Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: R04FRr1zt9E8JPQP5tT48cjNHl2VuR/Ahh0OAkkN19s=
Subject key identifier: 39:E9:D4:B7:F4:E3:AA:5B:34:D8:AF:DD:FF:98:72:66:61:7D:95:75
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 019A0AEF64A4DFE64E2B22C53995DB814D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 13B3
Signing time: Wed 22 Oct 2025 08:00:52 +0000
Manifest this update: Wed 22 Oct 2025 08:00:52 +0000
Manifest next update: Thu 23 Oct 2025 08:00:52 +0000
Files and hashes: 1: gTuMJj4zNk4inmWeuwHt2oopg5M.roa (hash: zopPOsMBU8dt9Dr0i+LUD1TPbnQUzJ4uDKxUzfrnRiY=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: 8Pv6XbIKDN3oyte3ocQ83/CjaRuFkiDtEt6LDQ1G7p4=)
3: rnwY-7oYw6V-trqxlfGxfeIKZIY.roa (hash: Yep0/R2aV0HSvC5J3JSqbOslIcQ/KKdPdI5bChqi8Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ef:64:a4:df:e6:4e:2b:22:c5:39:95:db:81:4d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Oct 22 08:00:52 2025 GMT
Not After : Oct 23 08:00:52 2025 GMT
Subject: CN=39e9d4b7f4e3aa5b34d8afddff987266617d9575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:8b:a7:e3:e1:a6:4c:44:d4:74:32:8d:fd:
28:e5:c1:cb:0b:78:df:c3:d6:4e:79:f4:af:22:a4:
8c:c9:b2:ec:0a:e8:ee:cd:37:0f:06:7e:78:31:ec:
7c:60:4c:e2:50:7f:8e:12:e1:0f:39:72:cf:3a:5e:
99:60:fa:0d:34:ec:b9:c2:cb:fd:99:c4:f9:4f:2b:
01:d5:48:24:d1:1f:ea:2f:98:a8:06:2e:5a:d4:46:
3b:44:2b:85:1d:75:97:a3:ca:79:c5:76:45:e9:49:
90:49:48:d9:ae:14:4c:01:a5:51:b1:20:76:1b:67:
6b:d7:5d:8b:ae:19:fc:ac:c9:fd:0d:79:6c:96:31:
46:93:70:80:e7:2e:8d:82:4c:8c:bb:24:d2:31:16:
ab:af:65:6a:f0:3d:8a:8e:e7:0f:ba:0d:94:8a:00:
d6:4b:5f:19:2e:95:36:15:d4:72:99:20:d5:6e:71:
c5:3a:de:83:29:63:75:13:a1:14:71:f7:bf:c4:f2:
45:b8:3d:46:9e:03:c6:f1:18:f6:3b:db:8d:4f:f5:
f7:5e:9a:dc:5e:12:1e:5e:a8:73:a7:78:7c:ae:f1:
05:84:9a:b5:ae:30:84:3d:34:4c:c5:42:4e:d3:e9:
e0:65:8a:39:18:70:d0:98:07:68:6a:2b:d5:cd:f8:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E9:D4:B7:F4:E3:AA:5B:34:D8:AF:DD:FF:98:72:66:61:7D:95:75
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:65:64:88:f1:44:e2:17:e3:1b:79:58:5c:f0:ac:f2:21:60:
ae:d0:0e:3a:e7:d8:63:bf:51:3b:df:e6:36:af:5a:9b:70:ed:
53:51:3a:42:b8:89:af:36:7a:d2:94:57:85:03:4e:da:a4:bb:
27:2e:27:27:e5:dd:cd:53:5c:1c:c4:cc:b5:c4:c4:c2:cf:bd:
fa:e6:58:6c:06:4b:87:54:ae:c6:f0:26:e7:3c:77:b1:24:3d:
fe:e8:51:b8:79:fe:91:1c:fa:3f:1f:a1:9d:c6:08:12:22:94:
54:a8:0f:7b:df:a6:b7:a9:49:04:01:b3:23:4f:bc:43:4c:88:
e9:cf:c1:c2:b2:2c:8d:43:56:a8:35:ea:4f:c8:a4:11:bf:57:
92:a5:f7:48:d3:df:47:f0:56:0b:09:b6:0b:ff:47:6e:f2:91:
0f:51:af:22:01:29:32:88:e1:8f:bc:62:ce:21:b4:1d:6a:30:
a2:89:6d:42:58:2a:7d:85:20:f9:90:ff:67:e7:6b:9b:42:15:
85:b2:6f:1b:f0:00:a2:e4:54:9d:be:2a:9e:09:e5:8e:97:60:
4d:3d:6e:3b:d7:27:f8:5a:41:b7:aa:f6:98:e0:4f:74:89:b8:
54:a9:44:df:fe:9d:1d:e4:f4:94:ac:01:a7:30:5a:5d:7d:3b:
37:e9:7d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:39:36 2025 by rpki-client