Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: 9N8LODmEcNDPqrJO6Qwe6MMuYwMx7HYofQLpIFvHUbs=
Subject key identifier: C1:31:D8:30:68:86:A9:4F:0B:9F:C8:B0:D3:4E:5A:A3:DD:0B:0B:94
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 019A533F5D18A9D8A78BE955E884CA18FF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: 02DC
Signing time: Wed 05 Nov 2025 09:00:52 +0000
Manifest this update: Wed 05 Nov 2025 09:00:52 +0000
Manifest next update: Thu 06 Nov 2025 09:00:52 +0000
Files and hashes: 1: E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (hash: TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=)
2: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: c/Yrqrwzq2zuvH1PlxBtrBwmrBzpSxyOo0MSdY4ThnI=)
3: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (hash: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:5d:18:a9:d8:a7:8b:e9:55:e8:84:ca:18:ff:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Nov 5 09:00:52 2025 GMT
Not After : Nov 6 09:00:52 2025 GMT
Subject: CN=c131d8306886a94f0b9fc8b0d34e5aa3dd0b0b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:39:4f:d4:10:64:d4:92:6d:30:26:f5:63:
d3:0e:91:ea:c6:05:f1:e7:df:eb:5d:2b:e6:42:4a:
6d:b6:61:25:38:b9:7c:5c:36:4a:0f:7c:98:11:f8:
55:6a:1c:af:ae:0f:34:b1:9c:5f:a8:56:a3:7d:fe:
bc:ec:84:e8:7a:ef:55:dc:28:53:a7:24:a0:e8:9c:
72:84:5f:55:c1:d2:a9:49:b8:e6:88:26:d5:3b:b8:
86:a6:0e:74:a3:08:db:0b:8d:a0:72:3f:e0:19:0d:
24:b6:d3:22:5a:d9:20:82:ad:40:f7:9f:c3:fa:58:
20:3d:56:6d:2f:61:a6:20:c8:1c:dc:90:63:ee:80:
0f:25:bf:a4:72:8a:fa:94:59:83:cd:ab:60:8c:f6:
e9:d7:47:b4:5c:b2:39:71:48:a6:2c:fd:73:69:cc:
98:b2:8a:70:62:4e:2f:f9:a5:8c:0d:01:3d:1f:09:
d4:65:61:64:db:5c:eb:ff:d2:f3:52:52:72:fc:94:
c9:55:4f:d0:13:e3:a9:6b:77:40:84:d7:5e:8b:a5:
06:69:d7:70:ba:3d:2c:df:2c:e8:b0:37:05:c8:fb:
cf:66:46:e1:32:48:9e:aa:cd:5c:eb:a5:e3:61:1e:
bf:66:48:1a:47:18:c4:97:10:33:9c:48:d7:24:17:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:31:D8:30:68:86:A9:4F:0B:9F:C8:B0:D3:4E:5A:A3:DD:0B:0B:94
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:59:c1:d0:d8:b6:77:67:9a:31:af:03:4e:1d:d4:c8:07:71:
63:26:1f:4d:84:98:33:c2:b2:80:7a:ba:8c:c8:8d:2f:47:ee:
44:b3:e0:98:36:c0:63:59:a9:b9:ad:5f:de:5c:08:18:48:4d:
27:fb:d0:04:61:93:2d:ce:dc:49:2a:82:86:fe:56:33:f0:04:
d6:06:4e:64:67:30:33:5b:c1:e0:b0:8e:9e:6d:9c:57:33:ee:
12:9f:74:e4:2c:84:38:6c:14:d1:4f:05:e7:63:4b:9c:7a:fc:
af:d8:68:6b:3f:ae:05:5e:4f:3e:3b:77:f4:09:f0:60:a6:70:
8c:3f:ef:c4:e9:a4:e2:7d:e9:a8:7d:69:31:a4:9e:7a:d6:81:
0d:96:03:a0:50:38:eb:e6:8b:25:a3:37:d7:90:2a:93:b8:63:
f0:18:99:2b:4f:7c:a3:1a:d9:be:8c:69:e9:a5:84:9b:6f:6e:
68:55:7d:ca:45:04:0b:28:0b:f6:d3:90:19:72:6e:9d:7f:53:
ff:19:6a:db:a9:ee:3e:b8:60:e5:fb:07:ec:15:23:3b:d5:90:
60:cf:43:d3:66:a9:d2:38:f9:df:b2:e3:ab:0d:52:41:e4:08:
cc:37:fc:ec:3d:1a:ab:c0:91:ef:a2:14:e4:f5:d5:f9:6d:51:
8a:37:6c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:06:08 2025 by rpki-client