Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier: oS3xS4FsZHnjAVAe8qgvAgSckvN/NZFNXEeFuWNmCg0=
Subject key identifier: FF:2F:85:E7:B9:E0:A4:50:CF:27:F7:F5:8D:96:C4:1F:D4:17:AC:7E
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 019A2478BC92A56C05AFA1697A5658E0DA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number: 0B39
Signing time: Mon 27 Oct 2025 07:01:23 +0000
Manifest this update: Mon 27 Oct 2025 07:01:23 +0000
Manifest next update: Tue 28 Oct 2025 07:01:23 +0000
Files and hashes: 1: d4QzmUrPPbJQxMw96G7I8wKAY_8.roa (hash: kCIIAo6mIinxOh21iDNSoj9jRYqWTcCgtvPqYHHPUqY=)
2: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: 2t7X/LevfeJTH2I2yQd7brgOTkPoLAR9r595qaxMos4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:bc:92:a5:6c:05:af:a1:69:7a:56:58:e0:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Oct 27 07:01:23 2025 GMT
Not After : Oct 28 07:01:23 2025 GMT
Subject: CN=ff2f85e7b9e0a450cf27f7f58d96c41fd417ac7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:27:99:e9:6b:34:7f:ed:f6:8e:3f:a1:41:23:
7f:7c:13:8c:a3:22:8a:6a:34:11:30:38:c4:38:cb:
f0:58:4c:bf:b7:71:a8:b0:c0:79:1e:34:70:65:2b:
bf:ad:7e:a7:16:11:bb:0c:ab:b5:ec:c8:47:5b:40:
70:27:62:87:b5:cf:99:de:5f:3d:2c:25:8a:d6:b7:
3b:96:66:c3:cb:b2:45:5d:ae:fd:fe:8a:ef:6a:8a:
de:16:a0:f3:a6:fa:98:31:c3:78:5e:ea:43:be:33:
d3:c2:d0:f6:6d:bd:6d:5a:ce:04:bd:4d:aa:7f:5d:
f6:d8:88:ea:95:4d:b8:77:bd:2b:ef:7c:c0:1c:06:
37:fc:ff:4d:95:2a:e2:66:da:28:35:0b:39:9e:e7:
56:c6:88:80:79:02:bf:0b:20:d0:10:c6:9d:85:90:
f6:de:2a:85:7c:a9:33:61:7f:f4:b6:c2:9f:fd:d7:
39:41:d7:db:5e:58:9f:43:de:24:7c:ef:2d:e6:9e:
13:9f:dd:53:bb:0a:b0:bb:ac:29:09:6b:54:9a:09:
ea:1c:22:e2:ad:48:eb:fa:f4:29:a2:0d:ff:33:0a:
aa:80:5b:f6:31:cc:96:73:0a:cc:65:05:f6:d1:ed:
94:3f:7d:43:3f:01:35:81:9f:2c:e8:f0:32:5e:3e:
a1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2F:85:E7:B9:E0:A4:50:CF:27:F7:F5:8D:96:C4:1F:D4:17:AC:7E
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:27:bc:14:f6:b5:03:99:ca:b2:14:ba:b1:c1:15:0a:44:a3:
fc:08:0a:7b:39:c9:53:e4:26:a1:a0:44:94:f5:8a:03:6e:9b:
24:41:77:02:89:ae:8d:3f:0e:64:aa:c9:48:75:86:c1:df:5f:
fe:bd:b0:3e:9d:87:e7:91:51:06:6f:18:f9:79:04:b3:ad:45:
e7:a5:3b:5d:cb:68:78:ef:dd:c1:d1:af:6f:fa:e5:e0:a5:7f:
9c:65:4d:1c:e3:c7:c9:3b:51:15:be:77:80:9d:7d:bb:2c:ce:
eb:a6:66:24:29:c6:60:5f:01:4c:d0:5a:d9:d2:ce:39:7f:47:
67:86:9d:00:ce:51:33:7c:05:1f:aa:00:12:81:b3:84:ad:78:
05:41:e5:5d:bc:02:7a:f1:ed:27:eb:a0:50:92:6d:8a:18:33:
7b:a3:91:3e:3f:f8:4e:5f:59:af:a9:e2:b2:c5:74:a3:42:88:
4b:09:fc:15:0c:80:99:ee:00:52:66:4a:4e:d7:7c:5f:8a:e1:
0a:73:f4:02:d8:ac:8d:af:12:fe:2c:e7:05:e4:96:44:f3:32:
16:c7:e6:6a:9b:cf:69:30:37:8a:52:97:71:21:7c:63:66:7e:
28:9c:91:58:2f:3a:b3:86:fd:80:24:eb:b6:34:10:4a:f8:83:
df:b0:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:05:24 2025 by rpki-client