Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier: pewdLyTJ6A2Qxz2jcglBuXy4TSpbuvfwJfYRc03imb0=
Subject key identifier: 00:96:77:66:DE:E6:0B:35:4A:B3:70:A1:BB:16:CC:8D:95:47:4B:47
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 019A4D3D151A5B9AA5EA42859900029F34C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number: 171E
Signing time: Tue 04 Nov 2025 05:00:39 +0000
Manifest this update: Tue 04 Nov 2025 05:00:39 +0000
Manifest next update: Wed 05 Nov 2025 05:00:39 +0000
Files and hashes: 1: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=)
2: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=)
3: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=)
4: gXTQ_DqBbvWK4zOCraUhqqUl7Zk.roa (hash: qOt1Z426R0Ot2Dml4Qmnhu+irkAmbjEf1aZkvn7kIfc=)
5: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=)
6: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=)
7: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: kUZJX1QrlCzWXG3VQoNO1/obhBVvfDPKUNDL/j3aan0=)
8: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:15:1a:5b:9a:a5:ea:42:85:99:00:02:9f:34:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Nov 4 05:00:39 2025 GMT
Not After : Nov 5 05:00:39 2025 GMT
Subject: CN=00967766dee60b354ab370a1bb16cc8d95474b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:2e:26:aa:42:af:01:a7:4d:7e:c4:07:06:
59:98:ba:a3:75:a7:6d:8b:3a:fe:0a:19:72:fa:cc:
93:a6:9b:e3:60:e9:43:5e:f3:0b:40:6b:7c:c5:9f:
84:5e:0b:9b:a9:e0:e9:e3:e7:87:10:94:c4:22:f5:
77:c4:a8:ec:4a:97:07:e8:09:af:0a:06:85:b1:32:
78:67:56:4a:cb:88:88:98:a8:f4:a4:9a:5c:50:e3:
a1:9c:6d:67:76:67:f4:6b:2c:43:bc:17:8b:21:61:
a4:7c:af:bd:74:1f:81:3a:1a:c7:da:46:3a:55:4e:
23:4a:ea:16:d2:4c:f4:b7:fd:54:01:c8:e5:1a:37:
f4:38:c3:9b:22:25:88:d8:66:f3:46:33:b5:f0:d1:
24:d7:c7:b0:59:71:bc:72:4b:60:63:d5:a9:41:c8:
d6:32:6d:ab:73:87:9c:12:ac:38:40:52:95:eb:13:
e0:36:62:95:1a:f8:e1:4a:45:49:49:be:16:0f:e4:
46:f9:41:e4:76:2a:10:ac:2f:d4:15:e4:15:24:09:
b7:05:c1:39:88:35:14:47:f1:bb:ff:bb:5e:ab:6a:
e7:ee:75:d5:5a:9e:d3:31:32:02:0f:63:f1:a3:f5:
fb:42:e0:dc:8e:2e:b9:fe:9f:26:ce:e2:cc:1c:80:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:96:77:66:DE:E6:0B:35:4A:B3:70:A1:BB:16:CC:8D:95:47:4B:47
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ec:04:5b:5f:d4:42:6b:24:d4:74:50:50:69:33:4a:80:72:
70:3f:c7:79:93:f3:d1:32:fc:d6:8c:78:01:ba:1f:e0:02:f4:
fd:db:cf:8b:43:86:3a:37:73:5f:35:ba:88:fc:6f:4c:6c:7b:
b0:23:00:c4:51:86:df:57:d5:3d:69:97:83:fc:9a:45:32:e7:
6e:67:51:49:72:0d:78:57:2f:1a:d3:c8:5e:b3:7a:02:a2:95:
95:e1:83:60:92:c8:14:60:66:86:77:6f:42:d3:b8:b1:39:ea:
48:05:ff:26:ed:29:f4:c4:cc:29:e0:c9:cf:cf:a6:2f:e6:75:
b5:48:ed:83:1c:1b:97:e0:2d:8a:b9:4e:fc:d2:9b:e4:b2:7e:
ad:b6:7c:a4:f5:26:4d:73:07:e4:94:f1:bd:91:85:1a:8e:6d:
44:da:98:c1:c6:7e:56:f6:9a:a1:12:71:d7:e8:4c:3c:33:5c:
85:05:a1:e6:6d:2c:72:c2:e8:ff:74:57:c2:20:24:1c:cf:aa:
a7:20:c9:c7:94:b9:28:27:18:39:06:b0:3c:3d:ab:2c:c1:aa:
e7:dc:a4:d3:73:5e:fd:4c:de:9e:3a:86:82:a8:37:0f:4a:2d:
06:e9:0b:1e:91:96:cb:ef:ff:90:f8:08:d9:f2:2c:6f:63:71:
9f:a5:e9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:39 2025 by rpki-client