Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: KtFceIv/+Bmk9hNg43HonCcKIupBeQ0SUg5Q7Pygg1w=
Subject key identifier: 89:E4:6B:CC:ED:64:D2:E3:7E:B6:11:82:7B:2F:87:C0:BD:A4:4F:BB
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 019A4D066169758A7229C7A37940AEB8BE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 16A1
Signing time: Tue 04 Nov 2025 04:00:55 +0000
Manifest this update: Tue 04 Nov 2025 04:00:55 +0000
Manifest next update: Wed 05 Nov 2025 04:00:55 +0000
Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=)
2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: XstFCY4VZwlo8xE8KrCiNgdM7U4mQ6jkPqCBlxVHStU=)
3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:61:69:75:8a:72:29:c7:a3:79:40:ae:b8:be:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Nov 4 04:00:55 2025 GMT
Not After : Nov 5 04:00:55 2025 GMT
Subject: CN=89e46bcced64d2e37eb611827b2f87c0bda44fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:8e:7c:fb:59:a3:bd:18:a1:db:18:3e:e6:
2a:62:d7:48:4f:32:dc:42:be:81:b1:20:5e:eb:a0:
ea:45:b9:0e:1a:af:42:a3:79:e4:43:11:39:02:ac:
c9:d7:33:0f:89:07:12:89:3a:a8:28:3f:22:b9:4b:
b9:b9:d4:44:4a:77:da:9d:16:b3:f8:05:da:04:e1:
55:4c:c0:9d:0e:7c:fb:4d:12:91:18:51:22:44:51:
c9:e1:c6:69:1e:71:56:c5:8b:20:67:0f:5a:77:00:
d6:2b:1c:79:c9:d5:ed:78:9b:72:48:b7:91:a1:67:
9c:b9:ef:64:c9:d8:ce:f1:4b:89:2e:64:fb:96:75:
d9:6b:40:06:8f:89:d2:d0:3f:f6:cd:83:a8:be:05:
4e:c8:d6:cb:f1:8e:23:e0:94:a7:c5:d3:19:cd:9c:
df:b7:7a:fa:be:d0:fd:26:db:65:53:37:b6:7b:ea:
95:9f:a5:ff:17:d7:06:4d:9f:a8:80:8c:3e:b5:ef:
6f:81:aa:a0:14:5d:01:b8:9a:2a:9e:e3:58:5a:bd:
d2:83:7c:b4:5b:60:2a:a2:71:92:51:9e:ea:9d:09:
9b:d2:7f:2b:79:6d:92:05:0e:f7:5e:da:32:ed:d1:
3f:cb:6b:f2:f6:71:28:4a:75:66:91:41:bd:e7:0f:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E4:6B:CC:ED:64:D2:E3:7E:B6:11:82:7B:2F:87:C0:BD:A4:4F:BB
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:df:7a:82:27:c2:71:f4:68:9e:ac:52:a2:d3:50:df:24:63:
24:1c:ff:a3:ec:4d:26:22:90:05:ca:43:9f:f4:37:82:f3:20:
b1:5c:3c:89:c5:83:7c:6e:78:e5:8d:09:10:18:1b:44:23:de:
6d:dd:96:d0:45:40:d3:8a:65:b3:32:05:b0:96:87:37:85:72:
bf:d1:13:bd:ca:60:8c:8a:fb:3c:1d:b5:21:32:dc:f6:34:dc:
27:96:cd:cd:26:20:98:01:89:09:b0:80:68:2e:b3:e9:a7:1c:
c6:de:bf:fd:eb:c2:36:dc:04:84:98:4b:04:18:52:bc:a3:84:
93:fd:fe:6d:99:42:34:8e:b5:18:86:93:3e:31:06:23:3c:e5:
20:84:e5:5f:f0:c4:14:9c:33:6e:88:fa:2f:85:77:9c:d8:61:
9f:a3:71:01:07:62:95:12:ad:42:1e:1e:07:ec:e6:54:d5:ba:
ef:d2:c8:48:61:37:9f:dc:11:2f:d3:eb:31:30:6a:79:f7:dd:
e2:5d:e3:4c:e0:2a:06:92:69:33:ea:da:fd:97:70:0e:fa:ae:
c4:31:6f:44:17:1a:fc:70:a1:79:05:9c:37:54:25:bf:d0:a9:
80:04:5f:0d:25:b2:39:b5:41:ed:32:da:31:05:d4:eb:1f:32:
f8:e3:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:26 2025 by rpki-client