Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: QK70zfzpiupZaVGf/ir83ovnorQqDPBB8jFfrKYaAHo=
Subject key identifier: 5B:AB:28:29:42:0E:1F:94:9C:92:37:CE:42:CA:4D:86:48:16:55:D2
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 019A1F519B745473E658576C677E8CC87D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 07:00:33 +0000
Manifest this update: Sun 26 Oct 2025 07:00:33 +0000
Manifest next update: Mon 27 Oct 2025 07:00:33 +0000
Files and hashes: 1: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: bAVujVLypZuqmJ/KcW6rs56JwhrqcwFD0WqMDjMAWtk=)
2: qzdc_fwaLRJwIIHpIg8vA5h4lo0.roa (hash: V/FGmYc5ZjOuTnWlxFYXLE8AFUo6wdD1TCze3ez9KOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:9b:74:54:73:e6:58:57:6c:67:7e:8c:c8:7d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Oct 26 07:00:33 2025 GMT
Not After : Oct 27 07:00:33 2025 GMT
Subject: CN=5bab2829420e1f949c9237ce42ca4d86481655d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:8f:30:bc:75:c7:7f:ca:93:66:c6:e6:96:
ce:ca:78:49:90:1d:08:51:db:94:78:2b:a1:7e:51:
38:43:af:8e:27:2d:aa:30:bc:24:ed:6a:19:27:d2:
cd:32:b0:de:68:6f:3b:fd:33:dc:40:79:df:58:42:
df:f5:36:61:d8:63:b8:b3:37:6c:42:e2:2a:d8:34:
f1:f4:1b:8f:8f:55:90:53:b5:51:30:6f:23:b9:50:
d9:7d:5f:26:08:e5:15:de:b6:61:de:09:83:6f:26:
f2:f0:bc:05:68:a5:f4:12:15:55:b1:65:34:0f:ae:
5c:46:90:c1:88:30:bf:c5:ab:d3:64:f8:64:d0:06:
1f:c6:c1:30:17:aa:4d:56:34:7e:32:a8:ef:c9:8e:
9f:95:c3:e9:88:35:a1:3c:56:cb:8d:95:29:24:29:
f2:b6:83:f3:e9:80:2a:21:5f:d7:f6:30:d3:d1:25:
db:d3:64:b6:71:88:3d:8d:37:e4:3f:65:3c:c0:5d:
53:7a:aa:2b:36:6a:bc:ea:78:6c:81:b5:1c:7e:52:
00:23:0f:1c:77:97:87:6a:65:ff:24:94:23:84:c8:
16:69:17:6e:1d:03:5e:74:dc:f3:7d:47:21:d2:ae:
24:62:57:43:72:b5:e1:82:37:f2:3a:e4:ee:b2:1a:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:28:29:42:0E:1F:94:9C:92:37:CE:42:CA:4D:86:48:16:55:D2
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:11:c4:5a:ff:37:f7:d7:18:90:57:8c:0a:be:16:1f:6a:10:
36:83:b3:d6:5a:a2:88:f4:9f:57:ae:6f:ed:6d:62:64:c4:9f:
5c:36:96:0a:91:91:2a:e5:ff:78:d5:06:19:36:58:b7:7e:f5:
b2:2b:2a:06:b7:e9:40:7f:2a:bb:91:eb:8b:62:9b:56:5a:43:
99:0c:1b:e4:1a:11:32:6a:30:ed:c7:98:d8:71:52:3e:45:9b:
d8:a0:0c:a4:e7:f2:77:54:25:41:db:af:8d:e6:aa:23:16:0b:
ec:d2:72:58:8a:d2:2b:ed:9b:c5:a0:7f:9b:68:1b:ab:38:11:
98:28:de:79:4b:26:ec:63:0b:54:45:0f:1c:d8:ac:c3:50:c1:
5c:08:f1:bb:a4:db:a5:94:8d:e1:1e:a3:a5:09:9d:c7:4e:50:
ac:c5:a1:2f:b8:0f:f3:f3:5b:3e:e9:f3:94:40:51:9b:59:81:
10:a7:ca:03:2e:dd:6e:3f:d9:07:f7:6e:6c:e3:d9:6e:43:f4:
d8:b5:8e:73:96:32:0a:99:44:5c:62:a6:2a:9c:21:a2:dd:e5:
91:2a:cc:7b:51:0e:5d:23:74:64:65:3e:ae:bd:2b:3d:4b:cd:
4f:37:4a:19:90:46:02:e6:b9:00:58:d0:9e:51:dd:32:72:a3:
c0:ed:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:36:13 2025 by rpki-client