Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier: ozUZNqq9LkxFhFS1kAL28etfSUt3GsnDCVMyjg+l5J0=
Subject key identifier: 3B:9A:67:2C:36:E4:48:E9:B5:9A:A4:5D:2D:53:AB:C3:6F:35:CF:0C
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 019A02FF07AFFFF4AABD482F08B9F3BBC1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number: 167B
Signing time: Mon 20 Oct 2025 19:00:59 +0000
Manifest this update: Mon 20 Oct 2025 19:00:59 +0000
Manifest next update: Tue 21 Oct 2025 19:00:59 +0000
Files and hashes: 1: TpP1ghqsvudxwpVNjEnVhO4RWww.roa (hash: 4+AlZPeiYc4qPwqWqByXnBYBTrZOMTJuwqjVuo2TCds=)
2: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: 7eYmF4Q2FIKGRBDa8odTY7z/Hj64FN9DPXY6GosFsr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:ff:07:af:ff:f4:aa:bd:48:2f:08:b9:f3:bb:c1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: Oct 20 19:00:59 2025 GMT
Not After : Oct 21 19:00:59 2025 GMT
Subject: CN=3b9a672c36e448e9b59aa45d2d53abc36f35cf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:79:62:df:9c:a5:e2:9b:15:5f:b9:4b:de:
5e:93:94:3a:d4:db:94:e9:b2:b9:21:fe:02:00:13:
91:66:84:3d:3b:8c:28:e2:ab:2d:35:1e:f3:97:ce:
a3:49:bb:10:35:a7:79:20:b6:2a:5c:57:95:08:a1:
3f:4f:ac:5b:2b:38:bb:cd:a8:05:e6:b6:c2:a2:e5:
a8:50:40:83:db:10:c0:69:91:16:49:87:d1:da:d6:
a2:8f:83:e4:c2:0a:c4:a0:10:19:f2:ed:59:4e:8a:
3d:92:07:5e:90:4f:22:c9:2d:fd:57:1a:da:2f:29:
2d:31:cd:c8:ed:18:f7:f6:5d:ab:40:a0:04:97:15:
af:5c:41:6a:f2:b0:45:05:51:ea:95:b6:69:ea:13:
44:b6:99:f4:e4:bf:9b:3f:21:42:a7:38:a1:fb:8f:
ef:6b:ae:8a:4d:80:49:9c:c6:25:39:c2:c7:23:87:
bc:bb:31:c1:c4:10:1b:a4:97:e7:b7:26:3d:ee:9c:
4d:8a:fe:a7:9b:73:41:f2:86:83:f0:da:df:ef:b4:
b0:de:1c:8e:da:89:68:3c:2f:8d:83:b7:32:6f:7b:
19:e5:05:8d:37:6a:3e:b1:19:e0:49:ac:cd:b6:71:
5c:8f:68:97:0c:d9:07:e2:cb:96:47:a8:f3:5d:64:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9A:67:2C:36:E4:48:E9:B5:9A:A4:5D:2D:53:AB:C3:6F:35:CF:0C
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:51:bb:a3:2a:63:f5:d3:2e:47:67:cc:f3:07:af:43:77:e5:
8a:0e:cb:8f:da:62:74:7e:23:c5:80:fd:39:28:3a:bd:78:99:
0b:84:5c:65:7c:c3:69:e4:17:ee:28:30:c9:34:bf:b6:d5:cf:
14:5f:da:60:31:c8:b0:df:c2:06:61:74:6c:47:fb:c1:18:6d:
7d:b6:f3:30:30:8d:2a:7c:35:80:b7:57:cf:86:9c:cf:0e:e3:
9e:ce:a7:41:b4:26:89:33:64:73:af:b5:07:e1:24:2c:97:9e:
36:e7:ee:83:f4:08:b3:94:c9:9c:51:71:c1:5d:52:06:ed:75:
8e:4e:c3:13:20:18:d6:bb:32:8e:b8:98:d1:d6:d9:d2:99:11:
a8:d6:ad:19:a1:9e:9c:80:68:04:15:90:29:a7:7e:ff:dc:e1:
1d:a4:b5:fa:7a:db:19:14:45:1a:59:d8:38:27:54:ae:10:37:
66:4a:8b:b8:62:00:3b:69:e9:2d:51:53:ea:e7:4e:d7:7b:55:
83:c6:cb:5a:1c:bd:67:38:75:00:32:86:80:de:36:51:22:d7:
c5:cb:ec:8b:64:dd:8f:73:3c:64:ef:a5:f7:40:89:91:78:97:
b9:b7:ac:7f:4c:e7:35:09:66:40:24:d9:25:9d:93:85:77:d4:
76:e0:ce:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:50:55 2025 by rpki-client