Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File: hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier: ehgxa/O9/lM4Vog/iBnCJY7PB5JZkR0hXXRKsnmSoiY=
Subject key identifier: A1:DF:6F:E6:1F:DD:CA:D3:83:CB:52:A4:A6:5F:66:57:C3:82:6D:63
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer: /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial: 019A4E18A647BA663B66DC1781C9F2F02B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 09:00:29 +0000
Manifest this update: Tue 04 Nov 2025 09:00:29 +0000
Manifest next update: Wed 05 Nov 2025 09:00:29 +0000
Files and hashes: 1: 4OM3TuNkPVdmDzic95IjszBtoQA.roa (hash: dt9wokazgTd6EaqSSQPyaNUyIvDqSau9vaZZ+2FBCWU=)
2: POoeZ9JcIrFPhJTeWPU8jpK_vAc.roa (hash: ToulLGENoP/7yn7Jgz/qlwSorKjiORy0BAk4ycS9VNQ=)
3: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: bd6bn0LroKPKXNRkgR6LW26068vnvjglCtFb3FXqi9s=)
4: qeftSyRSXmAOVqQRtKtHutbh0zk.roa (hash: VtULu7reN7PL4/u/6gxMFu7joJNl642+iClkA1K3FD4=)
5: tISHEAHtpJDdCS4l3Yug27J3cB4.roa (hash: MfAYQ6HspqhfS9luXY6/Ub4o3vZ2098dY5v7aRHURxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a6:47:ba:66:3b:66:dc:17:81:c9:f2:f0:2b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Validity
Not Before: Nov 4 09:00:29 2025 GMT
Not After : Nov 5 09:00:29 2025 GMT
Subject: CN=a1df6fe61fddcad383cb52a4a65f6657c3826d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:38:e2:63:e6:8f:93:5a:4f:c2:b1:af:6c:
8a:07:40:69:79:2d:b2:2f:1e:1a:21:78:01:a6:d9:
c3:ed:6d:1f:a4:b2:0e:e1:77:ad:24:01:37:28:02:
8b:63:a6:1c:fd:2e:c0:43:3b:23:a7:d6:0a:8f:03:
8f:58:a9:9f:8b:b0:a1:a9:50:54:9a:15:9c:fb:76:
e7:ef:f0:39:c2:2b:8e:54:40:6b:b4:9a:cb:47:56:
67:67:47:a7:b5:ba:34:0b:14:2b:a1:28:d0:19:84:
49:67:5d:b7:f6:15:75:b0:2b:65:bf:66:30:9b:4a:
05:c5:03:15:fc:3d:6f:21:51:f2:8b:34:6e:08:11:
ec:17:5a:47:56:3f:7f:78:cc:c9:70:04:62:69:74:
ad:fb:75:0a:1b:f9:f7:d2:8f:e0:fb:5a:1d:67:8b:
28:04:15:e2:d8:03:ab:e0:ad:58:ea:db:3c:e9:c1:
42:0a:c9:d1:4a:52:d4:8c:60:42:04:11:cd:60:33:
d7:41:d2:c4:bd:c9:b2:74:43:58:f3:86:29:81:6e:
ec:91:e3:b9:db:14:4f:67:7e:51:a7:e2:11:63:cc:
6b:72:1b:01:60:ae:9e:65:88:01:6b:89:6d:eb:c1:
25:86:47:c5:63:1a:c3:b1:fd:1f:d2:d9:e6:83:ff:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DF:6F:E6:1F:DD:CA:D3:83:CB:52:A4:A6:5F:66:57:C3:82:6D:63
X509v3 Authority Key Identifier:
keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ce:fd:40:53:72:f5:59:86:ec:52:96:e1:59:fd:d4:ad:39:
a4:7a:09:ce:ba:ea:4b:c2:55:01:3c:6d:b0:64:ff:47:06:5d:
77:d1:da:2e:97:71:da:00:72:7d:84:5a:2e:b4:33:5a:ef:39:
a7:b3:96:c5:2b:f8:1d:55:81:45:a0:2f:c6:75:17:18:5d:20:
91:9f:a9:36:91:27:26:b8:f2:d8:e4:1a:fa:0a:1c:ad:96:60:
eb:41:74:83:d2:04:6c:81:a9:de:6e:c5:c5:3c:93:e5:44:46:
42:0a:f8:cc:6d:25:d0:17:4b:66:b3:dc:af:75:f5:ee:30:a8:
41:af:66:0d:36:e7:d8:a8:5b:35:87:05:58:8a:44:16:52:b3:
94:83:32:eb:7e:fb:10:89:30:2e:4e:d6:eb:ad:e4:46:65:38:
00:94:a4:04:56:b3:50:0b:72:0e:b6:50:a0:7f:6b:1c:cd:3f:
20:62:b1:a7:3a:d8:e6:0a:31:29:3c:d0:ff:58:ba:e8:a5:2c:
87:5d:ca:bd:cc:69:56:6b:44:fc:05:aa:20:c1:9b:71:a2:67:
42:d7:54:2c:97:95:13:a4:c8:5b:d3:d4:3f:54:b2:1f:6a:19:
0e:f6:79:cc:7b:45:72:f0:fa:c2:80:a7:7c:40:92:df:29:a6:
e6:95:f0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:20 2025 by rpki-client