Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: p1Vk3dtgZX1X45siupY7ko/7dPSl/0PhhaPHDITmlaE=
Subject key identifier: 68:09:83:F8:8F:81:8C:E8:02:E0:6B:5B:51:76:BA:7D:5B:6F:F3:0D
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 019A21ADA5FF0CD06FB172D45C04DD592AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 18:00:19 +0000
Manifest this update: Sun 26 Oct 2025 18:00:19 +0000
Manifest next update: Mon 27 Oct 2025 18:00:19 +0000
Files and hashes: 1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=)
2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: zYBDSHwWGLknsp6ZscDwZs7efPe+nFKVjzI9S9XC5d8=)
4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:a5:ff:0c:d0:6f:b1:72:d4:5c:04:dd:59:2a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Oct 26 18:00:19 2025 GMT
Not After : Oct 27 18:00:19 2025 GMT
Subject: CN=680983f88f818ce802e06b5b5176ba7d5b6ff30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:8f:5f:d7:92:84:28:e6:8e:3d:82:91:2e:
32:6b:25:cb:98:5c:e2:cb:1f:65:f0:1b:e3:a5:6b:
c1:31:52:b8:47:84:40:ab:24:92:de:2a:0a:21:2f:
69:2f:d4:c3:b9:cd:33:cf:6c:89:d2:b3:5b:18:97:
75:a0:4e:f5:ae:41:fb:f5:1e:27:ed:97:b0:42:48:
6f:65:ff:66:11:a3:a5:59:cc:8c:aa:98:4d:8b:1b:
48:d1:c4:98:69:ab:4f:03:60:7c:a7:40:0d:31:a4:
53:21:2e:c4:db:af:7a:44:30:d1:73:c5:42:1b:e3:
11:5a:45:d5:0d:75:f6:08:5e:91:13:98:23:fe:26:
85:32:69:f5:f4:a8:0b:8e:21:14:ab:8b:98:c9:7c:
56:bf:47:5b:1a:6e:5a:a2:0e:87:d8:df:cf:8f:4a:
62:28:31:15:98:96:57:9a:90:b3:8c:92:7a:a9:70:
e1:55:5a:e6:c5:0f:dd:5d:42:41:7b:3d:18:b3:ca:
a6:e6:d1:f4:34:5e:ff:91:4e:b1:6c:8d:18:2f:fc:
8a:14:24:da:ce:64:62:f0:88:ec:1f:22:b9:81:48:
e4:62:d2:4e:a1:c6:ff:61:a7:9e:1a:da:36:fa:74:
a1:b9:ec:66:d2:db:33:80:88:a8:59:6e:6a:b4:ee:
80:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:09:83:F8:8F:81:8C:E8:02:E0:6B:5B:51:76:BA:7D:5B:6F:F3:0D
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fe:b2:52:2e:4c:d9:c4:a5:1c:aa:b3:27:5f:50:1b:44:ec:
26:d0:d3:be:81:e6:c4:d3:e1:cd:60:cb:45:33:f8:00:59:c8:
ca:2d:28:41:c2:cd:00:81:66:ce:cd:12:a2:87:b9:04:e2:2b:
9d:87:b7:a3:68:6e:8c:9d:8a:75:98:7a:e0:2d:9b:24:42:aa:
52:35:e0:51:93:81:7f:13:54:64:0f:6a:20:46:46:28:5b:3b:
54:ba:18:b0:6f:aa:96:1f:d0:aa:0e:f8:c1:da:f5:d7:25:ef:
79:47:1a:df:6e:62:bb:05:df:1c:3f:e2:6a:9d:6b:7d:81:fa:
54:a2:a1:91:d1:90:b7:c1:92:f2:8c:0b:83:3e:4f:15:32:f3:
73:36:fc:25:cd:a4:8c:5f:78:ad:27:00:65:74:15:0c:9e:3a:
b4:f1:9c:d8:87:77:e1:89:73:22:f3:2c:13:d9:03:3f:9f:98:
89:24:6c:1f:81:db:96:cc:9a:0e:0a:e0:8f:94:9d:5a:3d:7b:
50:0b:92:53:a2:14:5f:3d:fc:d3:de:83:7d:bf:90:3a:44:90:
fc:f2:35:fb:a4:09:b0:9b:35:20:89:84:7c:fe:29:ed:13:70:
0b:1a:d5:19:21:eb:2a:6c:5f:18:e9:b9:2a:a4:4e:55:eb:52:
63:4e:52:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:10 2025 by rpki-client