Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: yY+0o824STbZQ+ZhF+/+DOaSXA7Uz6lxd/4kwPUBO9U=
Subject key identifier: 06:F7:6D:3E:54:0F:F6:74:BD:27:89:56:A6:C3:24:13:F2:0E:EF:B1
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 019A1C199C87B9B794BB639FD6C129CC93B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 2D
Signing time: Sat 25 Oct 2025 16:00:31 +0000
Manifest this update: Sat 25 Oct 2025 16:00:31 +0000
Manifest next update: Sun 26 Oct 2025 16:00:31 +0000
Files and hashes: 1: VApcgRE4jCfqWsVvaGSgipYw68w.roa (hash: A0jt937wu1wIoLHac2gn8nLqE9B73D2kq/AGcMo7Moc=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: Y2HVoReLYXfO30ToPFThjmdXQT5wRb6e9jsHbEtgYxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:9c:87:b9:b7:94:bb:63:9f:d6:c1:29:cc:93:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: Oct 25 16:00:31 2025 GMT
Not After : Oct 26 16:00:31 2025 GMT
Subject: CN=06f76d3e540ff674bd278956a6c32413f20eefb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:87:7a:a1:19:99:2c:da:85:0f:be:8f:08:96:
73:c5:b6:64:7c:1b:c6:02:26:82:2f:2e:c9:6d:8c:
7c:8d:bd:34:f6:ff:ef:6d:57:54:ad:bd:ce:8e:83:
c2:bf:90:7a:26:4b:52:b1:3b:d1:8a:45:ed:0d:cd:
13:a1:69:4f:b3:af:77:21:98:22:53:7f:1e:5b:ab:
86:33:2e:18:48:cc:30:52:51:5a:5f:fa:90:ee:dd:
e3:4e:73:f0:8e:6d:22:e6:92:ca:b3:05:b2:1d:a5:
6b:00:1f:10:9f:9f:20:74:c4:0a:79:ba:29:a3:79:
85:bc:18:8c:c6:d7:70:a6:ec:f6:0e:07:50:a4:e7:
70:88:f6:46:2f:74:15:81:36:04:1d:42:6e:60:00:
3b:55:f4:d5:4b:8f:bc:f6:7f:f0:6f:21:cc:df:40:
db:fd:2a:2a:9a:d7:b3:a7:d5:0f:59:92:4f:00:01:
61:40:3b:bb:9d:b4:80:d4:9a:cc:f0:92:5f:7a:41:
8a:d2:63:4c:04:51:f8:53:84:f5:26:fd:03:28:b1:
5e:24:3a:d8:e9:a8:b4:7d:5f:2b:d2:80:12:e8:6a:
8f:ed:ac:cb:6a:28:cb:af:ff:5d:da:1d:52:0d:e4:
56:ae:83:27:5d:61:e2:25:7f:96:16:1b:b7:65:2b:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F7:6D:3E:54:0F:F6:74:BD:27:89:56:A6:C3:24:13:F2:0E:EF:B1
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9d:ab:73:c0:8a:4d:b2:85:b6:6d:d7:76:13:2f:e2:83:d5:
1e:4e:d6:66:c5:b0:94:c4:7b:d3:a8:fe:ba:eb:c1:52:ed:3b:
93:f8:f1:05:0f:c8:3f:2a:be:02:8f:43:c3:41:c5:5b:ed:ee:
9d:00:81:c9:3d:59:81:39:e7:13:bf:09:e8:e8:7d:7c:7f:21:
0d:53:2b:61:9f:6e:05:1c:ec:d5:c3:aa:bd:9b:3b:a9:3b:3f:
ea:31:36:f5:5a:1b:5b:85:a4:01:a9:c5:13:bd:c2:9f:5b:fb:
e1:cc:05:f3:33:04:15:6b:33:ea:ba:db:e5:c6:32:36:5b:ac:
73:8f:45:c5:a2:9e:00:b0:70:70:37:1e:ce:e7:02:a2:18:12:
df:36:76:34:7a:f1:13:99:f5:e8:5d:d8:be:ab:6f:b7:e6:06:
2d:6c:02:05:26:a5:4a:ea:a6:2c:73:92:09:68:0d:8f:5b:eb:
35:9e:ac:d4:89:12:a6:6c:17:1b:b9:e8:a4:c1:bf:69:b7:0e:
05:52:10:b0:78:de:3a:aa:da:21:05:1b:4a:f5:7a:d1:dc:c6:
4c:2e:be:08:8b:57:e0:36:41:ff:ef:8c:0f:c3:0c:92:21:d7:
18:bb:62:86:a4:ff:1f:22:66:5b:94:47:f1:e9:6f:d9:c3:fb:
2d:9f:33:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:55:50 2025 by rpki-client