Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier: q0vS/rJkCfV471yGW6xZAvcKvZOmr1/XCYgsuYDZ7c8=
Subject key identifier: 77:A6:CF:0C:37:A2:81:AE:0E:EC:B4:DE:10:E5:21:84:2E:98:BC:AD
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 019A714A27981DE06BBF48D1B3A0C868BBB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 05:01:16 +0000
Manifest this update: Tue 11 Nov 2025 05:01:16 +0000
Manifest next update: Wed 12 Nov 2025 05:01:16 +0000
Files and hashes: 1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: l5qdkNoezou5LlMkTOrhjoqm08TYCoNEXV/XRn76L/o=)
2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:27:98:1d:e0:6b:bf:48:d1:b3:a0:c8:68:bb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Nov 11 05:01:16 2025 GMT
Not After : Nov 12 05:01:16 2025 GMT
Subject: CN=77a6cf0c37a281ae0eecb4de10e521842e98bcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:a3:02:b2:ae:1d:c0:13:1d:6a:8e:5d:09:
a3:a3:34:76:51:af:23:e4:fe:e2:14:9e:3d:df:7b:
ca:0b:4c:0d:cf:10:16:50:84:cb:dc:b0:6d:1e:e5:
36:1d:6d:6c:9e:d9:e6:77:0b:08:b5:3e:1b:3a:59:
c0:67:c5:34:60:dd:84:ff:50:f4:02:42:5b:42:e6:
ed:8e:e6:2a:8a:3b:58:38:43:fd:b2:02:cf:38:4e:
1b:c7:7c:61:e2:4a:02:31:54:40:87:ce:54:ab:91:
51:98:0e:56:f6:01:87:e7:b6:d0:9f:08:22:3f:8f:
c7:79:77:60:0d:21:f6:72:9b:86:6e:88:1e:ed:13:
cf:3c:7a:e6:b9:e5:f2:60:40:27:13:dc:3b:8a:1b:
60:ad:fb:18:aa:27:86:6d:c9:1f:4f:f2:ff:d3:00:
c1:2f:35:1e:d2:18:cb:26:30:99:bd:49:d4:64:6e:
8e:be:12:94:ae:a1:59:36:30:5e:bb:ca:76:b9:8a:
40:2b:7f:df:e6:30:08:df:76:44:1c:40:ba:83:24:
39:51:7c:58:48:ba:d1:44:fa:59:9b:e4:28:27:4b:
22:00:60:6f:fc:ad:ac:31:c9:69:27:40:09:36:c1:
33:1c:ae:83:74:32:be:f6:4e:51:dc:b9:2d:69:c5:
6d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A6:CF:0C:37:A2:81:AE:0E:EC:B4:DE:10:E5:21:84:2E:98:BC:AD
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3d:e7:0b:31:8b:2b:67:84:87:15:88:79:18:c5:2f:17:ce:
61:9b:cf:c6:41:70:43:6f:95:d2:d2:11:1c:de:dc:ee:e1:2c:
74:2b:a3:b3:e2:ea:7e:b8:f2:43:c9:94:ed:db:3d:5b:99:77:
c9:88:3e:04:b2:c3:b1:9d:dc:b9:66:38:e4:73:a6:5a:d1:e6:
39:9b:08:bd:cc:b4:c5:74:fd:fc:f3:b1:c8:cf:51:34:21:65:
61:fd:1c:b8:ea:56:7c:c3:22:6e:c5:87:7b:df:9e:20:e3:1f:
df:1d:59:05:50:d2:0a:9b:5b:1c:18:98:20:3a:bc:46:f1:30:
02:8a:27:45:86:70:37:58:4a:7f:3a:0e:e8:a1:e9:21:b5:01:
b0:86:ce:79:15:a7:d1:ac:8f:92:9a:2b:8e:e4:0b:cf:a5:78:
c2:0b:3d:b4:00:ad:56:fc:75:1f:94:47:4f:c4:e7:33:ce:14:
3d:12:a9:46:97:ad:c6:ea:fe:49:2a:cd:27:45:94:88:a6:89:
0c:b2:14:20:29:7e:ca:5f:4d:fb:bc:f1:06:a5:00:70:57:94:
96:7b:8c:98:df:6e:45:fa:35:68:86:4b:33:e7:50:6e:fd:ec:
c7:bd:17:2d:be:03:5f:3f:4a:8d:63:0a:98:dd:de:99:73:86:
49:38:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:48 2025 by rpki-client