Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: AuOEoYjMh7k9wu2Tf6fVgIIhrEpaczlbv0omCVUUXLc=
Subject key identifier: 9D:60:AC:08:85:FD:09:5B:DC:C9:BD:5F:E6:49:B8:89:74:36:7B:B1
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 019A4F9970EF3DE65F609E01813BB6AD09DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 16:00:47 +0000
Manifest this update: Tue 04 Nov 2025 16:00:47 +0000
Manifest next update: Wed 05 Nov 2025 16:00:47 +0000
Files and hashes: 1: O8vYugo1IMFhRrolkiJ5A2F_9k4.roa (hash: vT082QVsehcKVaVyOGMEheCQhaYoT8jhfxj4aHEzNiI=)
2: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: H4aeBjiupMfUjlt5Saqvl0liu0P+JTO2pctGsJb2MhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:70:ef:3d:e6:5f:60:9e:01:81:3b:b6:ad:09:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Nov 4 16:00:47 2025 GMT
Not After : Nov 5 16:00:47 2025 GMT
Subject: CN=9d60ac0885fd095bdcc9bd5fe649b88974367bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:9f:0e:e4:67:aa:97:eb:45:77:94:26:ef:
1a:95:a4:a9:32:09:cc:90:03:ca:70:3f:2d:93:24:
93:19:49:e8:ea:a9:5a:3c:99:06:ca:c6:89:34:3c:
11:e9:b8:6f:95:f4:b6:70:ec:0f:a7:2b:4e:b2:a7:
16:b7:5e:90:14:41:3e:b9:cc:cf:af:8a:7b:c0:92:
9f:46:e0:31:d4:84:68:9c:39:c5:75:75:d4:a1:ec:
f6:2c:a5:7a:e4:e9:22:99:8b:45:ef:ed:0d:95:b2:
f1:26:fc:28:b1:a0:88:bb:4f:50:eb:9f:7a:3f:52:
80:ff:c6:fd:f6:f1:45:d2:b5:f5:71:74:0f:e1:ab:
ab:7d:a2:f8:e6:38:45:9f:b7:c4:33:65:67:a1:b8:
67:ed:be:70:20:83:eb:18:20:80:3c:dd:a3:7a:d8:
60:fa:c9:8a:b9:92:5e:f0:f7:c6:57:27:c0:59:79:
6f:d6:de:51:f5:05:a9:80:85:dc:ad:e7:10:00:a1:
8a:d8:22:ae:61:42:a0:36:1d:f1:e6:9f:31:e7:bc:
23:b7:58:04:8b:16:e4:03:7d:49:19:8c:b6:a3:95:
e2:77:16:ed:b8:61:68:d0:16:9c:7f:a5:fc:df:9c:
0d:70:97:6c:36:e1:ff:8f:24:92:2c:1f:71:e6:17:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:60:AC:08:85:FD:09:5B:DC:C9:BD:5F:E6:49:B8:89:74:36:7B:B1
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2b:1a:10:38:47:3c:75:a4:a1:c1:3d:65:39:07:d4:31:e3:
0f:5a:16:ec:12:69:f0:ba:b5:c4:90:4e:1d:15:3f:0c:1f:30:
05:49:44:26:95:4c:72:c5:97:9d:c0:d5:96:8f:fe:70:59:94:
5f:a4:7d:74:94:df:3f:4f:75:00:c2:75:7c:7b:e7:7c:73:98:
7c:14:e6:7f:ba:5e:c3:ef:0c:68:e4:36:ce:bd:74:a7:fb:c2:
df:a0:81:d5:90:11:46:06:79:b2:fa:ac:e8:9a:df:ba:ec:8f:
2f:3b:3b:44:75:63:45:e4:39:1b:26:51:53:5f:80:d6:0d:57:
66:f8:86:5b:b3:51:da:e3:1b:23:26:0b:48:24:48:7e:2c:1f:
ff:d5:f2:79:4a:ca:0d:1b:59:05:d6:e6:b6:bd:91:62:82:ef:
68:df:c9:3d:d3:c9:5b:d9:8c:e0:1f:a4:95:48:94:6f:a9:90:
1d:47:84:b7:e7:b8:0e:d9:6b:de:32:b8:6c:29:4d:b9:09:a9:
87:72:e5:46:90:f3:99:10:52:f9:e6:25:71:bf:2b:1e:8d:12:
05:9c:e7:e7:99:72:df:02:fe:01:b9:24:e2:91:ec:aa:3a:b6:
49:8d:7d:21:df:db:89:85:61:48:03:2e:98:fc:3b:11:a6:05:
c7:f4:9a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:27 2025 by rpki-client