Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
File: hVBZemBkyIKuKvP6V1nxP4vR3fw.mft (raw, json)
Hash identifier: oHyIQ4fLiCqdHYLtYuxHrny+Bi0nN0ZO+YJZf05a0nc=
Subject key identifier: A3:62:10:05:C0:C7:24:C8:B3:E3:87:49:2A:65:4A:7E:4C:42:39:94
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial: 019A1E08551FD5CE42DE6A1C1069AE31E60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
Manifest number: 1128
Signing time: Sun 26 Oct 2025 01:00:53 +0000
Manifest this update: Sun 26 Oct 2025 01:00:53 +0000
Manifest next update: Mon 27 Oct 2025 01:00:53 +0000
Files and hashes: 1: Nnh8TxyMB33fgGngdO7IhueAOsU.roa (hash: R28y5tSNBK4A6wEp0RdvkAdrsGgoMExqmSzBUnD9C9E=)
2: hVBZemBkyIKuKvP6V1nxP4vR3fw.crl (hash: pR5441kyQimR0RlCQmfSuInF70MHKmjfIOsNgUV6CL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:08:55:1f:d5:ce:42:de:6a:1c:10:69:ae:31:e6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Validity
Not Before: Oct 26 01:00:53 2025 GMT
Not After : Oct 27 01:00:53 2025 GMT
Subject: CN=a3621005c0c724c8b3e387492a654a7e4c423994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:73:7c:94:39:57:79:c9:9f:8b:58:5a:12:
d1:ae:6f:6b:b9:6d:e8:18:19:fb:41:01:12:b5:77:
ce:e0:de:d9:f5:fc:8b:d3:18:87:9d:36:9d:61:63:
19:d2:89:01:7c:85:69:a9:0f:e1:59:ea:9f:32:90:
83:fa:df:31:de:fa:87:49:57:29:e7:1b:ee:a0:b7:
8a:f2:d0:2d:ce:73:b2:d2:38:ef:48:22:e7:e5:f8:
bd:f7:6f:42:c7:7f:c9:08:a5:f8:2c:72:8c:25:49:
29:da:d8:67:16:97:76:bf:f8:04:19:73:5b:14:98:
05:ad:1d:42:74:0b:ed:83:ef:85:1a:3e:06:f6:bb:
3d:63:4c:cd:dc:28:f7:b9:10:84:d0:22:1c:8f:3d:
73:b6:20:d4:5b:b2:8d:af:51:3a:e4:d6:65:56:bc:
25:ac:df:3e:57:43:78:1c:c7:45:f4:29:42:5c:3d:
75:ab:d4:29:ad:1c:3d:76:88:62:55:de:1d:f6:f4:
bf:b7:35:b0:6a:81:bf:3d:51:2c:2b:50:4b:b4:a8:
9e:52:b0:c0:06:97:f6:b2:5a:96:f4:12:4e:64:df:
63:07:a2:6a:b5:38:a5:15:5a:e2:bb:01:99:72:fb:
38:3e:d3:c4:3e:1d:59:5a:f2:2b:b0:b5:e2:8a:7d:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:62:10:05:C0:C7:24:C8:B3:E3:87:49:2A:65:4A:7E:4C:42:39:94
X509v3 Authority Key Identifier:
keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f2:46:10:67:c1:7b:95:2f:b4:d6:86:8a:04:1f:4c:7a:4e:
56:fd:25:64:8f:68:70:3a:1e:cc:cc:34:2b:1b:dd:7a:f4:6f:
e6:50:bd:09:f8:db:10:36:06:24:0d:b3:19:6c:d4:f0:ea:9d:
7e:96:bc:d6:39:5b:b7:af:0b:d8:15:ab:66:d7:92:cc:fd:37:
65:a0:f0:46:9c:c2:66:95:bb:de:0a:7f:0b:ed:cb:34:4b:0f:
ab:8e:44:ab:b5:e3:b0:6c:ad:4b:64:27:ba:f0:57:41:1a:26:
8e:14:69:f7:b5:6f:66:57:e0:72:f7:b3:08:ed:95:d5:4f:ea:
fc:1d:3c:e0:a3:95:34:03:c5:e7:bf:b2:fc:87:62:93:6d:0d:
ad:b6:3d:9b:6d:a2:1b:be:3f:11:cc:b1:5c:46:fa:74:81:ab:
c2:17:c6:4e:cf:a7:6b:30:b6:68:4e:2c:8e:66:82:50:0b:ab:
85:6d:70:62:65:04:e4:57:9f:0e:cc:db:00:ae:76:1b:14:b2:
76:24:29:73:b9:65:93:1e:e0:7f:45:76:da:17:3e:ba:fc:ca:
e8:71:9c:6b:d7:56:24:b2:26:52:dd:03:d4:66:70:43:cf:af:
d9:a5:e4:7c:b8:17:49:ae:34:a8:bb:14:a0:2f:54:77:18:d4:
95:5e:aa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:16:40 2025 by rpki-client