Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json)
Hash identifier: WMuwVbW69XpPFggZuPnvHaUWfo6Cszv10ronSb4Cg8U=
Subject key identifier: 0D:C7:09:21:2F:4F:F1:E6:0E:AE:7E:B6:51:D9:E4:54:F7:E6:5A:4C
Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Certificate serial: 019A22C082D5838FBA6BF841CF57CF203E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
Manifest number: 0159
Signing time: Sun 26 Oct 2025 23:00:33 +0000
Manifest this update: Sun 26 Oct 2025 23:00:33 +0000
Manifest next update: Mon 27 Oct 2025 23:00:33 +0000
Files and hashes: 1: f9MGnlddFQ2IMf-Uoo2fTYxJ_co.roa (hash: kPIpbLqEj4dHSmVPx7WOIcV4CWQtCce8UvwQXn1AUT0=)
2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: WUJLSMDq/T9/Z2S5pZHXO68wg3YHn99hYmqeBxG4fCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:82:d5:83:8f:ba:6b:f8:41:cf:57:cf:20:3e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Validity
Not Before: Oct 26 23:00:33 2025 GMT
Not After : Oct 27 23:00:33 2025 GMT
Subject: CN=0dc709212f4ff1e60eae7eb651d9e454f7e65a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7c:bd:ec:84:fc:eb:af:71:3d:aa:a4:d4:cb:
ef:b4:3b:80:45:d0:a5:b4:c8:c3:a6:2f:f5:89:a3:
b0:1d:8b:6e:b1:81:5e:c7:77:22:da:4a:4f:57:53:
70:b2:74:64:c5:cc:32:85:17:89:93:a9:75:c4:c3:
8f:8f:b2:6c:42:11:9a:00:b2:d8:0e:01:e2:c0:dd:
e3:0a:05:c8:5b:0f:6d:cc:12:b0:6f:3d:8d:fc:77:
1d:1e:35:78:37:8b:e0:ee:5e:40:34:3a:4e:35:1e:
09:dc:8a:b9:f1:fe:ed:bf:fc:b7:f5:02:ce:c9:cc:
c5:00:07:c9:cf:75:d9:21:a5:ce:1a:0f:4d:7f:42:
15:b9:6e:f5:d9:62:f2:03:8a:5c:a5:c0:70:9d:8a:
be:50:cd:db:bc:f8:e3:9f:0a:6b:ce:e8:e8:ba:bc:
b2:be:19:17:88:db:22:49:ee:ba:35:96:15:7e:21:
f7:a9:50:94:e4:64:0e:e1:bf:fc:da:cd:af:11:37:
9f:27:30:96:5a:ee:cb:38:46:cb:f4:ce:91:4e:f0:
d9:36:67:96:a7:2c:7d:18:1d:6f:25:26:32:f2:cf:
b9:55:20:43:98:e5:38:40:9e:7f:73:64:37:d4:1c:
89:94:83:4f:d4:5b:2d:d4:f0:14:d4:9a:64:eb:ac:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C7:09:21:2F:4F:F1:E6:0E:AE:7E:B6:51:D9:E4:54:F7:E6:5A:4C
X509v3 Authority Key Identifier:
keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:93:b5:11:f0:31:f2:4d:24:5e:84:f8:4e:7f:49:b2:db:18:
e0:fa:90:03:27:1c:a3:3f:fe:55:c2:ed:7c:e6:de:a0:c6:d1:
f2:91:46:38:76:a7:cd:35:c2:78:75:73:e2:c5:8a:f6:ba:7b:
26:79:ff:5f:19:58:1b:74:93:5b:11:4e:0e:83:ac:86:5f:bb:
bb:7f:7c:fd:46:c5:84:d4:e1:31:41:df:b0:ee:88:87:d5:a4:
2b:d9:fe:1f:a4:ac:c0:2d:a7:0e:47:3f:84:30:e8:ad:45:93:
d1:8f:e4:16:e4:80:3d:ca:26:96:bd:62:6b:86:c2:5f:7d:d5:
96:3c:d5:60:d2:36:5f:e2:1e:42:c2:d1:3d:35:69:47:ac:a1:
18:66:6d:96:27:4a:66:ae:39:7f:14:64:40:76:fc:53:31:f0:
69:c2:50:23:8d:ee:51:d5:24:9f:8a:60:e4:bc:e9:63:8b:c4:
64:92:5e:a2:90:13:9d:81:dc:31:ce:b3:04:ea:74:e3:be:c1:
e5:92:a6:ad:da:07:c2:3a:ec:1c:73:9b:ba:f7:27:ab:e7:94:
cc:ad:4c:cb:a1:57:5d:89:55:42:ee:8e:60:5d:e4:79:19:08:
b3:35:25:d7:8f:9a:15:62:42:f9:c2:11:6d:fa:e3:ec:39:49:
2f:d5:63:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:37 2025 by rpki-client