Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: uiHbg31LlYxuY/nTIg/kWtp61RwJoAFmHeq5rGUqN1w=
Subject key identifier: 1D:F5:C5:A6:2D:26:02:4B:57:04:28:0B:AA:C6:14:F6:66:DF:E8:EC
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 019A13F23D72AAB017BC50BF49A96F2CC934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 0FFB
Signing time: Fri 24 Oct 2025 02:00:33 +0000
Manifest this update: Fri 24 Oct 2025 02:00:33 +0000
Manifest next update: Sat 25 Oct 2025 02:00:33 +0000
Files and hashes: 1: 1-TKHNCKbZE8g4XJcuPLU9wUNwXw.roa (hash: 4YE3N5IWvrJIb1gbK5UKUvbBqNqAEHWjC5reIu6mjb8=)
2: KPSPKR5CERt24RgHkaAIVOQ-_3Y.roa (hash: /B2g+d8SvUFH1wq4gYFhblNg4apBCw0hfFmzBcRbekw=)
3: bFD1sjNrlT8-Exv5RMapq_1KPJ0.roa (hash: dms0tmgxNyDbB9rboVPonFSAfotpbIdMya/cvQRCIY0=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: m2q1dLGqre+67HY+d9Bze3Wqot1Z89259AdEYy8HklY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:f2:3d:72:aa:b0:17:bc:50:bf:49:a9:6f:2c:c9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Oct 24 02:00:33 2025 GMT
Not After : Oct 25 02:00:33 2025 GMT
Subject: CN=1df5c5a62d26024b5704280baac614f666dfe8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:f8:57:b9:09:1d:d1:ac:21:df:ad:3e:ae:
47:db:f9:46:24:3d:48:78:67:a8:e8:e3:ad:b5:7e:
1b:ea:3d:90:38:fc:63:4f:89:2e:7d:5c:ce:1c:e9:
9b:7d:82:b6:dd:dd:55:39:04:04:24:51:1a:1a:69:
7b:ae:94:18:5e:1d:bc:53:91:9a:cf:97:c8:f4:c2:
71:69:dd:98:71:43:ab:d5:a7:0c:25:8d:ae:10:40:
44:62:50:ee:a3:27:fc:9e:e0:f8:0a:41:c1:0d:f7:
d2:2f:3a:62:19:98:ec:eb:35:7f:12:08:92:fb:6c:
14:58:64:d0:92:88:12:dd:25:c5:9c:0a:26:15:9b:
95:24:88:41:37:50:53:29:e1:42:6c:05:02:da:69:
ca:af:b7:89:16:75:16:e8:80:b0:69:d9:b1:4f:d2:
36:fa:7c:d9:15:21:49:83:2e:4c:ed:f4:e3:cc:ba:
e9:45:e7:bc:7b:e9:fd:30:49:49:4b:95:0e:14:35:
e3:ac:2b:71:bc:46:93:93:a1:27:6c:07:4a:70:79:
8b:1d:5e:12:47:ab:16:49:92:3b:92:77:69:ec:52:
65:a4:3a:50:d8:4e:a6:40:b0:d4:b8:8e:eb:21:e1:
bb:f8:2f:b7:27:0b:0f:f2:97:0a:54:c9:15:43:93:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F5:C5:A6:2D:26:02:4B:57:04:28:0B:AA:C6:14:F6:66:DF:E8:EC
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b4:64:dd:44:c9:8b:90:7c:c1:44:3c:d6:46:8f:34:69:1a:
4b:cd:ea:26:a0:63:99:d6:93:61:f5:f2:b6:f4:c3:fa:0c:74:
94:34:99:8f:cd:d1:ce:eb:a9:36:5b:ae:e9:c1:cf:81:00:f0:
b4:5b:66:a1:5e:71:f8:87:05:40:d8:60:41:a2:da:04:0e:f7:
b8:a1:2f:1d:f6:92:f6:2d:a0:56:14:e2:44:67:8f:5c:47:01:
22:ca:9c:c9:0c:2f:55:5a:18:dc:79:1d:60:9b:62:bf:68:e1:
f5:6b:f6:51:0e:95:b5:be:5a:9a:9b:f4:01:ca:f2:18:7a:bd:
87:c2:19:d7:a4:eb:14:d8:27:4f:eb:4f:2b:cc:51:2e:90:9a:
19:e3:c7:76:e5:03:c4:b1:80:68:13:f1:81:3e:50:38:99:e2:
45:11:bb:b9:04:33:22:16:c0:6b:ed:c2:e7:ef:81:28:2b:5b:
80:b6:59:4c:78:e9:e0:32:a6:38:60:d5:dd:ae:a9:6c:48:ca:
8d:15:72:48:01:1c:49:26:05:ff:98:1f:50:17:58:6a:a3:89:
c0:1f:ae:2c:5e:83:bf:40:ed:0f:d8:36:62:06:0d:77:8b:17:
06:ab:8d:c2:69:65:5c:69:b2:cf:c9:3c:0f:a8:68:66:dc:76:
86:ab:c6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:16:38 2025 by rpki-client