Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: 7rIsGU658692EapN0R4OEF2VuqgmJ0k5sUEZJVLLHlE=
Subject key identifier: 51:48:85:D9:99:2E:D7:43:73:52:9D:4A:D8:72:D0:91:7E:3E:F4:FD
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 019A50077FD0EF63D156A6390F2A2BA5C594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 16E2
Signing time: Tue 04 Nov 2025 18:00:59 +0000
Manifest this update: Tue 04 Nov 2025 18:00:59 +0000
Manifest next update: Wed 05 Nov 2025 18:00:59 +0000
Files and hashes: 1: 5PJXNIBNkIDizHXqABCfI2weMXY.roa (hash: mf+a4WKnZwf0YHj/JFfXY0yYuBPjjgdMLip3MBUWcAI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: i57brqccoKJQFjBJLOSC6dUT8ks/qgbQnB/zIbALVWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:7f:d0:ef:63:d1:56:a6:39:0f:2a:2b:a5:c5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Nov 4 18:00:59 2025 GMT
Not After : Nov 5 18:00:59 2025 GMT
Subject: CN=514885d9992ed74373529d4ad872d0917e3ef4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:5f:c7:ab:94:12:2a:ab:db:ee:c7:cf:03:
8f:78:20:18:36:9b:1e:0e:be:00:a6:c3:5d:97:65:
b2:27:17:9a:58:56:08:7b:37:50:9f:ca:26:cc:3b:
55:ae:f6:44:62:ef:3f:03:eb:e7:37:19:dd:2b:d5:
17:de:be:b4:c8:63:f6:4e:5a:63:e4:4a:69:fe:29:
4b:45:46:f5:1a:bf:a6:57:cb:b0:2e:eb:ec:db:61:
c6:bd:ab:4c:f9:c6:d0:b0:5d:0e:6a:2a:15:c9:45:
98:91:a5:9b:f1:2b:b0:c8:12:6f:5c:10:a8:fc:26:
32:25:23:c7:7f:52:c7:88:ba:ed:24:58:78:56:8a:
60:db:a6:26:eb:a1:d5:5d:44:f8:31:06:66:35:fd:
74:11:d2:29:34:f8:54:44:70:19:d4:a6:13:04:2b:
e3:e4:c1:fa:c5:ed:db:45:0d:56:0c:b2:30:a6:a1:
38:83:4b:96:f1:d9:51:c3:6a:88:a6:c9:87:93:7c:
8f:74:a9:8c:37:ac:fc:ef:7e:59:c5:d7:b4:54:6c:
94:78:95:6a:24:14:95:ed:86:4a:76:ea:fd:d6:cb:
5c:d2:bf:f1:fc:7a:f2:d3:e3:3b:00:51:48:8d:18:
a7:77:5f:88:8a:51:bd:6f:6d:21:fa:1b:d9:60:54:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:48:85:D9:99:2E:D7:43:73:52:9D:4A:D8:72:D0:91:7E:3E:F4:FD
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bc:91:bc:8a:6c:64:db:3c:cd:54:57:28:bc:37:d3:09:bb:
45:d5:f6:b5:4e:7e:09:00:0e:5b:85:f4:4f:6f:77:73:03:6f:
db:b3:dc:57:00:c7:2d:d8:19:cb:28:1d:06:e0:2a:23:de:21:
c6:3b:2e:df:17:e8:74:3e:04:d0:77:46:7e:8b:ba:06:3f:67:
a1:68:07:a0:c1:1f:e5:c9:9e:71:5b:c0:17:28:80:fb:e1:81:
07:9d:c3:40:1b:73:4b:c4:c2:5a:d0:8d:a6:71:de:f5:e0:fd:
78:c6:4d:3a:ca:6d:e8:7d:bb:e4:23:ed:73:93:b9:2b:c4:b0:
0b:f3:68:01:0f:a4:98:16:f4:d7:d0:a5:6b:9f:ca:11:ae:82:
28:de:7c:44:f5:15:c4:84:ea:c4:3f:ec:26:dd:da:12:db:0e:
d2:98:2e:fb:d2:48:0f:28:d0:a4:29:e7:ba:f8:ab:b3:43:fe:
27:2c:7b:34:96:e2:71:b6:31:c6:5b:1e:10:90:74:f0:16:b9:
1f:f3:16:d9:e5:d3:46:eb:12:0d:ad:d4:c2:80:33:c2:f7:ed:
8a:6c:09:7f:6f:02:c5:c1:67:ee:07:55:42:48:58:c7:29:77:
a9:52:ea:09:12:e5:87:6c:fa:46:1f:e5:9a:72:f9:a0:6f:6f:
50:0f:01:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:01 2025 by rpki-client