Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: GqXppH7dOMl6pXMCkQQqhP3jdK3mhbsP9HQgAVv6FmY=
Subject key identifier: 39:74:B0:F8:5C:01:0F:00:13:33:08:08:9C:92:DC:27:8D:9D:6D:27
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 019A1805E3C47A9E7C369DB9E0C7EFC6931F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 1384
Signing time: Fri 24 Oct 2025 21:00:30 +0000
Manifest this update: Fri 24 Oct 2025 21:00:30 +0000
Manifest next update: Sat 25 Oct 2025 21:00:30 +0000
Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=)
2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=)
3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: BDpJ5VF5gAfBHe51843hBv2fgMbHFI+buW4cPcu/jPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:05:e3:c4:7a:9e:7c:36:9d:b9:e0:c7:ef:c6:93:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Oct 24 21:00:30 2025 GMT
Not After : Oct 25 21:00:30 2025 GMT
Subject: CN=3974b0f85c010f00133308089c92dc278d9d6d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:8f:5f:de:12:72:fb:d4:fc:3f:c0:3d:c9:
49:cb:f2:a7:f4:42:82:71:aa:13:20:24:05:48:2f:
f3:ba:17:67:6a:fb:f4:cd:c0:9f:b3:a3:f7:d6:cb:
84:cd:13:97:e9:5d:d4:63:43:a8:6b:4e:22:e8:3c:
ef:d5:97:e2:bd:45:1a:4d:4d:1e:bb:bf:97:4b:4f:
f5:e5:28:43:1c:4f:7c:e7:88:57:1f:20:90:7a:a7:
eb:37:c1:b7:38:7c:66:52:67:57:02:6e:69:dd:35:
de:20:b1:90:6a:2e:dc:8e:0d:11:7e:b4:2c:58:8c:
01:00:48:73:aa:a5:28:af:98:b7:3a:72:8a:7c:b7:
c2:70:6b:10:9f:6c:a5:e9:70:ff:00:c4:ba:dc:21:
eb:fb:f3:ff:11:b1:3c:fe:96:ee:96:d2:ad:cb:93:
90:37:60:89:ee:72:3f:ae:65:04:87:8c:f6:68:66:
38:0f:05:1a:53:37:e6:c6:ba:e4:af:f1:9b:ca:ed:
f4:94:22:be:9b:3a:74:33:80:94:1d:d0:76:0f:4b:
03:be:e2:b1:ba:68:fe:e1:cf:91:c7:49:24:28:f6:
2e:41:c7:60:58:44:20:fe:6f:5c:9c:e8:21:c5:62:
7a:43:6a:75:4e:11:0f:ed:23:fc:f8:cd:88:19:7c:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:74:B0:F8:5C:01:0F:00:13:33:08:08:9C:92:DC:27:8D:9D:6D:27
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:03:cc:54:89:74:8b:1a:c9:f7:93:2c:3b:e2:92:1f:e7:35:
b3:32:52:a7:f7:50:ca:06:06:03:9d:8e:b2:ee:94:31:73:17:
ef:14:19:db:0e:5c:8b:24:71:19:09:62:18:61:fb:26:a6:2e:
fe:32:16:d0:6e:5e:79:c0:37:06:2c:13:ed:6a:c1:1c:da:80:
6d:3b:71:50:84:a5:e4:de:15:da:2c:48:34:b5:ce:c1:c5:ae:
16:2e:b9:44:88:ae:08:5f:f6:42:a0:d0:65:f7:1e:13:16:8f:
02:95:f4:5d:85:27:6c:8e:a8:60:32:99:0d:08:8d:09:2b:65:
18:cd:77:0b:63:42:7b:06:e5:d1:88:59:ba:7d:b4:5a:32:cd:
00:a7:c5:a2:5c:27:79:53:d8:1e:15:9e:3d:f6:82:0c:3c:fe:
89:ce:74:ec:34:cf:1e:9f:9d:0f:0e:4d:c0:9c:cd:a7:10:bc:
b8:b6:95:cf:1e:d7:f0:9e:42:d7:17:f6:2f:a3:1a:49:23:aa:
3d:26:7c:f3:1d:c1:e6:1f:80:b8:e2:78:58:75:7f:08:e1:cf:
4e:3b:bd:88:e3:f4:be:81:63:27:fa:0e:34:72:93:3d:f8:3d:
fe:ad:83:69:bf:6e:83:e6:46:c3:25:74:6c:6b:a3:3b:b8:6b:
fd:c5:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:14:36 2025 by rpki-client