Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier: 5r/uu5GIhkXmNcpFw6ha3Co0T1k6pw6vW9qvIcY5J84=
Subject key identifier: B8:D5:43:D1:46:A8:0E:5C:7F:52:77:47:60:2E:61:FE:3F:1E:20:A4
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial: 019A1F51CDAE17FAE2C742EEC97C28DA7F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number: 16F3
Signing time: Sun 26 Oct 2025 07:00:45 +0000
Manifest this update: Sun 26 Oct 2025 07:00:45 +0000
Manifest next update: Mon 27 Oct 2025 07:00:45 +0000
Files and hashes: 1: A4RzpDr3gOL8P149IxhrXzrosA4.roa (hash: yOCvJbe7MwqK0UFIIbITRG8d1PF4w5162JM6G8QiNYc=)
2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: uNOEhCVdMeE/egXFQxFJdHy+sz/8kHBgmEQTU7r/dIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:cd:ae:17:fa:e2:c7:42:ee:c9:7c:28:da:7f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Validity
Not Before: Oct 26 07:00:45 2025 GMT
Not After : Oct 27 07:00:45 2025 GMT
Subject: CN=b8d543d146a80e5c7f527747602e61fe3f1e20a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:d7:85:a6:55:38:1f:9b:ee:9a:af:6e:71:
67:ac:d9:7f:3e:0b:4b:ab:3e:ea:35:35:a5:16:3c:
7b:19:8c:17:22:9c:a9:98:26:e6:6b:d1:dd:fc:3f:
4a:84:22:b1:10:97:32:9b:8b:8c:41:8d:c5:72:a1:
1e:a9:de:fb:bf:b9:4d:e5:ae:16:50:2c:40:f0:04:
92:91:33:b4:04:d1:c4:e7:77:bd:22:2e:f6:cf:44:
c9:72:dd:99:63:af:55:35:61:bc:fd:8b:f3:ac:c3:
72:d3:14:03:73:24:27:a1:7a:a4:1b:57:cc:8d:c6:
2f:38:2b:a1:44:e0:83:a7:9d:76:97:51:2a:c7:53:
b3:88:2b:d8:eb:23:56:f5:88:c8:bd:6c:d2:8a:c1:
23:11:8b:08:92:1e:96:4d:57:b8:ee:35:ce:2a:83:
53:b9:04:7b:b9:e7:1d:f2:42:0c:9c:62:0c:16:ab:
1d:46:89:df:25:7f:fd:00:92:6b:20:16:10:18:a0:
86:77:db:c5:36:7c:17:f4:df:17:f7:59:b6:aa:d6:
aa:6a:af:6f:ea:a6:24:36:21:6a:47:eb:a0:32:e6:
5f:63:5d:6b:54:86:36:49:a9:8c:da:7c:8d:e0:b0:
33:8a:5a:bc:63:75:bc:39:e7:8e:ea:f8:bf:5b:10:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D5:43:D1:46:A8:0E:5C:7F:52:77:47:60:2E:61:FE:3F:1E:20:A4
X509v3 Authority Key Identifier:
keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ed:85:ef:90:a1:f0:7b:fe:25:a4:b9:5e:78:48:2d:25:47:
ee:8a:f4:e3:d9:74:8e:e0:c6:41:7a:ca:2e:50:c5:8d:d7:ff:
28:c0:7a:0b:8a:f2:8c:6f:6c:b6:4f:c6:ce:f9:ca:4d:9a:0b:
2e:56:fb:ab:79:c5:ba:09:d8:08:ef:71:7d:c6:83:ae:91:a3:
80:eb:c8:9a:f8:40:23:4f:24:d6:f8:68:6e:3f:42:3b:e3:d1:
15:e2:88:fb:5c:fa:38:d5:b4:b4:84:29:cf:ee:0a:f3:80:6c:
55:a0:d8:3d:c6:09:52:cd:d1:20:16:06:61:da:d4:b4:d3:77:
13:70:d5:d2:12:bc:40:17:8d:4f:e0:b7:73:38:94:f4:b3:2e:
8d:85:29:76:0a:81:44:73:da:d8:24:80:d4:28:2a:4e:16:0a:
8f:6c:f7:fc:4f:09:4c:02:75:7b:58:f0:6a:17:35:18:7a:ec:
56:4e:f4:06:0d:5f:06:33:26:27:d4:05:bb:00:ef:8d:15:4c:
ad:02:c8:98:17:f3:30:d6:67:b9:bc:62:f7:ec:ff:a0:3a:61:
78:50:30:47:aa:06:49:a7:23:26:a9:10:d9:2b:8f:3b:4c:c6:
f4:05:52:9a:ef:14:40:dc:24:fb:a9:87:d2:e3:14:45:1d:7a:
d6:62:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:05:46 2025 by rpki-client