Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: RHj8KmbJ4uvIaYbrN+g2g0BfD8jTrsf+miCKTXwKMbQ=
Subject key identifier: FE:0D:32:06:B2:F1:2C:09:9E:86:55:65:86:8D:F1:05:E7:7C:80:79
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 0199FC58425AD4CE318B4230559924DFF3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 12:01:06 +0000
Manifest this update: Sun 19 Oct 2025 12:01:06 +0000
Manifest next update: Mon 20 Oct 2025 12:01:06 +0000
Files and hashes: 1: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (hash: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=)
2: UNDXrDbQNDGfw9Atw8J1Rhg9324.roa (hash: wsuYDSHLl9ueT9Z/8hPQn0p6GzwP0XVwWj6eE/OeB10=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: TGoXmOZKQTtcdn1VjONOEQrlEQw53/z+rdAZnK0mYW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:42:5a:d4:ce:31:8b:42:30:55:99:24:df:f3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Oct 19 12:01:06 2025 GMT
Not After : Oct 20 12:01:06 2025 GMT
Subject: CN=fe0d3206b2f12c099e865565868df105e77c8079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:46:53:f5:c8:02:e0:3b:f4:b9:14:f6:16:
33:ac:82:99:89:4a:c6:3b:fd:30:3f:56:25:1c:f7:
70:5d:3b:c4:a7:06:b0:c8:2f:67:8f:59:8a:d3:e4:
ec:18:30:aa:2d:51:71:5d:d9:78:1f:ec:02:cc:a3:
88:33:19:74:86:3a:68:c4:1a:fa:c5:dc:eb:75:90:
df:94:c9:f9:11:10:a1:64:60:98:78:b0:56:25:b2:
79:62:8e:be:9d:ac:c2:63:e7:e7:f3:5d:37:2c:6d:
e9:18:99:6f:13:5e:99:7a:79:30:6e:79:83:e5:cc:
d9:71:32:71:47:e2:21:52:a5:80:43:60:bc:95:3d:
c6:d2:d9:05:0d:59:87:08:16:74:62:50:b5:dd:b3:
da:b5:4d:59:0b:49:72:5a:15:3d:df:e3:b7:84:2e:
f1:89:9b:59:5f:83:86:2e:11:b6:a9:e2:2c:ca:a3:
08:1f:b7:0c:80:20:d7:ea:fd:4b:cd:b5:91:c2:e1:
64:9f:d7:2a:96:a6:98:1b:a0:2a:e5:50:86:8d:7f:
a1:75:e8:da:15:b6:38:06:83:8c:87:ea:98:58:3f:
3d:3a:62:45:0e:00:21:1e:99:03:82:b0:e4:12:98:
9f:5b:80:df:66:ad:ce:33:85:da:fa:d0:6f:1f:91:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0D:32:06:B2:F1:2C:09:9E:86:55:65:86:8D:F1:05:E7:7C:80:79
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1e:26:8c:d4:1a:84:79:5f:47:fe:da:c8:6b:80:3f:06:af:
30:7f:57:9a:41:ef:d7:e1:86:f7:93:ab:70:35:7b:0c:c6:c3:
d2:32:ec:26:87:93:f7:cf:c1:e5:12:6c:96:23:65:23:93:65:
9d:97:55:db:8d:2d:09:ae:b8:a3:01:e7:3a:47:f5:3e:01:64:
84:a8:96:1e:c3:3d:f9:bd:07:03:15:96:09:9a:b9:95:4e:a7:
b3:36:1b:f0:15:16:7d:96:46:12:23:11:a9:34:0e:07:d8:96:
26:26:e8:41:cb:3c:4e:e8:59:94:be:94:b5:9c:56:e1:94:95:
e4:3b:30:fb:97:f7:94:3e:4f:bc:78:d5:36:5c:19:aa:aa:ef:
fd:6d:c1:70:22:00:b9:d2:e3:43:e9:20:b6:33:b1:b9:f8:5a:
46:5e:66:07:47:e6:08:6a:9f:6d:b5:e2:b1:18:e5:b0:c8:f8:
3e:4e:e6:01:8b:49:d5:56:47:65:04:af:d8:fe:e1:28:c4:e1:
46:1b:fa:6f:65:53:8f:b4:a5:2f:51:62:0f:d9:6c:1d:50:1f:
0c:b5:59:93:66:3d:66:c0:f1:09:87:c7:14:e7:e7:24:03:1a:
f0:ad:6f:e6:72:1e:96:4b:79:55:c1:24:9a:48:d6:44:2e:78:
b9:3e:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:41 2025 by rpki-client