Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: dQ4Cl4vM/P7om1xClr3bWpMgaU1tBO9D33UIOU+UFjs=
Subject key identifier: A0:2C:B5:04:21:A9:40:A9:0C:8A:23:74:B1:46:69:F2:78:C7:D9:AB
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 019A1EAD04AB5A7EF43EEB1238D59C468EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 0847
Signing time: Sun 26 Oct 2025 04:00:46 +0000
Manifest this update: Sun 26 Oct 2025 04:00:46 +0000
Manifest next update: Mon 27 Oct 2025 04:00:46 +0000
Files and hashes: 1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: wdrd0HxOnVIqaU3qsVaF9vu2bhNEk/hbFPgW3BOwfaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:04:ab:5a:7e:f4:3e:eb:12:38:d5:9c:46:8e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Oct 26 04:00:46 2025 GMT
Not After : Oct 27 04:00:46 2025 GMT
Subject: CN=a02cb50421a940a90c8a2374b14669f278c7d9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:34:a1:94:8f:eb:d0:f2:6a:d6:54:1c:61:
e7:8f:ec:3a:aa:d5:a6:12:93:69:33:b6:ef:df:92:
5b:c3:74:51:f7:ce:72:1a:44:ca:0c:96:4c:fa:a5:
a1:33:9a:97:23:ea:c0:dd:18:eb:8e:6d:6e:a0:d3:
b5:b6:e9:36:fe:64:bd:d9:23:55:62:93:eb:e2:da:
62:ee:32:ba:66:21:bc:d9:88:6f:d8:a5:24:cc:d4:
d4:75:3c:b1:6e:3d:2a:d2:5d:40:23:7d:7d:ca:f8:
24:a5:f3:83:86:e5:56:9d:96:1c:ff:2e:74:54:89:
d2:29:a7:2e:33:6d:bb:41:a8:c7:9e:f6:85:b0:7e:
ec:7b:56:15:69:5b:f0:11:71:5c:de:a5:da:b8:c6:
a0:09:7e:67:ba:11:06:ff:a9:cc:ae:8f:ab:21:5c:
01:d5:dd:fe:9f:c6:75:64:ec:59:f9:31:15:35:43:
b7:cd:05:22:32:d4:5c:72:68:f8:be:81:bc:0d:48:
d4:cb:ed:4d:c5:ba:38:4d:9b:ca:39:ed:93:31:f6:
c7:20:a3:e3:58:0c:85:52:c1:a3:7a:0a:f1:1e:f7:
a9:24:0b:72:fd:90:44:a7:9f:99:e2:be:e9:6f:ee:
fb:c8:c3:7a:9b:52:3e:cf:64:04:cf:1d:3b:22:db:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2C:B5:04:21:A9:40:A9:0C:8A:23:74:B1:46:69:F2:78:C7:D9:AB
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a5:b1:93:e1:8d:03:81:6e:1c:83:ec:45:b9:93:d7:0e:91:
9c:74:8a:6e:ef:75:58:a7:da:fa:47:c6:ab:9a:d2:e0:b6:f8:
84:fe:fb:a7:9a:3a:fc:80:53:7b:bf:2f:7a:52:c9:01:ba:48:
b3:c6:59:03:fc:14:6e:df:47:2d:47:52:5b:ec:f6:c7:34:2c:
d9:ba:29:bb:40:cb:56:43:be:8f:06:48:0b:30:a4:23:d6:12:
4d:81:63:3f:96:99:33:58:fd:fa:69:3e:7d:83:e3:e1:b5:0f:
0a:97:b7:78:16:f2:ad:f5:44:c8:ae:a9:11:bc:da:59:bd:15:
dd:ab:6b:65:eb:d7:2e:11:6c:33:b3:99:2c:e5:17:5d:02:83:
7c:b9:2e:3b:7d:c3:1b:89:51:05:b3:df:43:96:8b:fd:fd:3e:
7a:7b:1f:6b:ab:c3:f5:8f:ea:ca:67:09:47:b8:e2:46:64:b4:
be:9d:60:ad:68:83:60:7e:8d:0b:e6:f8:6d:35:1e:7a:46:1f:
c4:a0:83:ef:a6:65:d4:ba:ca:b0:62:3b:69:c6:35:9a:2c:1a:
59:42:29:36:65:46:a3:35:e9:f0:a9:2a:e2:05:ec:bb:2d:cd:
c8:a1:f5:5f:23:e8:bd:f0:f2:63:dd:cc:62:34:0d:c3:d6:02:
39:8a:e5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:11:57 2025 by rpki-client