Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
File: hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json)
Hash identifier: J2rXivOcPtrY13gDxVsbXot2MTFxSbR1fjWi2qwSbe4=
Subject key identifier: C3:38:92:87:78:DB:12:06:7C:1E:45:E3:4B:1F:4C:EF:5E:98:C1:5F
Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Certificate serial: 019A416FD291699C95F21327FF798723FCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
Manifest number: 20
Signing time: Sat 01 Nov 2025 22:00:38 +0000
Manifest this update: Sat 01 Nov 2025 22:00:38 +0000
Manifest next update: Sun 02 Nov 2025 22:00:38 +0000
Files and hashes: 1: 8hT_E2lP_XAAVJsTroBoa69lbkY.roa (hash: wsftIcKlCqe+R912iWtJnREYgPP40XIaQmbFqEEoMJE=)
2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: LPp2lFmOYFKfcURGrrJ+RgHqR6XAw79s2uJ6ePV0zw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:6f:d2:91:69:9c:95:f2:13:27:ff:79:87:23:fc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Validity
Not Before: Nov 1 22:00:38 2025 GMT
Not After : Nov 2 22:00:38 2025 GMT
Subject: CN=c338928778db12067c1e45e34b1f4cef5e98c15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:e5:af:cb:10:32:f1:e4:f8:0d:3d:79:71:
d8:f4:90:c7:f4:be:4e:1e:71:a5:93:78:06:90:cb:
11:00:0a:47:bd:fe:49:5b:d1:33:17:0f:3e:18:9e:
49:4b:dc:f9:b8:2c:a4:53:65:47:69:c2:bc:4d:10:
97:87:03:e1:9e:a5:1e:1d:82:8d:20:75:68:12:3f:
6f:4b:31:dd:dd:da:3f:3d:f6:a4:e3:8e:eb:f7:01:
f7:e6:e5:5c:56:e4:53:05:16:7a:56:58:72:0e:28:
7a:19:04:b3:7a:f2:97:98:d6:2d:a1:24:24:0f:ca:
58:bb:29:fb:5c:9f:86:33:d3:cb:35:38:f8:90:b4:
c5:24:81:95:e5:4b:ff:4f:4f:e6:7e:3e:d4:40:82:
6d:5e:c6:60:8d:80:2e:05:b8:8a:61:64:5b:10:37:
ea:14:4b:7e:c6:63:3d:89:00:ad:f0:33:5f:4f:6a:
47:1e:03:65:1b:ef:14:94:30:8e:56:77:f0:93:44:
28:19:35:0c:6e:40:8a:68:59:2a:38:74:d0:08:d5:
30:13:a7:10:5d:59:39:df:a6:e8:ff:0f:44:b0:16:
11:57:3d:45:48:fe:a7:25:f0:49:ef:10:ec:7a:7a:
e0:17:87:11:e6:29:28:41:fa:31:12:b8:3b:df:38:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:38:92:87:78:DB:12:06:7C:1E:45:E3:4B:1F:4C:EF:5E:98:C1:5F
X509v3 Authority Key Identifier:
keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e9:14:98:3a:df:38:bd:b4:b0:59:97:d4:92:48:db:bc:58:
e7:a4:1f:20:ba:a6:6c:39:9a:35:b2:bc:14:47:61:a4:ac:74:
51:74:00:1f:e1:4d:38:d7:a0:a2:f4:87:ae:56:6f:bd:b4:fe:
58:8d:47:03:52:14:9e:34:0c:21:6e:ce:31:5a:5a:9b:f2:7e:
69:65:1d:39:6b:4b:8c:b7:85:84:df:a3:21:c7:bb:6b:e7:e6:
68:bd:02:f7:4a:36:7d:ab:b6:eb:ec:41:3c:17:69:f7:2d:c6:
6f:ca:60:f0:6b:03:d1:c6:ca:8e:b6:c8:e2:32:cb:ad:39:20:
3d:f5:18:10:f3:41:91:c3:75:85:b2:27:cd:75:38:21:84:b5:
bf:8f:72:76:39:78:a5:7b:80:6d:c6:d0:7d:4e:02:e1:21:4d:
a5:93:25:23:c4:25:5b:1a:b7:c5:56:51:0c:f1:ff:0c:11:a7:
c0:82:3a:1f:3c:4f:87:82:21:1b:7d:59:b0:e6:8c:b9:cc:33:
57:09:b3:cc:3d:71:17:12:66:3c:c8:b8:7f:7b:a4:29:15:06:
3c:8d:e7:66:7f:ca:c0:8b:8c:74:70:bd:e3:00:75:ff:2a:e7:
69:4a:6f:39:3a:24:c9:72:4d:7a:49:c4:9c:d1:1b:1a:61:ae:
3d:7c:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 07:10:21 2025 by rpki-client