Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
File: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json)
Hash identifier: 2wDtxe4IYDiUIJCSDLCH4Sr7BqoxkOrN/a96Y9sqof4=
Subject key identifier: 3C:24:06:6E:DA:AF:03:2D:DF:A5:D5:18:E2:E2:1C:BF:7E:C8:0E:A7
Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Certificate serial: 0199FD34107BCC3859C64C8ABCA2F3E8971C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
Manifest number: 0FB6
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: E2R/pCAISLiOGOF9WW6hp8bFFW0KXAXo24eaKGNM0wI=)
2: zzXnyaTo4BATrc17RusBD7eE0wM.roa (hash: 6905vDk9E6YCZ2ECcGKQ29E/7xlB0Pspqzs3gX2rnWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:10:7b:cc:38:59:c6:4c:8a:bc:a2:f3:e8:97:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=3c24066edaaf032ddfa5d518e2e21cbf7ec80ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:1d:08:7a:c2:fe:86:02:d1:96:19:b3:86:
14:f0:b4:52:e2:dc:db:5a:12:9e:8f:c2:60:c3:4f:
cf:14:00:0f:cd:5d:33:d9:98:7b:1a:39:f8:d8:70:
74:07:ed:48:a0:9e:c3:65:fd:7b:db:e0:80:d1:6b:
28:07:0d:88:cc:97:07:da:6c:a8:5a:93:5f:ea:2d:
e7:85:ce:be:fb:14:d6:40:88:76:d7:69:fb:79:e0:
04:80:5d:88:77:63:ab:12:fb:9b:1b:88:45:83:f2:
70:a5:58:9d:ba:d7:00:da:77:21:1c:b9:56:ec:6c:
71:bd:85:93:9c:74:fe:22:94:7c:b6:c1:82:e6:79:
20:0b:f4:3d:90:27:4d:f1:b3:b1:be:96:7c:2a:e2:
5b:c6:9e:79:8f:12:8a:45:00:e8:80:7b:b2:b4:39:
6c:17:ff:d0:23:e2:e5:99:08:73:98:a0:b1:c5:54:
f1:9d:c4:a7:ef:be:1f:40:da:32:29:23:f7:9e:62:
9c:45:3e:c7:77:06:7e:7f:b9:6e:2c:d3:13:04:b9:
f6:63:ad:56:b2:bf:0b:71:21:6c:e7:87:d1:04:80:
f7:a9:72:70:37:a8:ab:9d:34:30:4a:f6:83:1d:53:
43:ee:59:8d:70:d9:3f:ce:57:f5:eb:0e:0e:0a:cf:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:24:06:6E:DA:AF:03:2D:DF:A5:D5:18:E2:E2:1C:BF:7E:C8:0E:A7
X509v3 Authority Key Identifier:
keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0e:7e:55:fc:62:44:c0:f2:c3:f0:e8:90:12:2f:90:e9:d9:
e3:f7:48:88:07:4c:08:e4:0d:c5:ca:2e:bf:87:01:70:65:18:
cc:35:4d:7b:49:28:eb:12:74:b1:ae:93:b8:0b:c3:5f:05:da:
ff:cb:75:bc:7a:da:00:1a:c6:f4:cf:e1:e4:e9:15:8a:25:2a:
31:6b:a3:f1:e6:ad:60:c2:85:85:a3:4e:df:f2:e2:82:06:fc:
ca:db:02:e6:76:50:62:1a:f1:7e:9e:69:b4:1c:3d:c3:25:1e:
0a:3e:e4:45:fc:21:c9:6e:62:82:b7:a5:d4:7c:76:d6:cd:46:
cb:29:32:7c:8d:93:78:2c:0c:10:34:03:8a:a8:56:cf:a9:77:
2c:70:a6:ee:2b:9a:ff:7c:1d:2b:0a:9a:50:bd:8b:35:90:4e:
d5:37:c3:a9:c6:de:b8:18:2a:7a:0e:75:4b:78:59:b5:12:b1:
7c:ca:2d:0d:7d:5d:0c:d5:6e:02:10:33:0d:a4:00:9a:82:00:
13:b5:71:4e:57:21:be:83:4c:f4:51:60:8e:0f:58:da:03:32:
50:95:5e:ea:5c:16:d8:a6:d8:2a:69:af:e3:7f:4a:7f:f9:1f:
32:f4:a4:db:b6:2c:4b:83:4b:9e:73:76:32:4e:f0:98:f5:e9:
03:77:21:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:50 2025 by rpki-client