Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json)
Hash identifier: DobxInB7E0E+RXRFi2FrLKJGzzNP3+QPMHzHs+TbwwI=
Subject key identifier: 0E:DB:DF:36:AC:FD:E4:09:35:E9:20:8B:CC:55:27:B5:BC:39:5A:AC
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 019A2665F9F0BD10A05AE097FD0D060E50DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
Manifest number: 1705
Signing time: Mon 27 Oct 2025 16:00:08 +0000
Manifest this update: Mon 27 Oct 2025 16:00:08 +0000
Manifest next update: Tue 28 Oct 2025 16:00:08 +0000
Files and hashes: 1: IZeoqEY95eSVV0eYYLX8T3tHlCs.roa (hash: LO4oh4VYMguVhAQpzzJsbYN82/uMVEn2vgRLSpasT1s=)
2: LJnxaD0i6KMHQc1A1Myl7JzH7gk.roa (hash: BOqHp3/8Lrk2VNXTgZj56poMzxkbv3v/wNmy6/SirSw=)
3: NewZ8pp4liRlRqK_bUM9ux7lUdY.roa (hash: e2V20fh5Bna/npvAqL/4q48RnUBDa1PMa1ud3KkuSzU=)
4: OMAWMgjFkntxY9hjh7x9HjopsUQ.roa (hash: fC4Wynjh9RIf9v3k1CSQsuZtxFupNj1veyw3ZlhI/Jw=)
5: QHrhoLDtZR3zPElOqqmMq3qzkao.roa (hash: NXLg9El+SZKbOxc9Fad+2P9R3XvjaMUu4aKcgfvxLco=)
6: VTgIeAjnu6QDITPutn3ZYiX28hw.roa (hash: 1qNSFP6+K7IEMjkOk6A/QLlgZfO6RHOCGRUYacl+A9I=)
7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: hjzMYNwRo0s1lWv/h0tWE8g8AppDWTkqDz4fGJsAiQg=)
8: kYOzNphxQuuMN-KEH5LcxfVfKho.roa (hash: ZqTwzdBEFFNTdg6mPtQfwSsq0u9CJRd378DWfNVX+no=)
9: wYF_ylL7pnBo9OaIzACNhn9RjFU.roa (hash: RTPtjL/eZ7d6GsDAAsmLFavUlJqeMCconuqgqwEBbU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:65:f9:f0:bd:10:a0:5a:e0:97:fd:0d:06:0e:50:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Oct 27 16:00:08 2025 GMT
Not After : Oct 28 16:00:08 2025 GMT
Subject: CN=0edbdf36acfde40935e9208bcc5527b5bc395aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:1e:f4:1d:ac:9a:ca:71:51:9c:cb:69:c8:
36:12:c8:80:a8:be:86:2d:75:20:d7:f1:0d:2d:2e:
cd:3e:93:00:06:cb:6b:96:ac:f5:bb:93:ae:b3:1d:
c2:f8:56:6c:a4:cf:cc:ca:3d:cd:01:b2:be:03:d3:
c9:9c:39:17:c5:20:4f:d2:50:b3:6e:0b:f7:ec:81:
57:41:3d:8c:63:1d:c7:42:17:66:26:99:c8:43:1b:
df:f4:ee:17:30:14:25:f6:27:97:8f:9c:5c:01:5d:
c4:e9:25:51:07:8c:95:90:e3:ff:7d:d8:83:b9:b5:
2a:26:30:82:62:4f:37:9e:93:8e:ea:73:de:d2:8b:
62:c1:62:20:3f:11:63:10:df:08:bc:12:42:f4:c9:
c1:af:9e:ae:f6:1d:78:e0:5c:e4:44:3b:5d:8c:f5:
43:bd:36:0c:a6:e1:2d:d2:3f:06:6b:69:50:f8:b3:
3f:6c:de:be:3d:cb:61:c5:e3:fd:86:08:a7:53:b6:
b0:79:ba:8b:4f:16:37:d1:09:70:a7:87:d7:31:7d:
18:7a:61:9b:ec:c5:4f:67:2d:ab:86:a3:d4:ed:08:
6d:0b:19:3a:6c:c7:27:38:0d:49:d4:3a:b5:51:e2:
53:46:21:2e:5d:6d:90:b5:d6:1b:66:b9:70:62:2d:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DB:DF:36:AC:FD:E4:09:35:E9:20:8B:CC:55:27:B5:BC:39:5A:AC
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c4:fb:45:c7:df:17:4e:26:b3:bb:b3:24:cd:c5:b3:e8:96:
5f:c3:77:db:d5:60:b9:5f:ec:c8:9e:ea:57:78:d3:7d:d9:4f:
68:8e:e4:be:c6:14:41:2e:05:7a:17:ce:0c:b1:3d:2b:6b:46:
0e:a2:d9:80:75:02:96:30:dd:dd:a8:d8:81:ad:82:b5:90:2a:
99:55:29:58:8a:60:14:69:64:f3:19:bc:a2:99:cc:15:41:1a:
da:91:bc:b8:59:42:0e:d6:ea:03:c8:2c:c3:be:67:aa:b4:98:
81:1f:20:06:c0:d3:b6:41:0d:4b:57:09:0b:a3:57:4c:61:cf:
53:7e:d9:37:0e:91:dc:49:58:e3:07:1d:cf:bd:e8:06:e0:0f:
f0:7c:d5:c0:b8:35:c0:e2:56:a5:98:b9:a3:40:aa:8d:f5:f1:
c5:5b:1d:55:c8:36:09:59:0a:1c:d7:a6:93:42:62:f4:cc:ae:
6e:1c:60:2c:e8:ee:8d:cb:aa:f5:fb:49:a9:05:c5:0c:d4:1f:
97:19:74:1f:7c:41:84:5a:cc:80:f8:55:3c:58:98:27:27:63:
82:08:89:26:95:53:5a:af:bd:c3:0a:75:ed:ce:5e:05:8c:e0:
b1:97:6a:4c:5c:fb:0b:c8:fa:e8:a5:99:17:9d:13:6d:65:78:
1a:56:92:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:11:07 2025 by rpki-client