Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
File: hUxfKY2BrMVXP9WfsF3YbyCry6g.mft (raw, json)
Hash identifier: 8qkBwg8sYgNFQJWAcne9gVi1Vgn+i0vQRPSQrxe48aw=
Subject key identifier: 73:55:38:24:09:C4:F3:5D:5A:06:E9:25:CF:8B:DA:BA:A5:44:09:05
Authority key identifier: 85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8
Certificate issuer: /CN=854c5f298d81acc5573fd59fb05dd86f20abcba8
Certificate serial: 019A1EADEF6CCE1C00EED5D5ED22A29C4C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
Manifest number: 1173
Signing time: Sun 26 Oct 2025 04:01:46 +0000
Manifest this update: Sun 26 Oct 2025 04:01:46 +0000
Manifest next update: Mon 27 Oct 2025 04:01:46 +0000
Files and hashes: 1: CJqITen207ZODHzo1XtCMdI_VBo.roa (hash: f1FWG5pswdJQTpL1NXAace6jGLQD4G1flmSN2+tjCMo=)
2: hUxfKY2BrMVXP9WfsF3YbyCry6g.crl (hash: 8ptYlwZsjthQDQ1ix9+621N149Y5aTLbuNMHDM86RoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:ef:6c:ce:1c:00:ee:d5:d5:ed:22:a2:9c:4c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c5f298d81acc5573fd59fb05dd86f20abcba8
Validity
Not Before: Oct 26 04:01:46 2025 GMT
Not After : Oct 27 04:01:46 2025 GMT
Subject: CN=7355382409c4f35d5a06e925cf8bdabaa5440905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:01:48:89:be:cb:80:30:e1:85:8a:be:46:
41:9e:ee:e2:8e:8b:24:e7:93:4d:a7:4e:b4:d3:a4:
df:8b:5f:a6:b4:e4:e4:b0:30:c1:1d:90:7d:69:ae:
14:64:d7:79:7e:7c:3a:e1:b1:bc:64:e8:e8:3a:7c:
f8:a5:16:79:0c:fb:28:ea:9f:c4:21:f8:ad:fd:02:
a0:f8:25:48:a6:bf:01:1b:5b:26:62:40:40:52:bb:
7e:f0:1c:b1:e8:31:cb:98:0d:85:c9:10:e2:5c:fe:
c7:38:96:1e:65:ce:96:1e:69:4f:b3:0b:c7:f7:d8:
ad:87:36:40:aa:cb:ec:47:f1:bf:44:8d:1b:d0:1a:
e8:b7:71:ad:64:36:d6:fc:cd:dd:25:7a:7f:33:17:
c9:71:63:af:b5:d5:6a:6c:3b:bb:7f:6a:c2:32:93:
78:1b:49:d5:d1:e4:77:21:0b:ab:b8:0e:51:c3:52:
27:1c:42:e0:1f:75:b7:96:b7:df:25:3b:d0:ae:c0:
13:f6:0c:c7:77:05:55:9c:c4:1d:68:80:9c:2d:e0:
7e:89:93:86:ad:2c:41:68:6c:32:45:f2:95:6f:6d:
c4:b8:9e:72:2c:66:d9:15:06:c4:16:f9:2c:1f:5c:
f4:16:4a:0d:d4:1c:ce:fb:f2:88:52:10:2e:7a:9a:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:55:38:24:09:C4:F3:5D:5A:06:E9:25:CF:8B:DA:BA:A5:44:09:05
X509v3 Authority Key Identifier:
keyid:85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dd:ef:a5:22:f7:93:55:8c:21:27:dc:bd:51:df:d4:76:c6:
1a:80:10:5b:7e:6c:a3:98:02:0e:dc:07:bf:4e:3b:7a:53:15:
f2:53:fb:82:12:b9:fa:32:58:96:73:d4:a4:5b:4c:ed:57:d2:
4f:12:c1:dc:c7:08:ab:2e:76:e9:c3:fd:de:2a:21:fe:dd:62:
53:4a:25:5a:f9:98:48:f0:20:d4:00:d3:1f:6e:d6:4a:7d:e6:
63:70:51:7b:19:00:fa:11:a9:fb:35:d7:b2:25:5a:1e:8b:08:
89:e7:97:61:1d:76:8e:d7:2d:a7:b7:37:2b:38:ac:f2:40:a8:
59:3d:1e:73:23:9a:b3:4a:c3:0a:83:e8:c1:61:84:cc:a1:b2:
4e:5d:f9:e0:5b:aa:36:cc:98:63:3f:eb:02:1c:e0:0a:20:de:
3f:87:90:43:d8:31:24:60:83:88:61:8c:97:8d:ad:75:1d:e2:
86:6c:c2:98:61:40:ae:a3:dc:3b:ae:4a:b3:ea:88:89:65:bb:
8d:20:83:23:65:5e:7e:24:42:89:7b:d8:dd:ef:97:6f:fd:77:
48:c0:6f:23:d7:69:84:23:fb:0b:53:b2:51:c2:db:c9:28:e6:
1f:d4:c8:aa:73:6d:07:f0:cc:ed:f8:24:4c:87:f2:5d:94:84:
de:95:73:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:18:10 2025 by rpki-client