Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: 5Qp8uFwWbXcnxI/L+KTlK+TcQQIrGvst+YPofBd8/Xk=
Subject key identifier: 74:D5:77:B7:1B:11:A4:3F:1E:2D:14:81:34:E7:B2:03:2C:5D:0C:26
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 019A213F897B75C08D3626673C9815D27A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 057C
Signing time: Sun 26 Oct 2025 16:00:03 +0000
Manifest this update: Sun 26 Oct 2025 16:00:03 +0000
Manifest next update: Mon 27 Oct 2025 16:00:03 +0000
Files and hashes: 1: 0UKc3c6_AlpjqrUNJh3DwStXrec.roa (hash: OhWloYhHA/1vQyymMhBSWvWrUFfn2iV/XlUJ3vQrur4=)
2: 4gvK6UAte4i_DJjE1TPbFT1Ok98.roa (hash: GoLsyVhZqQfvGCGN6U4GMh9d59SyLh07nIkIOiePbx8=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: QJaSTD+QQEBlSUPyVMAy3v0mog4Z8urjzc3XMNME0B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:89:7b:75:c0:8d:36:26:67:3c:98:15:d2:7a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Oct 26 16:00:03 2025 GMT
Not After : Oct 27 16:00:03 2025 GMT
Subject: CN=74d577b71b11a43f1e2d148134e7b2032c5d0c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:e1:5f:dc:cc:de:4a:76:01:f4:d5:8a:c9:
49:59:2e:63:00:54:9f:ce:5f:2e:cd:09:d1:40:d5:
2c:02:d6:b2:a8:f0:9f:f9:20:34:ac:9f:fe:a8:0a:
df:31:57:27:8b:0b:a1:a3:cf:d3:10:25:96:44:b9:
bd:a2:af:31:f0:eb:6e:eb:e0:82:f8:6b:ff:ee:20:
0e:5e:91:c6:e2:b9:9e:b6:5b:2c:ac:c0:cc:a4:0d:
9b:c9:42:07:f1:b6:55:2d:1e:e5:09:05:c9:65:9c:
8c:4b:c9:e2:35:10:18:f0:ff:d2:4d:18:57:05:6a:
1d:65:33:62:9d:0e:51:6d:3c:b7:02:7a:02:af:82:
3d:e4:4d:df:6a:2d:35:a0:41:6d:5e:89:f8:a7:98:
18:97:b7:c6:e0:b8:fb:0a:d9:eb:9d:4c:29:05:f7:
45:bf:14:f5:62:96:bf:b3:86:9e:b6:4e:fa:ad:75:
60:7b:c2:0e:88:f2:34:4f:fb:75:43:82:b8:13:b2:
a2:1e:0a:54:42:74:60:aa:0d:22:3e:c2:71:14:23:
24:51:71:62:43:c8:a7:65:b8:e1:19:a6:71:14:e1:
57:46:34:36:d0:20:7f:49:91:c3:7f:b1:7c:99:64:
5e:a0:17:7d:bb:c2:8d:a8:6c:78:ce:96:cf:36:15:
ca:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D5:77:B7:1B:11:A4:3F:1E:2D:14:81:34:E7:B2:03:2C:5D:0C:26
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:97:83:40:25:0e:ee:09:96:16:b2:4f:3a:a4:77:51:01:46:
72:5b:6c:18:a6:c1:a3:2a:01:03:5d:4e:a1:0e:b1:99:f5:37:
f0:44:27:30:85:bb:30:f5:f0:3d:c2:e1:a8:f4:04:2f:c1:57:
0a:5a:e5:57:4b:fe:8d:66:43:9f:54:86:e0:62:63:6a:1a:58:
dd:71:60:7f:9c:65:5a:7e:6c:c0:74:2a:c4:d6:10:63:57:f3:
c7:54:a2:ad:ba:68:0f:bc:57:dc:74:2b:98:f7:ee:85:de:47:
2e:b4:63:14:6b:7b:3d:c3:36:f1:91:4a:20:d7:ba:c1:ab:84:
97:14:a8:12:fc:32:01:58:61:45:13:c6:c9:84:fc:af:05:31:
ba:47:24:1d:25:0b:eb:fd:ad:70:b4:c6:93:91:ff:73:7c:33:
33:e1:ad:78:73:46:7b:71:c7:9c:ee:90:eb:98:62:5e:58:3b:
c1:ba:bb:1d:29:b1:20:d0:98:82:23:9f:17:92:bc:ce:f8:34:
6d:20:ad:ef:12:bd:53:a6:9d:07:fe:e9:b7:60:0c:71:d0:f8:
0b:42:51:bd:f9:77:55:30:a6:82:ff:61:7b:33:3c:b1:56:5f:
d6:6a:d9:18:db:f0:be:ee:7c:6d:a2:fd:30:3a:47:cf:4c:e1:
19:6e:e0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:34 2025 by rpki-client