Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: gi0l/PkeT70eBmBNPEqY3eeLvEGpllZ3wpLpetMSDCs=
Subject key identifier: D5:C6:4C:B7:64:36:84:74:CB:07:70:91:FE:D0:D4:49:4E:33:B4:4A
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 019A22F7E852B484049766CE00B44CABFD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 00:01:03 +0000
Manifest this update: Mon 27 Oct 2025 00:01:03 +0000
Manifest next update: Tue 28 Oct 2025 00:01:03 +0000
Files and hashes: 1: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (hash: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=)
2: UNDXrDbQNDGfw9Atw8J1Rhg9324.roa (hash: wsuYDSHLl9ueT9Z/8hPQn0p6GzwP0XVwWj6eE/OeB10=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: UrV+eMt1oFpPakIGVTAIBgTJt3bLp4y7zcmTFWRATRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:e8:52:b4:84:04:97:66:ce:00:b4:4c:ab:fd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Oct 27 00:01:03 2025 GMT
Not After : Oct 28 00:01:03 2025 GMT
Subject: CN=d5c64cb764368474cb077091fed0d4494e33b44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:cf:11:fc:ed:bc:2a:af:71:1a:68:85:99:
7c:1c:7a:45:e9:38:5d:73:09:71:46:32:91:2c:b0:
99:f5:5e:ed:d9:1f:17:f4:9a:14:e0:25:69:2a:d6:
98:3b:d4:b3:a8:68:32:67:0e:9f:fa:36:a7:c9:71:
1a:84:cb:64:9d:18:3e:10:b1:62:16:8f:6e:3d:2a:
11:04:f5:22:ca:82:8c:be:a4:42:dd:27:cd:35:25:
97:15:e8:58:98:69:d5:2f:dd:9b:60:7e:fa:f3:60:
07:ba:0b:a1:0b:cc:99:ba:f7:cd:af:5e:a6:72:49:
32:b2:14:ec:ec:79:fb:98:89:a6:2f:bd:d2:30:ed:
db:91:e1:53:be:d4:f2:d4:27:c5:28:1c:c0:9d:44:
2c:75:e9:77:c4:a2:07:73:05:80:57:8b:e1:0a:b4:
95:6b:fa:87:f0:63:2c:32:2d:f1:a9:7b:30:6a:9a:
53:4c:ca:3b:51:74:4e:73:38:cf:a7:c7:1b:75:9d:
64:21:be:24:ef:a1:98:97:45:d1:5c:df:d6:82:fa:
63:85:c6:7d:32:b6:78:24:20:42:cc:aa:a2:fa:20:
84:f0:09:63:37:51:e6:90:5a:58:ee:42:71:30:3a:
c9:b0:61:ad:60:a7:fd:d3:d0:56:39:34:02:95:61:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C6:4C:B7:64:36:84:74:CB:07:70:91:FE:D0:D4:49:4E:33:B4:4A
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d3:a1:89:cc:54:98:33:fc:b7:21:4a:d5:4c:8f:0d:56:5c:
29:5c:50:3e:f5:f7:2b:fa:75:6b:e8:30:2e:8b:26:c8:30:5a:
23:c9:19:81:21:d2:af:5e:c8:2d:6e:fe:b8:10:7b:a9:23:64:
bc:a6:c3:c3:24:1b:97:08:75:aa:a5:30:02:1f:77:2c:c1:c1:
91:52:4e:2e:e2:5e:e4:7f:78:30:41:aa:06:95:ff:16:76:47:
d4:11:61:63:ea:70:2e:20:03:11:fa:e3:b4:d5:a1:4c:49:ae:
30:ec:24:08:95:0b:34:86:69:20:db:b4:33:54:10:fb:02:0d:
3a:38:b2:b2:44:6c:62:3b:51:76:0b:9b:63:a4:d1:a0:1f:2d:
81:c4:26:b2:4d:0a:0e:a4:c3:03:7b:1a:f0:6f:ef:a0:cf:55:
18:6b:67:01:ab:05:b0:2c:7f:d0:f3:bf:af:63:01:80:5c:67:
29:f3:2f:06:7e:7e:bd:38:75:40:43:24:f0:ac:97:a1:64:c1:
86:32:66:2f:48:97:56:24:0c:cc:c9:c2:bc:33:dd:40:7f:3f:
a7:74:41:92:e1:bf:4f:06:12:d4:f5:f5:7c:7b:fa:85:bb:96:
06:dc:76:26:6c:e2:56:11:1a:39:16:53:96:67:0b:00:5c:94:
34:3a:fb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:35 2025 by rpki-client