Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
File: hAKSSGHLwIjGVahyU1qQMQige_E.mft (raw, json)
Hash identifier: NHs8/w9161c4hVDl6S2JQU7mO3mebLLuzyWdUcMs89Q=
Subject key identifier: 27:05:50:F6:16:33:AF:C6:0F:C9:78:C9:63:3F:F7:0F:B8:F8:1D:60
Authority key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
Certificate issuer: /CN=8402924861cbc088c655a872535a903108a07bf1
Certificate serial: 019A72257D1AF53E467D8A87D6B23229680B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
Manifest number: 1358
Signing time: Tue 11 Nov 2025 09:00:50 +0000
Manifest this update: Tue 11 Nov 2025 09:00:50 +0000
Manifest next update: Wed 12 Nov 2025 09:00:50 +0000
Files and hashes: 1: V4HzyqT3UdFuM-GyIseILy4xTfQ.roa (hash: 1TwXBA5f5XgP5uZG5yeFX6kZqTX4W9t72jbcfsBpAgw=)
2: hAKSSGHLwIjGVahyU1qQMQige_E.crl (hash: sM7X2A1gOdZWrc2V1+vsWRUKPIS9APJb8mkRQDyYL9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:7d:1a:f5:3e:46:7d:8a:87:d6:b2:32:29:68:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8402924861cbc088c655a872535a903108a07bf1
Validity
Not Before: Nov 11 09:00:50 2025 GMT
Not After : Nov 12 09:00:50 2025 GMT
Subject: CN=270550f61633afc60fc978c9633ff70fb8f81d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:e3:76:1a:23:81:63:6e:ab:59:1a:20:07:
df:6b:f7:c2:65:e9:8a:3a:a6:87:69:b0:a9:67:89:
f9:0b:52:0c:32:de:35:e0:db:d5:c8:ad:4b:5e:47:
97:ff:7b:f3:e2:a3:4a:49:49:96:5c:0f:cf:00:fd:
00:7c:7e:05:71:1b:db:04:2c:31:46:ed:6e:cc:b1:
4e:91:96:12:fb:4e:0f:2e:80:13:e8:48:88:e7:00:
6b:f5:df:7e:b8:17:cd:30:93:3c:55:a9:af:63:19:
61:49:3d:10:8c:dc:e9:19:c2:d7:39:f1:03:75:d3:
b3:05:54:4b:43:66:67:6a:12:ad:ae:d6:5c:a1:1a:
7e:80:f8:31:c1:b9:9e:96:bb:92:77:18:91:0b:76:
e9:90:2a:16:c8:b0:8c:4d:a2:6f:e2:8e:73:e6:25:
1a:cf:f7:68:e9:e5:c4:58:68:72:82:65:51:f0:3b:
a9:15:f3:69:ab:a5:82:c7:58:8d:2c:5e:93:c5:0f:
4e:a8:c0:fe:cd:05:34:04:c1:d2:db:97:d3:0b:7b:
18:65:46:2e:9f:f5:44:38:e3:f4:b8:41:a8:5a:fd:
95:d8:9d:d4:60:d5:3d:48:34:a7:fb:07:a9:71:12:
ca:c3:9d:58:5b:61:f1:49:71:d8:aa:bd:6d:ee:74:
7d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:50:F6:16:33:AF:C6:0F:C9:78:C9:63:3F:F7:0F:B8:F8:1D:60
X509v3 Authority Key Identifier:
keyid:84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5f:a8:fd:b2:ef:e9:81:40:19:0b:24:ed:07:47:85:45:10:
79:88:56:2b:93:75:d5:6d:bd:90:f8:1b:68:76:48:5e:b4:bb:
45:5c:31:be:37:3a:91:5d:e4:c7:61:10:c3:4c:65:ea:1b:cb:
79:77:d9:ee:89:91:e2:78:45:3a:5b:e9:87:76:8a:e7:4d:4d:
f4:be:6a:61:b5:1c:be:db:64:2e:35:9c:0c:8f:34:d4:a0:ca:
d2:13:0e:0d:56:03:ad:eb:af:c2:13:82:ea:d8:ce:d8:d9:bc:
bb:4f:cd:04:7c:2d:24:92:c9:72:ec:11:09:13:45:68:b7:bb:
f2:8b:8b:3a:2f:da:f1:49:0d:1a:a4:55:25:e2:3a:41:ef:e2:
fb:97:cb:f0:e4:43:a8:e8:38:8f:02:f0:0e:54:e8:ef:7c:51:
f7:b3:1d:15:c0:5a:cc:73:c5:d5:f9:7c:39:df:ba:90:62:37:
6d:6d:8b:ce:de:30:04:c4:fd:ab:18:7d:ac:73:ac:3a:d7:7b:
63:1b:63:1d:14:1d:88:f0:3a:eb:f6:78:51:6a:0a:1c:f8:41:
78:e8:5e:13:c5:a2:d7:d8:dd:96:24:97:43:58:7a:48:e6:d3:
15:64:c2:91:06:18:f3:80:e9:72:30:61:dc:d8:e9:a8:e6:41:
4e:9f:4f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:33 2025 by rpki-client