Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File: hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier: 8zDXHil5cAkoQOe+DCo57FI52AQbly8p6faDcmm5pig=
Subject key identifier: 0C:8A:0F:C5:50:BB:FF:D1:4A:B5:FE:87:3B:83:E0:28:A9:FB:8A:84
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial: 019A262EFDAFC4756DDE8F07E440C75DE166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number: 16A2
Signing time: Mon 27 Oct 2025 15:00:04 +0000
Manifest this update: Mon 27 Oct 2025 15:00:04 +0000
Manifest next update: Tue 28 Oct 2025 15:00:04 +0000
Files and hashes: 1: D22ywRwvNb9l3Ejn0IhkTIbbqtw.roa (hash: MXQ5UIAvuNHHez6ImEjyKvenCI0hemAJDRUs3ItPy8E=)
2: E5_9p_TGg2FNMpZSH1jH4wJ3rfA.roa (hash: GcTlxtoi4GEP2bLooVydD/oQvGI42+1RU87/9gjgDvc=)
3: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: VMbJGNayrb03wWQ4GVc6jYmoFtnFZDCGdRtJ27i5wcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:2e:fd:af:c4:75:6d:de:8f:07:e4:40:c7:5d:e1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Validity
Not Before: Oct 27 15:00:04 2025 GMT
Not After : Oct 28 15:00:04 2025 GMT
Subject: CN=0c8a0fc550bbffd14ab5fe873b83e028a9fb8a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:e9:90:e1:7c:9e:fb:e5:82:4c:e3:78:91:
dd:a0:31:d6:20:45:8d:04:13:8b:1a:61:c2:38:e0:
a4:79:3f:28:23:d1:03:44:af:bf:03:fb:c6:e5:fe:
6e:4b:62:52:16:d6:6b:4f:94:ab:ec:d1:4c:a0:ef:
74:63:80:ed:16:9d:8d:04:97:17:20:a3:9f:d8:48:
f2:a9:86:c5:11:18:bb:c1:eb:8e:8c:80:49:ab:55:
fc:ee:c8:10:bc:61:83:0b:73:6e:66:cc:cb:ed:92:
32:5c:b4:e2:55:59:36:a9:48:6c:76:33:1f:ba:b9:
70:a1:71:e6:0e:b7:2f:e8:d5:fd:80:f3:74:bc:4d:
c1:de:91:30:60:71:ee:cb:f7:f3:45:e2:e0:e9:67:
b2:3e:a5:31:66:67:29:eb:9d:5c:c4:62:41:e9:bc:
b7:80:76:f9:67:14:da:c3:d4:40:e9:1e:b5:01:fb:
58:93:08:50:37:46:78:61:1c:83:c1:97:58:83:6f:
cb:40:68:af:42:f9:21:de:7c:3f:31:24:41:49:7f:
16:63:d9:f3:6e:0b:ee:a8:4e:f3:18:f8:9a:f8:13:
86:86:45:f9:ae:44:2a:e8:0e:ae:0c:6f:80:c8:11:
eb:3f:bc:db:36:57:b2:f6:85:85:33:79:0c:da:20:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8A:0F:C5:50:BB:FF:D1:4A:B5:FE:87:3B:83:E0:28:A9:FB:8A:84
X509v3 Authority Key Identifier:
keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:75:b5:4b:cc:4e:c3:93:27:e5:b6:46:e2:1a:d6:77:e1:1d:
19:aa:25:0b:4e:50:f3:5d:6b:a3:af:a5:39:3a:0d:c1:9a:b9:
7d:04:88:90:d7:59:28:ee:a7:6d:37:ca:f4:24:b2:c4:06:5e:
c4:b2:47:29:05:51:42:1b:57:f8:c1:dc:95:fa:f0:50:2a:28:
d2:ce:30:b2:c7:a4:d3:f7:f0:65:08:16:88:ff:38:2d:6e:ee:
38:fa:98:c8:f5:3f:b3:01:83:3b:10:84:9f:17:ad:9b:aa:85:
6c:93:9d:b1:09:89:51:4d:ca:65:03:99:21:c5:c7:2c:fc:ef:
24:44:85:a4:10:45:6a:55:2a:86:b5:e1:f3:53:4c:33:bd:35:
02:38:c4:0f:ae:15:4c:e1:66:6d:76:5c:d4:dd:49:bd:ac:7a:
f0:f4:f1:a2:fc:c0:6c:46:10:85:20:8a:0c:a6:e6:01:5f:5b:
29:cf:40:a8:6f:f3:ac:26:ec:f5:3d:c5:66:f6:e4:8c:0c:41:
5f:ae:17:2e:1b:8e:45:df:05:41:95:62:79:36:a0:52:15:71:
c3:54:74:fd:11:d7:ba:66:09:fb:23:e1:36:b5:f7:9a:15:7c:
ae:2a:b9:dd:af:41:ba:b8:9a:74:3e:3e:f8:02:6a:f2:84:c2:
78:22:16:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomLv2vxHVt3o8H5EDHXeFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjlmMjEwMGMyZmM0NTRhZDA3YWRlYzc5NmI5ZTZmNjM2
NmYwNzEwHhcNMjUxMDI3MTUwMDA0WhcNMjUxMDI4MTUwMDA0WjAzMTEwLwYDVQQD
EygwYzhhMGZjNTUwYmJmZmQxNGFiNWZlODczYjgzZTAyOGE5ZmI4YTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvrpkOF8nvvlgkzjeJHdoDHWIEWN
BBOLGmHCOOCkeT8oI9EDRK+/A/vG5f5uS2JSFtZrT5Sr7NFMoO90Y4DtFp2NBJcX
IKOf2EjyqYbFERi7weuOjIBJq1X87sgQvGGDC3NuZszL7ZIyXLTiVVk2qUhsdjMf
urlwoXHmDrcv6NX9gPN0vE3B3pEwYHHuy/fzReLg6WeyPqUxZmcp651cxGJB6by3
gHb5ZxTaw9RA6R61AftYkwhQN0Z4YRyDwZdYg2/LQGivQvkh3nw/MSRBSX8WY9nz
bgvuqE7zGPia+BOGhkX5rkQq6A6uDG+AyBHrP7zbNley9oWFM3kM2iB4YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyKD8VQu//RSrX+hzuD4Cip+4qEMB8GA1UdIwQY
MBaAFIVp8hAML8RUrQet7Hlrnm9jZvBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEt
MjMzNmNkYjliYTlmLzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEtMjMzNmNkYjliYTlm
LzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXW1S8xO
w5Mn5bZG4hrWd+EdGaolC05Q811ro6+lOToNwZq5fQSIkNdZKO6nbTfK9CSyxAZe
xLJHKQVRQhtX+MHclfrwUCoo0s4wssek0/fwZQgWiP84LW7uOPqYyPU/swGDOxCE
nxetm6qFbJOdsQmJUU3KZQOZIcXHLPzvJESFpBBFalUqhrXh81NMM701AjjED64V
TOFmbXZc1N1Jvax68PTxovzAbEYQhSCKDKbmAV9bKc9AqG/zrCbs9T3FZvbkjAxB
X64XLhuORd8FQZVieTagUhVxw1R0/RHXumYJ+yPhNrX3mhV8riq53a9BuriadD4+
+AJq8oTCeCIWPw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:06:26 2025 by rpki-client