Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
File: Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json)
Hash identifier: WNuxq5QUcdmErS+ItWqXT4s2AoJe+SeII2Kvg42r8IM=
Subject key identifier: 1B:06:CD:E4:02:75:F1:38:3C:0F:7D:32:C7:19:B8:4D:E1:7C:2F:12
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial: 019A4DAA9A32B0F6303AA2E5E0262CDD5428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
Manifest number: 0AA4
Signing time: Tue 04 Nov 2025 07:00:17 +0000
Manifest this update: Tue 04 Nov 2025 07:00:17 +0000
Manifest next update: Wed 05 Nov 2025 07:00:17 +0000
Files and hashes: 1: 1qUuzp1BSb73YBxt2G1-L71RBo0.roa (hash: RsoVHiN4hMhxH5nMDIM8Pr6yKP0XCEu41kBjnTbcTNQ=)
2: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: v9QW3XQzmOAfIdpsf3OEmd47VWkUeIK0HPXKyc7qhHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:9a:32:b0:f6:30:3a:a2:e5:e0:26:2c:dd:54:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Validity
Not Before: Nov 4 07:00:17 2025 GMT
Not After : Nov 5 07:00:17 2025 GMT
Subject: CN=1b06cde40275f1383c0f7d32c719b84de17c2f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:06:e8:a8:2c:ab:48:c4:de:f6:49:13:b6:
41:23:64:61:44:f5:52:e5:1a:6f:8e:1c:11:9b:e4:
d2:df:f1:91:d2:a3:bd:4a:de:24:2c:da:28:50:ee:
87:b2:c6:40:d3:ea:ff:2b:a8:7a:50:82:27:1d:92:
bf:46:5b:d2:69:29:ad:d9:d8:52:e8:cc:1d:d3:90:
12:8d:23:a2:59:a7:a3:e4:7f:8d:c2:ed:84:26:bb:
96:a2:5d:68:15:4d:2c:1a:ca:ac:de:08:ec:c9:e5:
58:36:1b:71:04:4d:48:87:04:c1:2e:ff:e1:21:f4:
35:64:40:6b:39:b6:c4:41:03:60:cb:b5:df:12:46:
c1:8e:86:69:09:0e:d6:a3:5f:e2:2a:5d:64:e6:c5:
51:77:f6:f5:2d:9c:cf:6c:57:69:a5:9e:55:60:2a:
fc:2a:9e:6b:2d:9b:ba:cc:37:c5:c9:62:d7:b2:5c:
86:eb:8e:51:0f:e9:c5:db:0e:0b:96:17:ba:fd:49:
cb:f0:51:13:ec:a2:ff:68:e0:a6:66:ff:d1:5a:07:
a5:82:f6:aa:02:d8:93:05:be:08:c9:ca:64:28:9f:
e5:5b:24:c4:91:41:a9:26:be:7f:f9:04:d7:c0:82:
1d:74:a9:ff:9a:c7:af:b4:73:6c:f8:32:9d:d6:5a:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:06:CD:E4:02:75:F1:38:3C:0F:7D:32:C7:19:B8:4D:E1:7C:2F:12
X509v3 Authority Key Identifier:
keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:07:bd:6d:e0:79:07:94:3e:da:d4:d9:1e:15:53:de:05:a8:
b6:62:50:f9:e0:bc:d0:7c:c9:cb:c9:4d:f8:9b:33:75:2f:8b:
8b:c8:0f:fd:5c:5a:a9:47:6b:90:4b:00:5c:36:bd:26:a5:84:
48:dd:9a:2c:14:98:15:03:fe:a3:92:5d:54:f3:03:64:69:cc:
f3:2d:73:79:79:3e:5a:72:1a:7d:45:49:57:78:98:bc:87:69:
63:a0:e6:c8:3e:3d:72:e0:ca:1e:ca:34:ce:1d:83:89:89:31:
2b:5d:2d:a0:28:f9:7c:ee:d0:f7:e4:d9:d5:e2:c1:03:fe:f0:
3c:59:b7:22:62:e1:c4:92:d3:a2:d2:5d:35:f2:67:e4:bf:09:
f3:3e:cc:ba:86:91:c1:bc:3a:38:31:3a:91:43:87:e0:8e:a7:
18:c8:50:10:b5:44:22:bb:1e:ae:5b:99:10:98:3c:45:79:94:
28:86:44:07:b2:63:55:a2:69:4b:de:f0:fa:5c:59:a9:c8:ae:
a0:d2:1e:83:76:75:b7:bd:12:8e:a8:16:8f:9c:cb:23:98:5f:
23:36:9d:7a:a9:a8:39:87:0d:46:80:ea:df:b9:57:c0:e5:9a:
87:af:de:5f:86:f8:8e:15:1b:be:4a:71:7a:18:20:0a:97:b9:
0e:dc:38:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:43 2025 by rpki-client