Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File: hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier: m0deI0XwgdFFFeauRHY8aVgKHzmFxK9k5ksxzxmPjvk=
Subject key identifier: 57:1F:83:69:C7:E4:9C:A0:DB:F5:83:9E:F3:91:4D:AB:D0:43:2A:45
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 019A29309165FC1BB67BA729BF845A5D7A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 05:00:40 +0000
Manifest this update: Tue 28 Oct 2025 05:00:40 +0000
Manifest next update: Wed 29 Oct 2025 05:00:40 +0000
Files and hashes: 1: 1-DR1I-0Q86yRegJRW48TcU9jkak.roa (hash: BbaoF4QpKICKvF2DFJvuoi1HekvHPPg57x8hdzzKsN8=)
2: QRsEK7Mm82AysiVwrsI0fcQwGZk.roa (hash: +14a6gbAtC3j39lO1seQMdbzRZUzjrGGX9KqhXCRQaA=)
3: bMolsew2aNfnwVEKpwDy2jyM58c.roa (hash: 6E9s83W/T6d5cC26/y3n1N8eAzWZSpgeiiEyiR8AjmM=)
4: exOJgZWKhs3CfxljzDJO3y7m_kg.roa (hash: sLEFa7RsALBhT6NfAUon7unSxy37m3yVXscXWcoyxvY=)
5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: /NMCFV1YXA3yGye72OsjFil23/1dhPmMFYTlbEQUKoU=)
6: nfEFUPm3YqGp7FQGkGbFir0VX4k.roa (hash: wcnZ1tdaEqbHq23LSrQJa3uBDPQRdB3Kf9OV1V7J1L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:91:65:fc:1b:b6:7b:a7:29:bf:84:5a:5d:7a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Oct 28 05:00:40 2025 GMT
Not After : Oct 29 05:00:40 2025 GMT
Subject: CN=571f8369c7e49ca0dbf5839ef3914dabd0432a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:b1:7d:9b:21:6b:1b:dd:d1:c7:4c:68:9f:
2f:81:0c:fc:c8:e8:8b:07:49:65:8e:b0:ee:e6:ce:
c2:f7:7a:09:97:97:4b:b5:ad:32:0b:13:d1:f0:cd:
fd:11:4d:27:7a:24:b9:4a:2f:f5:95:93:02:ab:22:
04:c7:de:9d:ac:11:18:e5:ab:87:c4:d6:31:ab:57:
22:f9:0d:dc:5c:3e:2a:c2:92:2c:3b:5f:cb:66:68:
f1:b0:7e:f9:70:ee:9c:8a:8e:8d:78:c3:9e:3c:59:
f0:15:66:2e:28:da:13:1f:8b:ea:39:7e:ff:a8:b9:
10:f8:11:95:a4:eb:2c:b9:9e:58:78:e5:e7:6e:26:
d9:1b:70:8c:ca:f4:8c:9f:2b:f1:44:a6:3d:ba:14:
2e:33:c7:a8:cf:6b:03:45:cf:08:9a:23:b4:41:ce:
b9:36:1b:7d:bd:72:45:00:0f:03:16:ad:f6:71:a7:
e6:18:76:b8:0f:4e:70:67:3e:cc:d5:96:a0:aa:e0:
e3:92:d3:2e:33:95:78:99:c4:84:b4:ed:8c:d2:02:
b7:45:49:8a:03:f2:ad:61:2d:92:a0:18:b7:6f:52:
cc:e6:e8:f0:01:4e:35:43:e3:eb:14:52:ec:fa:fc:
17:7b:d9:41:a9:69:6b:7f:23:0c:f1:cf:77:66:71:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1F:83:69:C7:E4:9C:A0:DB:F5:83:9E:F3:91:4D:AB:D0:43:2A:45
