Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: ILpeyw0/aj0CYiGEcP3Z6jon8oS4D9Ye6Rkecs9nz+s=
Subject key identifier: 67:8D:1B:3C:D2:2A:A2:5E:45:88:0B:F5:6C:56:3E:CD:69:F8:60:5B
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 0199FB0F22858BCCFF6D8A4A6A9FDAD31AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0730
Signing time: Sun 19 Oct 2025 06:01:36 +0000
Manifest this update: Sun 19 Oct 2025 06:01:36 +0000
Manifest next update: Mon 20 Oct 2025 06:01:36 +0000
Files and hashes: 1: XOOVHbvdi1PyG7OFqAlrThvaXr0.roa (hash: FXkyjiQc3j4OAi/BA8pdWLXnVuKz/SxHMWNuTxG6YRs=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: mM3SOmP05FY55QKGfWGAiqgTuZSc90681AYhugyPuo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:22:85:8b:cc:ff:6d:8a:4a:6a:9f:da:d3:1a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Oct 19 06:01:36 2025 GMT
Not After : Oct 20 06:01:36 2025 GMT
Subject: CN=678d1b3cd22aa25e45880bf56c563ecd69f8605b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:7b:c0:83:82:72:cb:c9:00:be:6d:54:69:
3e:88:2f:d1:80:b0:9a:61:20:b6:af:31:c4:ad:21:
e9:77:10:15:eb:1d:f0:67:0c:6a:d9:84:b8:ba:ad:
92:72:c9:81:e9:db:be:51:bf:aa:c7:c9:36:c5:58:
c5:17:2d:f5:e3:41:e8:67:ef:96:fe:98:ea:d3:e9:
52:06:11:d6:84:79:d2:86:02:07:8b:9b:a4:04:50:
b5:87:44:8b:b1:b3:c4:27:1a:ea:7d:1b:e9:3c:c4:
a8:7f:77:da:3e:a6:58:58:fa:65:3f:df:55:65:42:
f9:dc:95:de:d2:fd:c5:ca:ef:97:f5:29:3c:52:a0:
f4:fb:45:b7:de:6f:28:52:a1:7a:08:88:d9:e8:73:
4d:a0:9d:21:89:c8:69:f0:45:de:a9:d2:18:67:91:
93:39:de:61:f6:66:4f:63:5b:5e:e1:10:1f:54:ca:
42:9d:ec:9b:87:3b:9a:fe:82:31:ad:53:d0:18:23:
26:0f:8c:bc:cd:12:e3:4b:9c:4e:0b:28:f0:a6:7e:
d1:6d:ad:8c:95:68:8c:e7:49:8a:df:da:79:c7:c0:
ce:2f:96:19:ed:0d:56:be:26:89:a4:4b:8f:06:74:
ce:86:5c:4c:a3:66:d8:9c:99:6e:38:be:4c:62:f4:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8D:1B:3C:D2:2A:A2:5E:45:88:0B:F5:6C:56:3E:CD:69:F8:60:5B
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6b:ed:4c:72:33:33:9c:83:6d:7e:fe:de:c4:08:f1:61:19:
a4:09:fc:82:cd:ca:36:36:75:c8:6f:bd:df:87:17:6f:a6:82:
bb:52:b1:e6:10:e5:0d:4c:58:6c:4e:4f:62:2a:16:ee:25:c4:
38:cc:5a:38:4b:b8:97:f3:6d:1d:42:f3:b4:4e:36:c3:d8:b5:
3a:c9:8b:3d:ca:85:7a:ef:f2:85:3d:e6:07:61:d0:a0:e5:e0:
57:2c:fa:dc:d8:14:3b:4d:ee:6e:57:c7:5c:b5:9b:73:36:df:
c9:22:ce:7b:8b:70:ac:fc:c8:ff:8d:95:fb:d0:04:5a:16:a8:
ad:ad:f0:70:9c:d3:d1:80:70:5e:15:ae:2e:60:b0:af:41:2d:
e8:ab:78:73:0b:f8:6b:48:04:0b:38:28:6a:8f:80:04:69:a4:
e3:1d:9a:6a:60:d0:86:24:e0:2d:30:8b:2d:0b:e5:92:bb:24:
65:c7:de:a9:7d:b9:70:a2:9b:cd:06:05:ec:ae:c9:f5:75:ff:
fd:52:9e:87:4b:2b:92:7e:ff:9a:3a:5b:83:72:d8:e0:ba:82:
47:6d:56:76:cd:6b:71:6c:04:6b:94:df:65:52:7d:24:c8:a3:
66:f7:f5:fb:ab:84:6b:03:91:b8:70:98:59:0b:3a:78:94:52:
05:73:c7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:06:36 2025 by rpki-client