Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier: Tsn2kZtyaEBxXZgCRtLDIBkTu9MF9O2eTikIrLjNMvY=
Subject key identifier: 50:A7:E3:72:6B:00:BB:35:50:A6:20:CC:B9:7E:59:D7:00:86:7C:42
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial: 019A4F993AA1730AF3692E55F2939B55BF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 16:00:33 +0000
Manifest this update: Tue 04 Nov 2025 16:00:33 +0000
Manifest next update: Wed 05 Nov 2025 16:00:33 +0000
Files and hashes: 1: A4RzpDr3gOL8P149IxhrXzrosA4.roa (hash: yOCvJbe7MwqK0UFIIbITRG8d1PF4w5162JM6G8QiNYc=)
2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: 9slcH9yeG7JxGPlA0xynyKJogjIMpq1ebq8gQ2Hb52Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:3a:a1:73:0a:f3:69:2e:55:f2:93:9b:55:bf:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Validity
Not Before: Nov 4 16:00:33 2025 GMT
Not After : Nov 5 16:00:33 2025 GMT
Subject: CN=50a7e3726b00bb3550a620ccb97e59d700867c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:eb:06:1e:ea:53:3d:9e:46:95:07:92:0c:
9e:27:6c:10:88:8b:8d:8f:fe:f5:d3:75:c0:f5:a6:
f1:fc:e6:c6:72:17:c0:d3:02:15:e2:8c:1c:64:cb:
b3:d4:cc:1f:02:73:80:16:5c:54:76:65:df:2f:e4:
72:c9:e0:55:ab:4f:bb:8a:1a:6b:c8:40:3a:56:ed:
f8:a9:53:17:65:f8:b4:cc:a7:2a:b9:a4:d7:74:0b:
30:89:14:ee:34:1a:c4:93:10:b1:66:26:98:fc:6f:
1e:07:ca:b5:7d:65:75:fe:d2:80:7a:bd:33:17:1b:
2a:55:70:5f:ff:3f:a7:57:29:ed:60:0f:9a:97:ee:
c9:8e:65:9e:a6:98:ff:11:85:69:80:07:2d:60:92:
38:23:d0:3c:2c:61:b2:a3:aa:e2:89:85:51:21:4b:
23:91:2b:40:4a:53:53:d5:af:46:97:eb:97:92:9c:
61:c5:9e:03:24:02:01:c4:56:48:38:7e:09:33:17:
1c:11:59:5d:a1:e3:65:70:54:5d:99:a4:c6:b7:d0:
05:52:80:08:c5:0f:45:f9:d0:90:92:64:88:e7:06:
93:23:47:04:2e:e7:07:ef:10:d1:79:3c:4f:62:e4:
ca:72:50:31:3f:89:bc:72:60:7f:aa:ae:37:9f:cd:
fa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A7:E3:72:6B:00:BB:35:50:A6:20:CC:B9:7E:59:D7:00:86:7C:42
X509v3 Authority Key Identifier:
keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7b:1a:a1:bf:97:e7:26:3d:83:d9:65:bd:32:bc:84:fe:c4:
f7:94:15:52:29:cf:e8:94:63:07:8d:88:bc:21:81:b6:5f:c2:
ff:a6:e5:9e:cf:5a:c8:07:a5:c9:ab:59:1e:4d:50:e0:4f:17:
e9:60:25:a8:a3:f1:fd:00:fb:d4:85:28:89:95:33:bd:35:66:
c4:d6:e5:83:1d:97:f2:54:2b:f5:41:22:e9:f5:a0:94:eb:99:
d7:f7:8a:ef:e9:0f:3a:53:8b:ac:38:e8:3f:7a:db:f9:02:c5:
54:9b:40:2a:64:e6:ec:60:af:53:53:83:b1:01:05:01:e9:7c:
ed:09:52:50:db:da:00:67:13:21:ff:bf:48:db:12:5f:53:b1:
00:b0:47:3c:14:29:18:16:3d:2e:a0:30:fb:40:6d:d0:a4:79:
95:ea:ce:13:7e:44:91:62:a7:c5:a0:58:e3:7d:14:5f:8e:00:
1e:a3:4c:9d:e1:09:4a:ad:8a:30:b3:7b:9a:94:22:0d:24:2b:
42:2b:08:1f:1d:fa:c0:84:4d:72:07:a0:b6:15:8f:c9:05:46:
82:99:14:9c:cc:7d:ef:e9:70:ce:6e:ad:58:26:c3:43:24:59:
4c:a6:3b:08:49:a4:ec:f0:99:f0:5b:7a:e8:26:ee:c9:47:5b:
5e:6c:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:11 2025 by rpki-client