Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json)
Hash identifier: oUfk4vtZbLMAX/1Djv3+0KMQSi66a34Em/cijYFqhYs=
Subject key identifier: BE:C4:2B:51:96:13:C3:C9:41:D0:DE:E5:05:C0:B0:E3:0A:EB:33:0B
Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225
Certificate serial: 019A503D9064C81F3E57BCF23198B4AC7291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
Manifest number: 16A6
Signing time: Tue 04 Nov 2025 19:00:03 +0000
Manifest this update: Tue 04 Nov 2025 19:00:03 +0000
Manifest next update: Wed 05 Nov 2025 19:00:03 +0000
Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: DHzA9nNk1jMg17fvJ7pZQssWgO7aX9mqoxvr4R8NhRM=)
2: kclE4AGa3IQ3ANoqx8hNmFyyOPc.roa (hash: era/rLdikRzOubIlTwlZQUllh2OgF4bxbh9GfJNQo5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:90:64:c8:1f:3e:57:bc:f2:31:98:b4:ac:72:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225
Validity
Not Before: Nov 4 19:00:03 2025 GMT
Not After : Nov 5 19:00:03 2025 GMT
Subject: CN=bec42b519613c3c941d0dee505c0b0e30aeb330b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:69:f3:68:aa:73:bf:a7:61:a7:06:98:d2:
d2:db:ba:93:8e:37:c1:ca:ab:f9:03:ac:dc:7a:42:
47:29:a7:8e:9f:15:7d:eb:13:bd:ba:19:a3:cc:2c:
0e:a8:9a:76:25:5b:cf:06:de:68:20:b9:01:e8:bf:
cb:f7:a3:61:07:88:a7:78:b4:d1:6e:2c:6e:89:b8:
25:af:fd:d8:33:6b:a8:ac:51:f4:8f:24:fb:6b:73:
62:9c:e1:0b:b7:65:9d:38:3f:47:4c:1c:60:d5:ef:
e8:fa:d4:bd:79:d1:d3:ef:8a:d8:83:d7:96:40:8f:
b4:89:ea:c2:e0:4c:84:28:a2:cb:d2:38:fe:1b:72:
e6:5c:7c:32:a1:6b:6f:35:7a:52:c9:d5:2e:97:32:
68:05:a9:d0:50:b8:d2:74:92:7f:58:ff:74:2f:2c:
63:70:b6:fb:72:94:aa:ae:d7:8c:69:2b:30:35:9d:
41:ad:95:59:93:80:b6:92:d5:5c:df:57:87:20:49:
ec:c7:ae:75:3f:af:71:91:43:2f:59:b3:8f:e8:9d:
8a:21:bc:54:a3:4d:5c:1b:e8:1f:3e:3d:96:92:88:
b3:24:3a:2f:dc:ac:31:15:60:3d:60:e2:56:46:70:
d9:a5:90:e8:42:b3:03:c0:50:da:7e:03:12:35:e3:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C4:2B:51:96:13:C3:C9:41:D0:DE:E5:05:C0:B0:E3:0A:EB:33:0B
X509v3 Authority Key Identifier:
keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:62:52:8e:8d:bf:f3:de:92:42:d3:d3:13:55:e5:ef:5c:93:
61:8b:63:a6:e6:1a:8e:5d:67:91:33:b4:f4:84:43:f5:17:bd:
78:73:83:3f:3f:92:17:48:4a:ab:70:70:31:a6:3d:02:67:05:
0f:29:0d:dd:ce:e5:f0:4d:3c:fe:88:6c:76:5c:42:c0:59:c8:
bf:d7:c0:bf:19:0c:6b:d9:58:bd:63:b7:e4:e6:6e:1c:e6:19:
8a:c4:72:5f:43:d0:c4:56:9f:fc:38:3c:9e:09:a2:df:65:2c:
4d:25:cf:bf:18:a3:fd:ed:c5:8f:94:07:b7:79:64:08:c0:de:
d4:fc:5d:85:f2:fa:3a:20:cf:6d:a4:5a:27:23:fe:c4:c3:30:
32:20:b2:2a:b2:c4:d6:eb:bd:2c:85:78:44:b6:2e:15:56:37:
30:cf:26:64:4c:f2:28:c1:db:a5:6b:3d:1b:75:4e:97:e3:40:
11:91:0b:69:ab:2a:10:82:18:57:44:8e:a9:66:ca:b6:55:c8:
b8:70:52:ef:87:81:74:04:4a:31:2d:e2:78:69:e2:71:e7:73:
aa:49:a1:a8:fe:8a:c3:aa:cb:d2:9a:bf:8a:87:5f:40:78:bd:
7a:b7:a3:df:51:6c:4a:b3:28:e9:a4:70:9e:77:5d:14:40:5d:
76:44:39:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:30:34 2025 by rpki-client