Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File: hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier: DIdgaNgsW/UkPn1yJehRbfjVRnjH+P4QLdlbcyRGMcQ=
Subject key identifier: A2:9C:A2:46:63:CB:63:19:4F:B7:DF:61:61:DE:C8:0F:5B:89:C9:79
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer: /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial: 0199FD6B5670CA0FB0793D68CC6C312D6B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number: 0890
Signing time: Sun 19 Oct 2025 17:01:34 +0000
Manifest this update: Sun 19 Oct 2025 17:01:34 +0000
Manifest next update: Mon 20 Oct 2025 17:01:34 +0000
Files and hashes: 1: Wz8gpxFEqCzA2qAsOF9aMTaoyYY.roa (hash: 8Yp0I8zuDn5gEhy8EguTTzeHbg2UtzMf6sSJEuTPZH4=)
2: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: aT1MSGb2X++NBPH6PFwVW9wbFyZaNAz9ZUyMfX7qB1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:56:70:ca:0f:b0:79:3d:68:cc:6c:31:2d:6b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
Validity
Not Before: Oct 19 17:01:34 2025 GMT
Not After : Oct 20 17:01:34 2025 GMT
Subject: CN=a29ca24663cb63194fb7df6161dec80f5b89c979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:46:73:6b:70:19:68:6f:71:99:36:c5:fa:
60:9b:4f:1a:f9:96:86:ff:8f:fd:8a:99:7b:16:83:
9f:77:2a:f3:0b:0f:b4:07:b9:83:59:54:83:44:cb:
7f:02:3f:2c:6a:8e:57:b9:49:2d:d7:fa:12:66:27:
c0:95:49:39:aa:40:4a:f0:8e:2b:d1:21:c7:60:1e:
1a:22:19:fd:1c:9f:ec:e4:64:cf:50:32:c7:1d:27:
29:60:62:28:c0:a2:8d:18:c0:0a:0b:b9:36:91:74:
b1:88:d9:f2:42:ef:1f:a0:7c:8c:01:17:e9:68:82:
fd:5b:34:b9:4a:5a:7f:ef:f0:06:69:e8:41:77:47:
92:ea:86:9b:f4:7d:b2:f4:29:79:d2:15:a4:a2:08:
11:7d:74:cb:21:47:c5:3f:27:84:ba:98:12:36:67:
d6:a6:74:f5:e2:4a:4c:8f:5b:7a:f6:85:ae:1d:be:
3f:2e:66:03:6e:93:8a:63:89:a9:6b:1b:71:c0:10:
16:78:46:25:e9:3c:0f:e7:88:5c:11:23:f5:86:1a:
c4:5c:be:57:e4:73:b4:b5:db:3c:df:82:6b:b9:e3:
de:0d:0b:7c:9b:03:5f:24:f3:02:4b:9a:63:cc:b0:
10:e5:46:fc:07:eb:7b:03:e3:da:07:49:ac:4a:3a:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9C:A2:46:63:CB:63:19:4F:B7:DF:61:61:DE:C8:0F:5B:89:C9:79
X509v3 Authority Key Identifier:
keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e3:6f:9b:47:64:95:2e:73:b6:31:37:54:f8:38:c4:84:83:
f6:4d:f4:15:b6:b1:30:f4:81:5d:33:64:1b:15:49:0a:af:cb:
01:8e:0c:cf:00:ef:e5:1a:07:ae:97:7c:84:be:11:06:18:b3:
5b:69:c0:78:4f:dd:24:1c:01:a5:3b:1d:50:e8:95:f9:39:47:
1b:bc:99:47:7f:09:49:58:6d:ad:a2:5c:ba:3f:03:cd:b7:76:
b0:4a:aa:5f:c0:b2:af:34:06:f9:d0:c5:1d:d8:96:e5:02:1f:
42:6b:b4:d0:56:b7:01:5e:b1:f9:6d:ed:64:52:0a:aa:4b:cb:
c9:e7:ce:eb:e7:fe:90:42:e2:21:02:aa:d8:d5:e2:84:ed:e9:
be:4f:d3:d5:cf:ac:4d:2b:27:f5:9e:b1:10:be:e6:ea:39:9c:
7b:64:44:b0:92:cb:cc:0b:b8:25:b4:5a:16:55:d2:14:d5:68:
d1:cf:ac:bf:a3:f3:33:42:4d:8f:4f:94:6e:56:73:17:b9:af:
af:07:00:12:91:04:12:61:1d:65:ed:ab:fc:23:0e:6e:71:be:
3b:d6:28:b5:8e:e4:0e:82:65:55:aa:f6:cb:ca:9c:6a:93:08:
59:79:1d:99:a1:17:ae:af:47:2b:fe:93:2a:b8:b3:92:5a:e6:
ad:f1:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:54 2025 by rpki-client