Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
File: hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft (raw, json)
Hash identifier: scHOk+NOQOMHtw95SrnsHPWHYZSViAYdLTw4bh/G5bQ=
Subject key identifier: 64:B6:96:09:BF:B7:A5:07:7C:C7:70:54:41:E5:0C:F9:E7:C4:81:DF
Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Certificate serial: 0199228CF54BB1561E50A0F02D225CE3EBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
Manifest number: 1254
Signing time: Sun 07 Sep 2025 05:01:27 +0000
Manifest this update: Sun 07 Sep 2025 05:01:27 +0000
Manifest next update: Mon 08 Sep 2025 05:01:27 +0000
Files and hashes: 1: F1oKspcJIA5CxkgGbXIBC4yC3wU.roa (hash: AKm+230ZJqvJyVXgtMkmTb/sN72RWRXH+8ONP+ImAwA=)
2: hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl (hash: 5yBaQddn7ZccPDNjSHuxlik2I/C/SnLXIbULS3R2PJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f5:4b:b1:56:1e:50:a0:f0:2d:22:5c:e3:eb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Validity
Not Before: Sep 7 05:01:27 2025 GMT
Not After : Sep 8 05:01:27 2025 GMT
Subject: CN=64b69609bfb7a5077cc7705441e50cf9e7c481df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:1a:7d:17:73:da:48:be:f1:1a:13:6f:f3:
4a:1a:75:06:54:3e:86:a0:9c:57:32:17:18:0d:be:
7a:30:19:05:42:fc:fa:d2:58:ee:70:d9:83:0b:fa:
d3:4a:09:0a:db:68:56:1f:c4:4b:d1:c0:6a:65:e2:
60:05:f1:49:e8:9a:f8:08:ef:46:48:fc:7a:1b:85:
98:58:0f:77:90:7c:e3:c5:4c:b1:66:65:73:a6:f0:
2e:de:f6:3c:c3:19:d8:be:1d:6c:d1:94:7a:8d:e1:
b2:8a:8e:41:d8:7f:5f:15:14:e1:e5:36:e7:43:47:
54:62:83:55:98:17:a4:34:1c:43:e0:e8:e1:11:1a:
ee:f2:d1:d9:8c:74:e3:f9:c2:fa:de:65:4d:b8:55:
34:01:7d:42:0d:4d:c2:29:c7:6c:80:3e:8f:da:a4:
a9:76:e3:05:32:6d:bd:76:10:19:04:0b:ec:d0:17:
c5:9d:f7:b2:a7:66:04:bd:49:52:08:e4:da:7c:94:
7f:f1:d4:61:f7:51:97:d3:9c:84:aa:2c:e2:fb:88:
24:36:04:0b:e5:a6:a7:c7:74:52:d9:6d:38:cd:25:
44:dd:ab:92:65:8e:87:7a:46:31:8c:5d:f6:4e:82:
89:3f:ac:b9:72:c6:8d:1d:33:9d:cc:09:4e:a2:5f:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B6:96:09:BF:B7:A5:07:7C:C7:70:54:41:E5:0C:F9:E7:C4:81:DF
X509v3 Authority Key Identifier:
keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c2:00:61:9c:01:9b:c8:c9:47:1d:43:f6:94:14:b0:f6:da:
60:b0:5a:ff:3b:52:5f:bf:ee:93:d8:46:2d:99:80:80:82:c1:
d8:d4:10:71:2a:a2:f1:fd:31:db:01:91:09:47:06:16:af:ac:
f2:4f:9d:3f:62:e9:3f:5d:e5:e1:35:32:38:24:2f:84:56:51:
f2:07:8a:22:11:db:be:15:ad:df:0f:b5:93:a9:b5:f4:39:30:
29:56:f2:8d:cf:03:2b:86:40:66:67:b7:71:f6:c5:da:8a:df:
5b:3a:9f:b1:df:84:be:37:9a:e1:71:60:55:2c:c4:41:3f:8f:
ae:0d:68:0d:71:66:47:24:7e:ff:81:51:62:35:83:53:07:47:
46:82:58:b1:0d:2e:ad:c6:d1:7b:c0:03:ca:04:98:e7:67:83:
c0:e4:29:bd:89:37:31:d3:b4:42:53:fe:6e:87:08:24:0a:8d:
78:bb:a2:67:ac:08:9c:16:01:11:bd:bb:8e:34:9c:05:e1:6d:
26:c6:92:9e:4b:76:11:a7:e8:e1:56:9f:ed:13:2c:d4:45:25:
ba:4f:71:23:c0:16:f2:30:c3:f8:57:64:9d:71:e8:ad:8c:11:
38:e0:10:8f:77:bb:32:f6:cd:a9:e3:47:0a:3b:5c:0a:b5:32:
15:6c:56:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:48 2025 by rpki-client