Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier: G4L+yZt/IxptbKYtd+gkd/3KyAm7cBLCXmztnpjJ+qw=
Subject key identifier: 22:9A:2D:2A:79:28:F1:32:D0:C2:ED:BA:12:80:9E:43:2B:B2:33:CE
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 019A4D06C9B093BADD01BC7C2F31FBCFB2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number: 1234
Signing time: Tue 04 Nov 2025 04:01:21 +0000
Manifest this update: Tue 04 Nov 2025 04:01:21 +0000
Manifest next update: Wed 05 Nov 2025 04:01:21 +0000
Files and hashes: 1: FYfGapYZgv1rSx7oxjUTR0AEqSI.roa (hash: /yS9+tjgVqFWik3KkW3YA5pzZoZBBA4Y+IeN8zVnoxw=)
2: d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa (hash: zX9r1B9nDeSmX0ma2mBmx6eNhz70tybIXv2tasEp9Z0=)
3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: H8dVp5vfy3LgKfQrCeJwc7WgRhJ4xLP6taoXjfFk9X0=)
4: j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa (hash: xMubkcRgzBEAU63sGA3yqVsJQIJj2JYDdMpLJL8yY80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:c9:b0:93:ba:dd:01:bc:7c:2f:31:fb:cf:b2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Nov 4 04:01:21 2025 GMT
Not After : Nov 5 04:01:21 2025 GMT
Subject: CN=229a2d2a7928f132d0c2edba12809e432bb233ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:4a:af:5d:6f:40:50:fa:2e:40:26:0d:58:
e2:f3:cb:97:8c:d7:66:6b:f5:09:bb:04:6f:cf:03:
14:eb:cd:44:b9:c5:15:c9:8a:ea:36:7d:55:e1:91:
63:d5:a5:da:67:24:af:c6:2a:d1:a5:3f:6a:78:05:
b1:b1:d0:0a:a9:27:a2:c8:7b:15:03:77:6d:e4:77:
fe:17:76:a6:83:07:27:77:20:87:1f:75:4f:f6:f4:
7d:aa:e3:fb:4b:28:f4:b2:64:ca:3d:f3:b4:31:f2:
82:1e:d5:c9:78:bb:d6:97:e6:b5:6e:6e:c9:ef:be:
82:14:51:ab:96:ea:58:8d:4e:65:79:ff:ac:63:4c:
5e:e9:2a:b0:8e:b8:b3:44:4e:ab:42:85:db:5b:bd:
dc:74:24:fb:57:95:ff:1f:27:43:e8:0c:19:bc:2c:
eb:7b:a6:47:cc:c4:69:67:92:f9:5d:3c:8a:02:25:
48:46:aa:ca:23:c1:5d:d8:a1:ea:e7:6b:b6:a3:01:
2e:00:28:8c:d3:68:ff:e5:53:70:ba:43:94:66:4f:
e8:38:d3:54:8d:62:59:0a:e4:3c:a2:ff:94:52:40:
98:20:aa:c1:af:a0:af:9a:50:c8:85:bd:96:70:63:
8f:a9:35:24:c2:e8:3f:73:14:13:45:8a:2f:53:bd:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9A:2D:2A:79:28:F1:32:D0:C2:ED:BA:12:80:9E:43:2B:B2:33:CE
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:79:5e:c6:05:fe:67:69:a6:1a:4c:07:6b:77:24:ce:a6:87:
6f:d5:ec:33:4f:4a:1e:50:e6:d4:d6:62:b2:25:3e:9f:fb:1c:
8a:93:53:f8:16:c4:7e:6a:f5:a9:e1:3b:f7:7b:d3:a2:fb:40:
c8:f0:74:5a:3c:97:88:5b:14:1a:70:83:4d:df:0a:ed:15:c2:
e4:15:89:9b:d8:5a:7c:3b:97:07:3e:92:f9:9e:2b:05:cd:59:
b6:83:8e:35:50:05:b0:ab:f3:77:1e:91:76:d3:97:6b:2f:74:
06:a1:57:3c:f5:18:9c:e1:78:b0:d4:f5:04:21:27:6c:fb:65:
c8:b3:0c:e4:4e:6a:fd:9f:e7:23:a6:f0:33:58:91:ec:eb:be:
3c:a6:ac:26:7f:e9:e1:48:5b:6d:05:f2:e2:dc:21:6d:44:60:
0e:37:05:02:41:7a:b8:28:55:c4:34:37:ea:ce:e1:36:7b:50:
c5:f0:f7:86:14:5f:8a:65:62:a7:94:52:e8:02:9a:c2:c2:ab:
1e:48:d5:58:bc:31:d0:c2:3d:98:a7:cf:72:72:45:4c:65:8c:
91:8f:d6:95:0c:76:79:cc:e8:05:96:02:ac:38:25:fd:f2:1f:
da:7a:53:d6:32:42:a6:75:e0:ce:f2:70:61:56:24:34:6d:74:
90:30:d7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:59 2025 by rpki-client