Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: 5G1gUJcv0BQEtt9RYuj2D9esrm0ozNEC0hl/cVbwH+U=
Subject key identifier: 7E:78:D3:BD:BE:2A:3C:7E:5F:76:D0:4C:FA:C2:25:B1:7E:B3:97:3B
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 019A28C31A5D12427298C978E2BB8A90AD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: 02C6
Signing time: Tue 28 Oct 2025 03:01:06 +0000
Manifest this update: Tue 28 Oct 2025 03:01:06 +0000
Manifest next update: Wed 29 Oct 2025 03:01:06 +0000
Files and hashes: 1: E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (hash: TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=)
2: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: /r8aYueE5RVVBrmrz31NRmCYxh68XQ089ZU0Pt1ECXU=)
3: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (hash: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c3:1a:5d:12:42:72:98:c9:78:e2:bb:8a:90:ad:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Oct 28 03:01:06 2025 GMT
Not After : Oct 29 03:01:06 2025 GMT
Subject: CN=7e78d3bdbe2a3c7e5f76d04cfac225b17eb3973b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:88:5e:1a:3e:5d:d0:6b:31:82:c0:c4:a3:
a5:c6:13:60:d4:76:da:57:6e:88:41:2a:c9:38:43:
f4:0e:1b:8c:80:a7:87:2e:a8:d8:e2:ac:c3:72:4e:
a6:69:53:4c:1e:05:f4:76:17:47:6e:e6:0c:00:d5:
38:3e:48:e4:59:28:aa:db:b7:e4:5b:5e:36:f7:0b:
1a:c4:ee:6f:67:12:4f:7d:19:38:11:d1:43:e3:e8:
08:a2:fa:c7:65:c9:0c:89:d7:fe:30:14:4d:b1:2c:
18:41:b6:40:7b:db:22:e4:05:55:9a:15:85:3f:7d:
63:91:aa:be:e1:60:2a:f7:a1:ed:45:60:0b:cc:f6:
84:ec:38:cb:17:6e:47:89:ff:23:c8:d1:6f:b1:90:
02:2f:77:81:f8:2d:cc:91:d2:82:92:39:4f:2c:9f:
0b:0c:2f:ca:b2:e9:53:77:c4:15:0b:1a:e8:cc:f3:
16:28:83:6e:31:c1:cc:53:21:da:e0:f2:d8:05:26:
3a:b2:22:18:9c:d0:9e:04:1d:cd:7c:ce:c0:03:af:
6e:da:74:62:14:58:3c:30:bb:29:60:02:59:01:c6:
5a:c8:9a:a3:d9:c5:a6:28:66:37:01:a5:31:85:2e:
b8:99:30:74:64:c1:01:c4:ce:c7:cb:6a:9a:22:71:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:78:D3:BD:BE:2A:3C:7E:5F:76:D0:4C:FA:C2:25:B1:7E:B3:97:3B
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:79:3e:ea:50:bd:09:e8:11:af:49:1a:b9:43:90:9b:6b:d3:
b1:11:ee:45:6a:3b:8b:e4:26:44:b3:4d:77:23:76:71:ba:9e:
b9:02:c2:51:60:ab:d1:a1:5e:e0:c2:b5:25:86:a9:20:ea:ba:
95:91:a8:a1:b4:1e:4d:d5:3c:69:8a:fc:80:6d:8f:cd:1e:3d:
cc:36:e1:ad:b9:85:6d:f0:61:e0:45:c0:6a:ea:1b:cf:73:0d:
6a:d5:3b:90:2a:42:cd:0e:0a:1a:09:dd:9a:02:c4:3b:57:62:
07:3b:85:fb:80:10:66:ff:3e:90:a9:67:27:34:4e:d9:b5:63:
0e:75:b8:05:95:7d:e0:df:94:0b:1a:e3:7e:30:e6:51:61:f8:
93:ae:c7:5e:22:e6:aa:c3:01:41:b0:90:3f:a9:4f:dd:32:9a:
e4:d0:5d:f3:e4:25:14:8f:4f:f7:30:94:34:e5:7d:59:3d:5d:
56:27:90:b5:0b:ed:bd:3f:33:c5:9b:43:ad:ea:de:64:ec:ac:
f9:78:ac:8e:05:25:b8:85:8d:c1:05:86:98:1e:20:fe:03:d7:
88:4a:94:55:3c:86:8c:88:da:a4:30:5a:79:63:c9:1b:74:f5:
1c:3a:27:2f:24:1a:64:f0:58:7d:1e:4c:38:38:99:1a:86:77:
6f:ee:ff:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:09:14 2025 by rpki-client