Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
File: hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft (raw, json)
Hash identifier: RISns3eVW7qvFx5/WQTz7HQ+VdR5v7rmgW8uxmhp7ks=
Subject key identifier: 88:94:E7:2C:9A:5C:16:1D:80:E3:45:2A:9E:8D:E3:6E:27:45:C4:F3
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 019A1F882A3196033FAB4E1540A95C8B6167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 08:00:08 +0000
Manifest this update: Sun 26 Oct 2025 08:00:08 +0000
Manifest next update: Mon 27 Oct 2025 08:00:08 +0000
Files and hashes: 1: 0mePZR1kaf-hX2Yp4hjxtaHCXOY.roa (hash: Iz51+DSbV7Tr3oZnznfPb0ztDkoHj3CGvdnh39JEVfU=)
2: Dh6Kyc_0YRpUkQaciLKNTFpj2yY.roa (hash: XwxfewChyQGnh/6DJxz8pIZg+xrexkVvjsVCqgpoH3U=)
3: ZovzMlbHa6h-Fl7gDQG_Zq7WfR4.roa (hash: H/iI+5AR6wdmCN1X+mmy0vutxGeF8cVAtih493U1ycg=)
4: hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl (hash: 1lYrOsConzhi/9ITOUImUI8S5wZz0dePspCxP9/IFIw=)
5: l73B-rq6PzNDiKoxaYkXjLCugtw.roa (hash: 3VSqbyAVKfkVsGJFnzfZhKO8PUH5YDBnP4CFYJUZ7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:2a:31:96:03:3f:ab:4e:15:40:a9:5c:8b:61:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Oct 26 08:00:08 2025 GMT
Not After : Oct 27 08:00:08 2025 GMT
Subject: CN=8894e72c9a5c161d80e3452a9e8de36e2745c4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:62:77:79:8f:96:9e:0f:5b:a8:19:4a:c4:56:
ec:c4:7c:5d:6d:80:cb:f4:03:e9:a3:07:2c:32:82:
45:d1:c1:de:05:52:5a:3d:aa:3c:ac:42:d4:06:0a:
d4:67:c6:31:43:4d:8c:38:db:24:f7:5b:b2:fd:84:
0e:b4:3a:99:86:14:42:4d:63:15:ba:4e:b5:6d:8e:
13:0a:c0:47:78:7b:3d:f7:a6:11:24:a1:c0:9b:f1:
b7:bd:e1:15:a1:57:3d:27:9b:9d:34:67:65:ed:75:
78:2a:01:97:34:45:77:b7:9c:08:97:42:54:94:63:
5d:ba:8e:38:9b:09:54:de:34:27:bf:65:06:68:37:
ba:e0:3b:02:ed:54:77:7a:42:e5:c9:3a:8e:a3:46:
c7:05:40:60:72:73:8e:8b:20:e2:6b:fc:f3:1c:fc:
0c:bb:74:fe:c3:8f:67:ff:e0:0e:29:5b:d8:27:c3:
66:35:02:0c:be:fa:c9:4f:4f:51:dc:2c:a4:7e:f4:
5f:d7:2e:4e:83:3e:d4:50:bd:5d:4b:cd:85:d7:5e:
91:5c:d8:0d:9d:11:3f:5a:14:77:6a:ca:41:b9:f1:
f2:dc:22:89:bd:fc:17:50:0b:df:20:a3:49:32:19:
93:72:d7:0f:ac:8f:22:09:10:eb:99:ea:cf:b1:73:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:E7:2C:9A:5C:16:1D:80:E3:45:2A:9E:8D:E3:6E:27:45:C4:F3
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c2:e8:e2:41:26:98:ee:95:65:75:bc:58:0a:b5:75:cd:c9:
58:12:37:66:5f:b7:c1:17:7d:a9:b5:32:4d:50:bb:5e:f1:01:
1b:b8:27:49:0c:ba:81:95:f3:69:5d:e4:54:d8:77:ee:4d:8a:
08:de:8b:30:46:3a:fd:20:60:30:49:36:18:84:ae:c9:4f:7d:
00:20:cd:eb:fd:23:d1:95:f2:c0:3c:01:68:76:f0:09:e1:4b:
6d:1a:f8:ae:2a:c8:cf:20:13:06:d2:5b:3b:a4:08:f1:11:25:
9b:78:da:5d:db:d1:d0:ad:13:f3:37:cc:a4:a4:dc:e0:02:6d:
2d:94:fa:03:96:33:6d:e3:68:03:7e:0b:85:05:27:2f:a1:fa:
dd:a8:d2:88:58:dc:4c:bc:96:71:7d:12:2d:f1:44:03:4d:b5:
c6:e0:99:9a:c8:01:4a:47:47:ec:92:3d:8b:48:37:18:a0:76:
f8:8d:85:82:27:d9:08:d2:77:12:74:e2:89:18:6d:d1:a9:26:
04:d2:2e:42:3e:55:bf:b8:b2:37:7f:4a:12:ea:52:ff:3c:85:
41:9d:95:b1:85:22:2c:7a:e8:70:3b:55:06:b3:b6:3e:50:b3:
a7:2c:69:f2:5b:e7:dc:8f:97:f3:5a:58:ee:09:c8:5d:d8:d3:
f3:8a:6c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 13:19:19 2025 by rpki-client