Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier: n2LxNoKxoDABGEaod017PJEGGI/Y9IfLBZfLjv54cBs=
Subject key identifier: 99:E5:DC:B0:CC:B2:C4:04:31:D0:34:56:1F:FC:C6:1F:AC:A5:2F:AC
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 0199FBEAD479151F8114CF69BAA0552E63BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number: 0CB0
Signing time: Sun 19 Oct 2025 10:01:34 +0000
Manifest this update: Sun 19 Oct 2025 10:01:34 +0000
Manifest next update: Mon 20 Oct 2025 10:01:34 +0000
Files and hashes: 1: 4UJRIsMgzbbOOl_nMZ8awomMSD8.roa (hash: HA5+hPhaR5I2iP9TQnrkM1KP48JQR4MNJZDQicrXCa8=)
2: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: 6k0qngxifNgTkAJm556hWLbyGdIyR+J47VKoqUd/RVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d4:79:15:1f:81:14:cf:69:ba:a0:55:2e:63:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Oct 19 10:01:34 2025 GMT
Not After : Oct 20 10:01:34 2025 GMT
Subject: CN=99e5dcb0ccb2c40431d034561ffcc61faca52fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:7b:da:c2:eb:e8:99:8e:ec:2b:a6:8f:e7:
ca:8b:97:1a:c2:6c:67:6a:d1:d2:e7:cf:16:b7:d3:
82:3d:43:bc:a9:ee:f1:1b:d4:04:16:3c:74:20:d3:
bf:7c:b2:de:b9:05:3b:eb:9e:60:0f:52:3e:b0:0e:
de:99:a2:f8:f6:cb:1f:76:ed:67:8b:ed:7e:61:17:
9e:1f:65:bd:af:10:a9:bc:f1:71:6f:ff:2c:f4:d0:
ff:94:f6:2e:e5:8d:d3:3f:4a:29:b5:a1:a6:9a:8e:
3f:09:e5:cc:48:d5:2c:de:49:3e:e4:c6:ff:25:4d:
bc:3a:03:a8:07:95:10:e7:10:cc:d3:fd:9b:38:05:
89:c9:9b:bf:12:41:e6:38:a2:e5:b6:c4:de:cc:26:
90:be:ce:30:3b:55:d4:fe:f5:51:7c:ef:81:d1:4c:
4f:eb:31:f6:f1:d9:28:ce:41:15:d8:cd:21:01:c3:
b1:30:c0:65:11:25:ab:cd:20:92:bc:b1:b3:10:77:
8e:2b:db:1d:74:4d:41:79:b2:ff:6c:6b:74:a9:ee:
3e:bc:1a:f4:49:1b:72:be:62:da:0a:b7:cf:90:7b:
d4:0f:a7:ea:f8:74:29:07:09:86:ef:76:be:2a:ad:
c5:3f:6c:ad:9a:07:cc:97:fb:9e:5d:ea:99:ce:ca:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E5:DC:B0:CC:B2:C4:04:31:D0:34:56:1F:FC:C6:1F:AC:A5:2F:AC
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b1:56:88:af:d9:57:b2:63:01:1f:39:e2:10:8c:53:5e:44:
54:e4:28:96:c9:f8:c9:e2:ae:bd:de:05:56:6f:94:57:a0:f4:
b1:c1:02:55:18:86:d0:bf:23:90:cd:89:e2:68:0d:de:92:ff:
4e:b0:ce:2c:ea:a9:04:4f:19:5d:54:15:09:bd:a7:d2:0d:3a:
db:77:3f:ac:c3:92:e3:e7:7d:57:a9:b3:d5:bf:ef:6e:3b:37:
aa:eb:0a:f9:1c:c1:03:6e:c2:1c:74:5d:12:5b:eb:41:d9:50:
16:87:61:e7:6d:00:98:cb:db:86:72:36:2b:4f:76:0b:6e:82:
6e:6a:57:01:cf:82:b4:7f:28:9a:61:b3:7d:a3:75:96:68:6d:
e3:cd:b1:24:2d:5b:25:b8:4a:77:c0:c1:ef:97:a2:18:81:69:
66:7a:92:4f:f4:64:c3:04:c1:15:2f:f2:a5:a5:b4:ee:cc:1a:
79:d6:91:0f:c3:2b:96:08:20:68:98:07:f3:4b:1f:7c:6b:b3:
a7:fa:cd:9b:2e:e4:1d:ff:5b:2d:c1:07:e1:4a:0e:55:04:34:
8c:60:5a:ec:92:ca:b6:15:cd:ec:74:ab:66:8e:67:d6:59:87:
0d:50:ab:40:37:d2:ea:58:9b:cf:d5:f5:91:ac:01:bd:72:1e:
93:64:29:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:22 2025 by rpki-client