d06BlWG1GHRqWUU/46etZo620=
Subject key identifier: 7D:10:E1:2C:D6:29:59:7F:2D:8E:D4:F7:81:C7:BA:E7:86:E8:0D:FC
Authority key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
Certificate issuer: /CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Certificate serial: 019A15E0BEA7A7A032B33E068564D4886887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
Manifest number: 16F1
Signing time: Fri 24 Oct 2025 11:00:41 +0000
Manifest this update: Fri 24 Oct 2025 11:00:41 +0000
Manifest next update: Sat 25 Oct 2025 11:00:41 +0000
Files and hashes: 1: hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl (hash: SPLtSYV5u2DL+K1vVLXFXtGOLVQPRE4X5oyf4dPm3qo=)
2: lge_NhHNBFIDg0XdYly6isNJOS4.roa (hash: pDkiQ0N7P9YYqBWB2tNQa40hEDOK8eDvKfQ/EMtchvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:e0:be:a7:a7:a0:32:b3:3e:06:85:64:d4:88:68:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Validity
Not Before: Oct 24 11:00:41 2025 GMT
Not After : Oct 25 11:00:41 2025 GMT
Subject: CN=7d10e12cd629597f2d8ed4f781c7bae786e80dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:80:37:15:dd:ca:ca:55:a2:21:ab:e2:78:
c7:e5:20:d1:e1:32:e7:f5:2d:50:45:a2:e5:1f:35:
1d:ea:8d:38:07:62:f6:e9:ac:01:53:fb:8c:c8:7b:
5f:57:92:76:3d:74:22:7a:06:db:a5:f7:f4:75:54:
ab:27:68:15:fc:b0:c4:b0:c0:15:66:76:3b:1d:89:
cc:ad:34:7b:04:4d:aa:70:2c:0c:ab:48:2e:e3:4f:
a1:13:9e:5e:9f:fa:64:d2:34:a8:0c:13:46:1c:75:
66:42:49:45:78:5c:89:e2:7c:be:34:d3:c1:7e:d2:
a7:8e:0c:4b:be:9b:56:37:08:fd:b4:00:26:ef:7a:
b9:56:4a:e0:8a:7f:23:19:86:6e:5f:f0:ec:92:8e:
6f:aa:fc:db:36:09:07:e6:04:36:30:00:e5:34:4a:
9b:c8:05:81:6a:59:dc:b6:12:68:17:42:d7:98:1a:
9c:02:ce:d6:00:d0:4d:7a:68:19:21:d1:77:c5:c3:
78:3e:2e:2d:77:61:a5:48:ed:a9:d1:9e:f0:a5:0c:
f6:1a:70:1e:4b:98:fe:3d:c6:03:75:2f:4a:1a:34:
6f:86:d7:a7:27:67:06:33:9e:9d:e1:7a:8b:d0:d7:
6e:7a:cc:50:b6:71:48:58:d9:d0:d9:38:0f:3f:45:
ba:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:10:E1:2C:D6:29:59:7F:2D:8E:D4:F7:81:C7:BA:E7:86:E8:0D:FC
X509v3 Authority Key Identifier:
keyid:84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3b:b0:a7:14:1d:ff:bd:fd:5e:d5:4f:11:b1:dc:b9:86:8e:
30:ee:b2:2a:29:a5:a2:27:1d:ca:da:a9:54:3c:e5:30:30:e4:
ff:c8:5a:3d:c4:d2:1f:e4:e5:60:4b:34:77:59:45:79:a2:cc:
33:ee:22:ae:b1:85:09:39:0c:f6:71:36:51:68:af:7a:44:eb:
fc:c9:a1:3a:f6:da:fb:25:76:fa:61:a9:6e:3f:db:09:57:24:
66:17:05:64:78:5f:19:5a:de:e5:ba:e3:73:b7:94:99:25:99:
57:e6:7d:de:48:f9:6b:5f:d4:59:41:a3:32:59:c7:1d:94:91:
b8:95:be:ae:e6:48:6f:54:31:76:19:ea:0d:41:b6:b5:7d:37:
d8:c0:02:eb:1d:72:5a:77:51:d4:45:0b:33:4f:7d:31:7f:86:
fa:fb:80:ab:db:a1:a9:f6:8b:b3:0c:34:01:f2:26:7e:b5:17:
ef:a0:32:2c:fa:3f:e4:be:79:fc:da:a0:a2:bc:16:38:27:9d:
4c:b1:c3:19:c5:20:30:75:93:c9:c1:63:0e:8b:4a:ff:57:db:
8b:6e:61:2b:5b:53:9a:3f:4e:63:fe:a8:01:4e:ee:9f:46:e7:
8e:d3:a5:b0:f1:4f:eb:1f:6b:39:dc:e3:a5:a0:32:f7:1f:7f:
f3:a5:61:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 15:49:00 2025 by rpki-client