Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: e6ziUWBwHBAoEgpySmzj9VdSHZaeA3SBF+DSYsu2bqI=
Subject key identifier: D5:80:06:51:BE:83:9F:A0:68:A4:7A:F1:44:2C:18:5A:DE:69:53:B9
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 019A21E4C44FEC1817C8A28CE39E97F516D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 16F9
Signing time: Sun 26 Oct 2025 19:00:31 +0000
Manifest this update: Sun 26 Oct 2025 19:00:31 +0000
Manifest next update: Mon 27 Oct 2025 19:00:31 +0000
Files and hashes: 1: fY3YUzeQR4J5mSVlYztPydyoN5Q.roa (hash: mNZawaVbKUAZ9lV1chbhqIOQeYk5Gz7JPB6mT6lLW4o=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: fiY4ov9nJdLxf7W+FUzyQNWA8tBUjv9mRadpZV8RVbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:c4:4f:ec:18:17:c8:a2:8c:e3:9e:97:f5:16:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Oct 26 19:00:31 2025 GMT
Not After : Oct 27 19:00:31 2025 GMT
Subject: CN=d5800651be839fa068a47af1442c185ade6953b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:49:bb:56:0e:c3:3d:f1:f2:a0:d9:ee:a4:
8a:40:50:fa:b4:c3:ea:a2:1e:a6:1a:54:95:9f:e3:
8b:5e:01:f5:78:96:a2:13:12:7d:7d:56:d1:ff:b9:
ee:6f:64:28:74:b9:37:7d:63:97:e4:dd:15:85:72:
d4:a7:6f:ce:19:50:bf:ba:11:e2:36:82:35:46:ca:
87:43:d1:d6:17:a6:5d:83:f9:8f:e7:87:d6:d4:51:
81:4d:b5:23:2c:bd:b8:d8:3d:53:d5:38:74:34:5c:
c2:c4:a1:6d:73:f2:6a:45:41:13:dd:7a:aa:f9:bc:
21:48:d2:c9:ad:93:46:c5:60:d6:6f:e8:e6:1f:ac:
e2:66:cd:bf:7e:a6:a7:09:07:e3:4c:ef:65:21:f5:
8a:bd:10:fa:d4:6a:5c:7a:03:0d:b9:1c:f5:a7:73:
cc:94:8c:65:d6:4a:aa:94:02:d0:1c:73:39:b9:85:
4e:54:34:f4:04:6c:90:a4:7c:e4:7b:da:44:96:e9:
69:a3:de:13:a1:8b:3f:b9:e4:bd:60:da:a8:ce:80:
34:45:80:44:90:47:55:71:7c:3d:66:17:2a:e7:26:
0b:e6:d3:d3:f4:bf:9b:52:5c:ef:23:55:34:85:6d:
10:6a:5c:e2:0d:14:ce:4b:95:2a:4c:a6:97:cb:68:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:80:06:51:BE:83:9F:A0:68:A4:7A:F1:44:2C:18:5A:DE:69:53:B9
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c9:66:00:3c:94:a2:b5:16:46:31:cb:8a:60:39:89:e0:bd:
09:a6:84:b7:8e:22:e3:14:27:1a:35:e6:7c:fe:28:c3:a3:77:
b2:37:cd:1f:f0:1e:88:90:63:d2:e3:e6:8d:35:50:3a:bc:4b:
96:0d:5d:60:47:c4:2e:5d:d9:12:b3:96:38:b6:2b:b3:fd:41:
1d:3f:bd:b7:13:b2:1d:88:58:d8:9e:e8:f0:59:da:cd:9a:5d:
44:e3:1d:1b:27:1b:30:83:1b:90:23:35:fd:44:06:27:15:4d:
4c:d2:87:7a:da:a1:3e:2b:5e:be:79:e9:41:6c:5b:9d:c5:03:
e3:99:49:84:fa:0e:7a:ad:38:12:e1:25:51:15:ff:ae:47:0d:
c6:cc:59:e9:79:f3:7b:50:ff:72:4e:8b:07:fe:1f:d7:08:c9:
91:fa:10:dc:3a:70:c1:ce:8b:52:1b:8b:e8:3c:73:7e:38:10:
62:ed:75:32:98:9b:35:a5:f0:40:cd:bf:6f:8f:b9:a7:91:84:
8d:eb:13:e6:6e:3f:e2:b0:c3:cb:c9:81:dd:0d:ed:b0:98:42:
b3:9e:40:6e:56:36:f0:71:b6:12:5e:b7:a7:73:c3:25:87:eb:
48:a8:c7:08:dc:f0:7b:99:ad:55:f5:8c:60:f9:f7:92:38:c8:
3f:06:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 05:44:31 2025 by rpki-client