Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File: hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier: 6Z8LwF2Wdd9a9aGj81pEGHbrUV8la597PvPsFMwgAAY=
Subject key identifier: 2E:59:FA:94:9A:5E:2C:48:FE:7F:22:6F:03:23:C7:FC:96:CD:0F:E1
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial: 019A288B754ACEBE7911886B9411FAA66BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number: 0A3D
Signing time: Tue 28 Oct 2025 02:00:19 +0000
Manifest this update: Tue 28 Oct 2025 02:00:19 +0000
Manifest next update: Wed 29 Oct 2025 02:00:19 +0000
Files and hashes: 1: 5t_mW-9iAJF947yBRX7z3c1fKCA.roa (hash: j0+9GFhRaH2kiOAKMhZj5W1LMt1cB4nhSOqQQ9Re6jI=)
2: CWu5dKrEuf-0nBCltKLJ6Qa-UyY.roa (hash: ykK1nj6nlxboFcnLj7DFZHuLWYTPt9DhUF2Ryrd0hQo=)
3: Yhx7BXYzTzzS5t_9FaN3gvqDvvU.roa (hash: 6o6oe2/9E1nYEVGVicr/zo6Y4uqUD4D2A8TAd6evSwY=)
4: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: ojvv67kvJ5x3qpBqd96KQ1IrMk8ygbvPJX60lbFwG4Q=)
5: ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa (hash: BS+LVNZet6aS5JWtp0wpo0XqwvlqhVLSQja2K9qhIAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:75:4a:ce:be:79:11:88:6b:94:11:fa:a6:6b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Validity
Not Before: Oct 28 02:00:19 2025 GMT
Not After : Oct 29 02:00:19 2025 GMT
Subject: CN=2e59fa949a5e2c48fe7f226f0323c7fc96cd0fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:43:88:6a:39:32:49:b5:7d:f1:77:64:b0:8c:
2b:44:3f:17:dc:eb:d6:66:9d:f1:5d:c4:49:23:b2:
43:85:de:d2:9c:67:1d:c3:36:83:16:92:79:26:3f:
fd:7c:04:e2:df:dc:b5:ed:c1:e0:fa:a1:66:db:46:
a3:cf:fd:66:ff:f7:0d:65:b7:db:51:f0:5f:a7:62:
78:f9:a1:c0:89:c7:4c:54:5e:4c:d1:f8:fd:77:0b:
39:e7:22:9a:8c:8a:03:f5:2d:91:21:8d:85:c3:15:
02:f2:d5:5a:5d:1e:f5:71:70:80:3b:4c:0b:8b:60:
4b:56:d7:2f:ff:2d:db:a8:e6:20:52:26:09:48:59:
15:5a:6a:e5:d3:69:85:b3:8d:da:79:57:5c:46:83:
70:8e:80:5b:c6:40:39:a2:91:c2:95:e7:bf:a1:cc:
2d:ee:4d:1c:70:a8:9d:3d:e1:65:77:5c:17:9d:1c:
2c:60:97:e7:d6:b7:a7:d9:8e:c6:ee:d8:f6:54:42:
53:1a:cc:28:46:74:e8:e0:3c:3c:70:2f:e5:e0:ce:
3e:22:aa:7d:98:1e:3c:92:d9:2e:b3:19:1c:00:33:
bd:38:15:c6:41:09:f8:be:fd:65:71:08:78:2b:bc:
12:8e:49:4e:88:0c:63:ab:e3:81:96:a3:b2:cb:1c:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:59:FA:94:9A:5E:2C:48:FE:7F:22:6F:03:23:C7:FC:96:CD:0F:E1
X509v3 Authority Key Identifier:
keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f1:d2:ea:da:cf:bb:83:a3:8a:fa:dc:89:43:1a:08:a3:d1:
98:13:da:50:5d:c9:91:22:bd:f3:73:d8:b2:15:7e:7f:c6:3e:
f9:db:24:76:08:2f:86:dc:c6:8d:a7:83:67:70:6e:6b:27:02:
e0:f5:1b:c5:57:69:a1:e9:f5:d0:81:ae:be:3f:ce:d6:11:8e:
93:f2:02:62:8a:e6:7a:86:fe:c7:95:c4:bd:9c:86:0e:4f:36:
16:e6:af:70:d5:de:7e:86:66:4f:e1:f9:d9:4c:ac:90:8c:7f:
bb:c4:a4:e4:82:eb:92:8d:12:56:ba:c8:df:be:22:29:9c:dd:
53:af:6e:08:a8:34:b5:99:d4:b5:fe:30:3e:2c:cb:01:51:8a:
f5:ca:a9:85:41:b4:1a:dd:b2:8d:ce:57:f4:61:08:7d:9e:a1:
51:74:a1:3e:9b:87:7b:ec:6b:93:4b:0f:cc:66:f1:5f:cd:71:
c9:04:9d:c2:48:00:97:ba:a0:8d:bb:a1:b9:84:f8:74:fe:a6:
05:11:0d:38:c0:1e:ae:9a:e2:4b:46:21:97:37:18:65:1f:a8:
cf:16:7c:d1:f8:41:3d:87:9f:7c:1f:a8:43:e8:b6:51:fb:dc:
35:cf:94:a7:1c:10:36:cf:ec:90:8a:ed:11:7d:5a:6b:17:f9:
ab:b1:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:32:41 2025 by rpki-client