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3f:4e:04:4e:c4:52:4c:d4:ad:ac:8a:5f:ab:8a:63:14:95:
fb:55:41:71:1e:fb:a4:67:bf:2a:1d:c8:f6:36:06:2e:59:3e:
26:31:db:08:bf:ac:53:27:61:0a:67:61:77:8d:25:2f:f1:b5:
c6:99:85:0e:4b:38:cd:20:57:a0:8a:b9:3e:01:3b:4e:64:98:
b5:e6:f8:43:97:50:8b:24:48:36:27:6b:d3:cc:ea:51:3c:a5:
fe:08:1d:2e:bb:39:83:fb:04:cf:e1:ce:aa:ec:42:bb:5f:eb:
81:b7:ac:e3:f9:6f:70:87:a9:92:21:ac:e5:85:1f:de:99:ee:
0e:df:6e:43:e8:78:44:a8:43:63:54:42:d1:62:c3:65:e4:47:
b1:ab:28:a8:44:5d:87:30:d9:29:79:28:0e:ef:69:e0:b8:16:
ec:d2:27:d0:60:8d:b8:c6:9b:a4:35:f2:9c:b7:d2:9e:a7:4e:
0f:57:d7:3f:da:36:ff:65:b4:21:72:9e:fb:8a:9b:30:dd:61:
0c:bb:54:3a:61:a7:51:f0:9f:c7:1c:cd:3a:a2:a7:2d:6b:b0:
a0:4c:b0:f7:61:91:5f:2e:97:16:65:0a:ae:bb:32:f2:23:96:
58:cd:38:2c:aa:bf:19:e9:49:77:3d:af:4a:42:7e:25:f7:4d:
0c:be:f8:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopMJFl/Bu2e6cpv4RaXXpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWM1ODc1MmYzMzM2NDIyZmYwZWUxNzI2NDc0NTkxZTdh
NDFlNWYwHhcNMjUxMDI4MDUwMDQwWhcNMjUxMDI5MDUwMDQwWjAzMTEwLwYDVQQD
Eyg1NzFmODM2OWM3ZTQ5Y2EwZGJmNTgzOWVmMzkxNGRhYmQwNDMyYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9GxfZshaxvd0cdMaJ8vgQz8yOiL
B0lljrDu5s7C93oJl5dLta0yCxPR8M39EU0neiS5Si/1lZMCqyIEx96drBEY5auH
xNYxq1ci+Q3cXD4qwpIsO1/LZmjxsH75cO6cio6NeMOePFnwFWYuKNoTH4vqOX7/
qLkQ+BGVpOssuZ5YeOXnbibZG3CMyvSMnyvxRKY9uhQuM8eoz2sDRc8ImiO0Qc65
Nht9vXJFAA8DFq32cafmGHa4D05wZz7M1ZagquDjktMuM5V4mcSEtO2M0gK3RUmK
A/KtYS2SoBi3b1LM5ujwAU41Q+PrFFLs+vwXe9lBqWlrfyMM8c93ZnEzjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcfg2nH5Jyg2/WDnvORTavQQypFMB8GA1UdIwQY
MBaAFIRcWHUvMzZCL/DuFyZHRZHnpB5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYt
ZjEzNGU1MWNjMDViLzEvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYtZjEzNGU1MWNjMDVi
LzEvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWT9OBE7E
UkzUrayKX6uKYxSV+1VBcR77pGe/Kh3I9jYGLlk+JjHbCL+sUydhCmdhd40lL/G1
xpmFDks4zSBXoIq5PgE7TmSYteb4Q5dQiyRINidr08zqUTyl/ggdLrs5g/sEz+HO
quxCu1/rgbes4/lvcIepkiGs5YUf3pnuDt9uQ+h4RKhDY1RC0WLDZeRHsasoqERd
hzDZKXkoDu9p4LgW7NIn0GCNuMabpDXynLfSnqdOD1fXP9o2/2W0IXKe+4qbMN1h
DLtUOmGnUfCfxxzNOqKnLWuwoEyw92GRXy6XFmUKrrsy8iOWWM04LKq/GelJdz2v
SkJ+JfdNDL74Cg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 10:56:34 2025 by rpki-client