Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: 8XsD3jN3cqzStrs+mFjtkql0xRfb2GLqBE4cj+tfYys=
Subject key identifier: AA:29:69:F4:B3:01:27:8E:67:B8:3F:40:B9:67:38:88:0B:11:D9:F4
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 019A1A2AE43A63C4E76211563ABD476F1FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 1278
Signing time: Sat 25 Oct 2025 07:00:09 +0000
Manifest this update: Sat 25 Oct 2025 07:00:09 +0000
Manifest next update: Sun 26 Oct 2025 07:00:09 +0000
Files and hashes: 1: 4cnRWY5gtsfuxJysdz-vN0qrOUs.roa (hash: 93jxXfokl+svyBU1O0Hr6w6zv+AavA15Ll9wQ0fHJCo=)
2: 7L93z_qlhSOtd1RZOlWCJUWvg_o.roa (hash: vV2gGeYtK37+wnV0Ydlju7P2SHZgL0mA9o+Vjq7iAwY=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: 8BWGYrPwnOIbC0R6wA8LjScXNWXBLhmTEIvO54WIPig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2a:e4:3a:63:c4:e7:62:11:56:3a:bd:47:6f:1f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Oct 25 07:00:09 2025 GMT
Not After : Oct 26 07:00:09 2025 GMT
Subject: CN=aa2969f4b301278e67b83f40b96738880b11d9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:be:74:33:57:84:78:6a:3d:b3:34:e2:be:
94:ff:24:46:00:ed:08:3e:56:af:aa:da:b9:5c:8b:
e5:57:f7:25:a0:48:cc:21:aa:7e:fd:96:de:04:85:
bd:0a:fc:3e:c9:6e:b2:89:dd:62:90:e0:f5:f3:5f:
45:fd:51:46:7f:6c:0a:65:39:56:a3:b3:ca:a1:e7:
cc:76:d4:aa:44:df:aa:dc:16:80:ad:6e:30:ff:4d:
af:00:b7:a8:56:a3:ef:d1:0b:a0:8c:ab:7b:7f:c0:
a5:9e:dd:f5:08:c1:2a:ae:d3:7e:83:8b:6d:aa:78:
89:65:2d:0d:d4:a5:31:29:7f:e8:71:95:13:b3:d4:
b1:4f:56:3a:d2:9b:62:7a:f9:e6:01:4b:28:22:f9:
08:a1:9e:15:f1:af:0d:59:f9:65:f0:e6:b6:6f:ef:
06:1a:39:8b:d9:a3:4c:47:bb:ab:fb:29:75:1f:c1:
8d:fd:f5:27:23:5c:cb:f8:b4:16:c1:0e:c7:d5:f8:
c4:a6:2e:36:c8:73:fc:a9:4b:cd:e1:39:9c:16:aa:
dc:7f:61:7b:97:80:7f:60:c2:a3:ca:82:c0:a5:7e:
45:21:84:c7:44:9e:85:2a:13:c4:d3:a8:00:89:43:
43:76:e1:c8:3e:4a:93:ea:0c:69:ba:75:9c:36:b2:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:29:69:F4:B3:01:27:8E:67:B8:3F:40:B9:67:38:88:0B:11:D9:F4
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:88:eb:b3:9a:b0:d3:6e:2c:b2:35:b9:2b:8b:6a:54:5a:0d:
91:f9:3b:61:8c:ca:05:57:75:55:3e:29:bf:e3:2b:64:63:8e:
46:50:60:1d:f6:24:e7:a7:eb:45:53:5f:0a:b1:53:2e:94:74:
1d:9a:5c:5b:81:4f:96:cd:ba:35:35:ee:35:f6:5b:95:c3:c2:
64:5f:f3:e0:74:c6:ba:1c:68:85:a0:34:89:21:a8:86:36:2b:
42:d7:ac:4e:48:84:68:2a:5a:65:6e:fd:02:8e:36:e4:b7:28:
aa:8f:11:3f:05:8e:62:4c:e3:55:db:1c:e3:d7:d3:18:cd:ee:
23:aa:cd:bd:61:c2:04:b5:30:90:14:83:4d:0c:72:c2:63:ba:
a7:da:bb:f8:13:ab:42:f6:cd:94:59:26:ce:72:65:f3:10:b8:
c2:76:54:35:6f:5d:22:c9:e7:f8:d6:e3:ca:d2:97:67:9b:bf:
a4:21:ae:15:07:18:2d:5a:d0:1b:79:1c:00:32:e5:10:f8:45:
e4:af:c9:17:a1:a8:ac:9b:c0:ea:d9:c6:02:50:66:12:0a:6d:
8d:3a:df:81:ac:a7:55:ed:f0:2d:77:d1:a9:5e:57:df:4a:f3:
ce:a0:01:fb:f7:99:38:30:ff:22:2b:83:37:25:4d:5c:df:3e:
2a:33:74:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 16:24:57 2025 by rpki-client