Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
File: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft (raw, json)
Hash identifier: fRfHZJ2c3p8HZPtqsMWNhl0pGoMXJqEFnnFXp6L4F3A=
Subject key identifier: 33:0F:C1:62:A7:54:DE:DB:9F:4D:33:06:9D:FC:4C:AD:63:ED:7C:91
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 019A4E4F71316BEB741AF319F7A811CBE860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
Manifest number: 16AA
Signing time: Tue 04 Nov 2025 10:00:20 +0000
Manifest this update: Tue 04 Nov 2025 10:00:20 +0000
Manifest next update: Wed 05 Nov 2025 10:00:20 +0000
Files and hashes: 1: 9lF4Wddkx_RwPlb5HR8sz7VHAqw.roa (hash: Hn4j3J9eHkRE5z1tLuZOLQRVHX7ZllrYe5IpQOpZT5Q=)
2: KX-LT3dz707Vp7hkt51mW7kN47w.roa (hash: B+a9FfO6NerOzeUWDsk9OJMmWDCrppwYJ3/nJz/k+A8=)
3: VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa (hash: +w/UxWBt5Z4UXYZ4yW2TIYsp5hWJ/kYYtNU8YXQGHVc=)
4: bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa (hash: FBjUOC9XwfJYZbTFVZbjXTw1auYANpnx/KFKsqWsZiU=)
5: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl (hash: r8Lo34IZs/7iE0H3ZDi5ghQollLhukdb2N4mq+780KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:71:31:6b:eb:74:1a:f3:19:f7:a8:11:cb:e8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Nov 4 10:00:20 2025 GMT
Not After : Nov 5 10:00:20 2025 GMT
Subject: CN=330fc162a754dedb9f4d33069dfc4cad63ed7c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:23:40:bb:9a:cc:6a:88:ea:25:fb:f3:a4:
95:e1:22:18:c0:2c:d5:00:7f:f5:b8:08:8b:fa:f6:
79:32:c7:00:b9:95:28:14:d9:dd:41:66:a5:c9:6f:
d2:3e:f5:5d:4b:d5:f5:70:34:2b:9a:21:7b:af:ae:
4b:03:4c:bd:c5:5d:0f:00:b2:4b:c0:1b:5a:07:c6:
05:69:ad:95:2f:bb:35:57:e5:60:72:52:95:ae:d1:
a5:81:ee:ae:85:9f:a1:11:db:93:7d:5d:e9:77:27:
39:dd:43:c4:24:6d:99:86:52:2c:37:31:ba:6d:82:
16:6f:cb:35:4a:98:32:52:b8:be:e1:72:74:21:2d:
43:1f:d5:86:25:6b:8b:a8:7e:88:df:2c:29:37:2e:
28:ac:1f:8c:c1:f6:05:58:8b:57:5b:0b:e6:6d:ec:
0b:fa:98:b6:2d:20:0a:64:d8:24:fd:b9:eb:f8:b7:
62:f7:db:39:80:33:83:d3:e3:e7:d2:08:0e:4f:63:
54:ad:5c:97:b9:28:85:08:d0:44:f1:5e:99:c1:0a:
e9:cf:f0:39:9d:89:8d:00:c2:8b:86:13:c4:4c:8a:
b7:59:ed:85:30:df:0d:e3:60:35:1b:43:f2:fc:e7:
3b:33:03:5e:56:8c:a5:37:26:01:dd:77:42:dc:cb:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0F:C1:62:A7:54:DE:DB:9F:4D:33:06:9D:FC:4C:AD:63:ED:7C:91
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b7:50:8c:74:88:f8:7f:c9:57:66:3d:3e:01:4f:0b:c0:b7:
e1:88:c3:15:05:bb:e4:de:6c:e0:ff:6b:20:f3:0d:93:86:f9:
27:aa:a1:4e:93:5a:83:08:04:15:74:f4:62:0f:2d:9d:df:27:
4b:2e:c6:6c:b4:99:7e:35:8d:bb:79:63:a3:5b:03:f4:08:70:
9d:af:2c:84:fa:77:a5:29:d1:cc:3c:14:6e:bd:90:0a:e9:9b:
df:97:8a:6b:24:02:8e:8a:54:05:24:7d:5b:0a:8b:10:46:ba:
e6:14:ae:1c:8f:0e:28:eb:b0:2e:ca:9a:83:b1:62:77:96:ef:
20:6f:0f:60:7c:4b:08:ef:9a:81:f7:5c:fc:e6:2b:28:e2:4d:
c5:09:82:8a:b2:2c:68:94:47:5f:f0:80:94:3f:99:cf:e4:81:
cf:85:84:49:40:c5:2f:3c:87:b2:18:53:50:23:6b:78:08:41:
3d:6e:49:c2:49:87:43:28:80:c1:bc:29:8c:9b:6e:99:54:bc:
db:b2:71:a2:54:e8:45:4b:25:d6:7d:72:c2:a3:5f:0c:ae:e5:
0c:72:07:5a:f8:4b:1c:ca:2c:1a:26:20:75:d0:4c:f1:b4:b2:
0e:06:d9:08:f2:c4:97:4d:9f:8a:6a:2c:b4:9e:c6:c7:2d:5b:
65:5e:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:53:52 2025 by rpki-client