Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File: hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier: 2SxrYuh+6Jbuttv/lHppWpBkXymP2i69tame+xkFbA4=
Subject key identifier: 12:20:07:9B:39:ED:AF:8C:88:98:45:9B:64:E6:62:B7:6A:47:B2:F1
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer: /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial: 019A714A1698A0690CBE61B9C6A0AFFCFA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number: 08CC
Signing time: Tue 11 Nov 2025 05:01:12 +0000
Manifest this update: Tue 11 Nov 2025 05:01:12 +0000
Manifest next update: Wed 12 Nov 2025 05:01:12 +0000
Files and hashes: 1: Wz8gpxFEqCzA2qAsOF9aMTaoyYY.roa (hash: 8Yp0I8zuDn5gEhy8EguTTzeHbg2UtzMf6sSJEuTPZH4=)
2: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: E7suXK8GDjqhKrgzUflVu180pNK7A38v3Zpq4D1ilAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:16:98:a0:69:0c:be:61:b9:c6:a0:af:fc:fa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
Validity
Not Before: Nov 11 05:01:12 2025 GMT
Not After : Nov 12 05:01:12 2025 GMT
Subject: CN=1220079b39edaf8c8898459b64e662b76a47b2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:d5:4b:b2:12:ea:76:9c:83:21:be:95:ca:
fe:91:e7:53:d1:92:d5:14:fb:16:4e:3c:2f:a9:ea:
2c:7c:fc:c5:e1:3c:98:61:e4:20:5f:a5:20:48:95:
c5:21:60:7f:f8:0a:e5:ec:c2:50:cb:8d:f2:45:9a:
10:f9:c0:6a:5a:11:fd:a7:5c:69:6c:43:f5:90:8e:
72:92:be:ab:30:89:bf:44:bd:b5:ad:47:84:39:41:
e2:6c:1d:47:60:e2:c3:6b:38:9c:0b:0d:be:83:84:
97:0d:21:d5:cf:88:e8:45:5d:69:aa:20:f7:bd:6d:
bd:ed:03:f9:39:a8:6e:2f:32:cb:51:95:2c:48:d6:
bf:c9:78:32:1f:1d:b4:1c:eb:ce:c0:12:1b:c6:b6:
6c:51:ad:4b:db:08:4c:ac:94:24:d0:2d:2c:b2:56:
cc:7d:1b:dd:c6:a2:05:02:77:fb:85:f6:91:33:23:
a2:e2:d5:26:30:99:9f:c4:d5:6b:69:b7:b3:da:07:
fa:c1:07:c1:ed:bf:f2:df:2c:b6:7e:6b:63:29:5f:
9d:8a:11:1a:aa:4e:0b:cf:ea:09:79:f7:6d:40:53:
95:b6:4b:72:9e:bc:80:e8:d3:2c:34:98:fd:24:fa:
4a:30:f4:75:46:14:1f:4f:c1:03:71:7d:5b:64:6e:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:20:07:9B:39:ED:AF:8C:88:98:45:9B:64:E6:62:B7:6A:47:B2:F1
X509v3 Authority Key Identifier:
keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d2:11:80:08:f0:07:3b:8b:73:a5:ff:f4:2b:c8:48:a7:1c:
5d:50:01:7f:34:87:ed:e7:70:69:bf:07:07:23:98:54:af:2a:
78:e0:5c:a2:c6:61:5e:21:aa:c4:f6:7e:03:69:41:14:8e:cf:
f0:90:63:2e:58:a9:14:fe:0f:30:9f:e0:3f:7a:e7:1f:49:ad:
44:ec:28:41:78:78:a9:77:6b:4d:4b:5d:44:4b:c7:87:5f:ac:
f2:77:c4:37:b3:d3:a3:a4:e5:70:b8:6a:e0:0f:63:7e:0d:3f:
fb:6f:3e:e4:ed:42:31:e1:e5:da:c4:28:b5:74:cb:de:a8:24:
2a:61:c2:dd:42:a7:e7:88:0b:a2:cd:89:2c:64:5a:ff:38:98:
90:7d:85:51:97:45:34:9b:55:2d:be:ad:ea:f1:c0:d6:6a:03:
e3:3e:87:9d:23:67:57:9e:fe:81:ad:6e:26:98:35:2b:a2:d6:
4b:04:37:47:6a:83:09:2b:10:1e:c6:64:2c:fa:1e:93:9a:0a:
2b:23:b8:88:e6:c7:7b:9a:00:5e:6c:f3:4c:7c:66:f0:15:a8:
6d:7b:c2:1a:91:c1:ce:af:a0:48:79:9f:98:f0:70:34:bf:2f:
2b:63:bf:52:bd:43:e3:bc:a7:92:22:df:1e:3e:59:b9:c6:c1:
b7:77:0a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:57:58 2025 by rpki-client