Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier: rS1Ckzq5zrfVxY4QMf/NTCpUELfQ3iNNw+G57ScG+oY=
Subject key identifier: 0A:2E:63:3A:63:45:AB:37:C0:EB:5B:75:08:D8:6A:0C:B5:1A:AE:C2
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial: 019A022295F80CCB326E7966EC22FC642E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number: 03F8
Signing time: Mon 20 Oct 2025 15:00:12 +0000
Manifest this update: Mon 20 Oct 2025 15:00:12 +0000
Manifest next update: Tue 21 Oct 2025 15:00:12 +0000
Files and hashes: 1: SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa (hash: rGZg6LxxY7ku4GUoLGf94rOsH2eH6eg3rUYHF4vWHMk=)
2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: vplAzmNgrKo8/OyTZHUENz1PNrdzf4HvPOSfB63Ja30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:95:f8:0c:cb:32:6e:79:66:ec:22:fc:64:2e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Validity
Not Before: Oct 20 15:00:12 2025 GMT
Not After : Oct 21 15:00:12 2025 GMT
Subject: CN=0a2e633a6345ab37c0eb5b7508d86a0cb51aaec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:8b:09:64:c5:a1:50:38:75:55:12:bb:f3:
f4:3f:54:d4:04:1f:4f:b5:ec:35:fb:a9:40:62:62:
41:25:2d:4c:fa:38:75:b3:c8:64:92:a4:b7:31:f3:
95:02:51:d4:8a:02:5a:4c:3d:e8:9c:7c:f9:f5:82:
0a:6e:50:ef:32:a4:39:0e:07:ec:ce:cb:2d:36:db:
d6:35:79:7b:0a:13:ee:9d:ee:28:b6:61:2b:aa:8f:
92:c4:bb:cc:4c:1e:fb:54:9b:0f:ac:9d:1b:bd:b5:
c0:79:0b:7f:bc:36:3f:76:6b:7e:88:4e:21:b3:56:
72:92:98:be:d4:72:86:dc:36:59:aa:cc:1d:e8:b5:
8f:49:51:9b:f8:da:00:1d:2f:c6:89:4a:0c:68:75:
54:f4:3a:25:33:f2:e7:c8:63:dc:82:fc:1b:3b:95:
2f:46:ee:c8:7f:fa:1c:72:3d:32:9d:38:81:7b:e2:
cb:d6:6b:2d:5b:39:f2:b2:33:23:96:8a:73:21:d4:
8a:f1:c4:c2:c0:61:e4:f1:0b:2b:51:b5:74:3b:9d:
20:6d:63:f8:f0:ae:13:9d:73:8a:f9:d4:76:61:21:
1e:f9:33:a4:7d:c5:79:65:78:27:c9:9a:1e:03:a1:
97:15:dd:e8:da:8f:8e:aa:e4:be:ae:eb:09:ca:99:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2E:63:3A:63:45:AB:37:C0:EB:5B:75:08:D8:6A:0C:B5:1A:AE:C2
X509v3 Authority Key Identifier:
keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f4:5a:7b:d3:06:81:d4:8e:ff:f1:b6:e2:4c:bd:1d:c3:2b:
a3:9c:dc:bf:57:c4:2a:a3:d2:0c:f7:d8:7e:75:af:4b:ca:b1:
7e:5f:1a:13:6f:4f:f6:f5:a5:5a:3d:01:7f:65:12:03:19:46:
f4:1c:6c:8e:c3:0e:07:d2:a9:de:0e:19:d9:69:03:f6:8f:2f:
6a:f1:bb:45:3e:43:40:29:a5:bf:c2:14:8c:56:b4:4c:4f:0e:
4f:1d:e5:df:36:77:1e:ad:28:9f:bc:27:b2:0c:ac:ce:f7:de:
56:aa:c8:46:6c:8d:bb:a1:63:d4:00:4b:40:cb:63:e0:06:cc:
fb:59:9f:a2:f0:ac:ba:6d:06:b9:5b:71:be:3a:e3:b2:09:14:
a8:c3:17:39:db:0e:08:53:e8:07:7d:0d:67:b0:1b:99:16:73:
30:31:72:82:3f:af:77:a9:95:91:87:6d:bb:10:34:4c:9b:08:
23:b1:75:de:66:6e:88:85:66:07:8e:0d:50:7c:34:c5:70:9d:
3f:15:3c:4e:48:48:3a:e2:31:22:2a:98:eb:e7:36:60:e1:9e:
d0:2c:57:de:63:18:d1:02:82:8d:3d:d0:7a:cc:10:91:64:f4:
74:44:08:b7:d7:69:51:3a:32:82:5c:0f:b0:16:da:cc:ef:db:
cf:f9:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:39:54 2025 by rpki-client