Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: 4g1QTfksfs9+rZpw/7gbA+PIYymRNsOLq1gdaVX9wEo=
Subject key identifier: B2:52:D4:10:76:32:A3:AC:B2:B3:C9:52:E0:1C:43:05:E3:19:44:7B
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 019A2AE8063E1119A9EC716D326AC3A066E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 13:00:40 +0000
Manifest this update: Tue 28 Oct 2025 13:00:40 +0000
Manifest next update: Wed 29 Oct 2025 13:00:40 +0000
Files and hashes: 1: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (hash: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: cjMatgLBP3Sv5iIYVcP7atgbchog9q0ut8JiwUKsm3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e8:06:3e:11:19:a9:ec:71:6d:32:6a:c3:a0:66:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Oct 28 13:00:40 2025 GMT
Not After : Oct 29 13:00:40 2025 GMT
Subject: CN=b252d4107632a3acb2b3c952e01c4305e319447b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:76:95:e6:12:4e:eb:6d:26:69:20:d4:e2:
82:db:9e:3a:52:8d:d7:7c:5c:88:6c:d8:98:de:32:
a6:b9:52:7f:cf:95:cd:59:97:29:7b:8b:98:01:87:
09:27:94:9f:d8:4e:2b:15:83:12:b5:3d:3e:12:77:
58:73:52:b7:6f:38:f5:58:bb:1b:27:73:26:eb:2a:
0d:5f:83:1c:78:67:2c:e0:67:e2:cf:03:27:79:b9:
4d:90:07:5a:e2:d7:48:36:e2:db:e2:c4:65:31:50:
f5:9d:e7:f4:4e:62:d8:9f:08:28:5c:b3:b5:c1:90:
29:bd:f9:11:2c:1f:5b:de:b8:a4:5c:f4:ab:d4:ef:
08:5c:0f:ba:b1:2a:a5:e3:0b:83:a1:1b:65:0e:7a:
79:e8:d8:91:fe:e5:57:b4:51:f8:9b:6e:ab:91:68:
98:66:42:45:14:67:b9:cb:4e:a0:55:92:8d:0b:68:
49:86:a2:e1:d7:15:b8:a3:ab:4f:63:3b:3c:ee:f6:
2a:1b:2e:90:e5:0c:f5:ec:47:84:a6:0c:b3:e4:c1:
a0:d7:fa:1a:6f:a4:e1:2d:77:8a:e1:9d:35:4d:b6:
4a:37:17:c5:86:d0:82:06:c6:21:dc:3e:7f:0c:e5:
8d:37:fe:ce:93:d8:e3:b6:a1:37:e7:75:24:69:95:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:D4:10:76:32:A3:AC:B2:B3:C9:52:E0:1C:43:05:E3:19:44:7B
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:12:eb:8e:2d:be:9d:30:52:09:ad:1a:fb:1d:ad:db:67:17:
64:51:eb:61:b5:f8:22:50:59:5f:d9:85:d6:60:ad:2a:80:a7:
ce:c2:be:9f:19:70:dc:88:cb:63:75:95:ff:00:a9:be:68:cb:
17:3b:8d:3a:5f:0c:e7:82:6f:be:c1:c0:94:d0:ff:be:9b:1d:
ef:85:f0:2f:2f:6e:73:57:af:d4:24:d4:77:91:2f:68:06:42:
c8:51:4e:f8:97:2f:b1:22:15:81:5f:14:1f:0b:96:0c:61:14:
9b:da:8b:a4:19:47:d9:42:2b:30:c2:1f:0c:d3:c6:f9:1e:d9:
57:74:e1:0a:56:59:8c:a3:cb:70:03:88:2d:f1:e4:7d:bb:7d:
50:3d:00:bb:04:ac:5a:2f:10:7b:b5:43:d4:a2:3f:ae:47:1e:
a4:59:f3:d9:b8:95:5b:7e:fd:cf:96:7a:15:3d:5c:d2:50:34:
34:bc:8c:98:57:a1:5c:67:03:dc:96:7d:a4:29:42:13:6f:29:
78:4c:e3:d0:fb:da:75:ba:38:53:e8:e5:de:ad:ab:55:12:7d:
0c:5c:53:6e:66:0a:27:d7:bc:ae:92:95:06:f4:3e:59:90:53:
82:65:a1:e7:cd:a5:60:06:96:ff:1c:49:d8:86:6f:6d:55:78:
59:30:11:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoq6AY+ERmp7HFtMmrDoGboMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ODZhZThlNDkzNzRiYWM4NGNhYTNkZTBkMjYwNzBiNmIx
OTAwNTQwHhcNMjUxMDI4MTMwMDQwWhcNMjUxMDI5MTMwMDQwWjAzMTEwLwYDVQQD
EyhiMjUyZDQxMDc2MzJhM2FjYjJiM2M5NTJlMDFjNDMwNWUzMTk0NDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFp2leYSTuttJmkg1OKC2546Uo3X
fFyIbNiY3jKmuVJ/z5XNWZcpe4uYAYcJJ5Sf2E4rFYMStT0+EndYc1K3bzj1WLsb
J3Mm6yoNX4MceGcs4GfizwMneblNkAda4tdINuLb4sRlMVD1nef0TmLYnwgoXLO1
wZApvfkRLB9b3rikXPSr1O8IXA+6sSql4wuDoRtlDnp56NiR/uVXtFH4m26rkWiY
ZkJFFGe5y06gVZKNC2hJhqLh1xW4o6tPYzs87vYqGy6Q5Qz17EeEpgyz5MGg1/oa
b6ThLXeK4Z01TbZKNxfFhtCCBsYh3D5/DOWNN/7Ok9jjtqE353UkaZWBFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJS1BB2MqOssrPJUuAcQwXjGUR7MB8GA1UdIwQY
MBaAFIaGro5JN0ushMqj3g0mBwtrGQBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYt
YTc0ZjUwZTAwZGQ1LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYtYTc0ZjUwZTAwZGQ1
LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1BLrji2+
nTBSCa0a+x2t22cXZFHrYbX4IlBZX9mF1mCtKoCnzsK+nxlw3IjLY3WV/wCpvmjL
FzuNOl8M54JvvsHAlND/vpsd74XwLy9uc1ev1CTUd5EvaAZCyFFO+JcvsSIVgV8U
HwuWDGEUm9qLpBlH2UIrMMIfDNPG+R7ZV3ThClZZjKPLcAOILfHkfbt9UD0AuwSs
Wi8Qe7VD1KI/rkcepFnz2biVW379z5Z6FT1c0lA0NLyMmFehXGcD3JZ9pClCE28p
eEzj0Pvadbo4U+jl3q2rVRJ9DFxTbmYKJ9e8rpKVBvQ+WZBTgmWh582lYAaW/xxJ
2IZvbVV4WTAREQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 19:51:02 2025 by rpki-client