Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
File: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft (raw, json)
Hash identifier: vBh83QfFwCERLoBCxR/K3FRBhLxAcOLCr8yfNdzQ0MI=
Subject key identifier: 9D:26:25:1E:C6:C9:AA:FF:AA:EA:0D:59:55:B5:80:9D:8B:18:B8:10
Authority key identifier: 87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
Certificate issuer: /CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Certificate serial: 0199FAA0C55546899B6FF8056C96C19FCFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
Manifest number: 10C7
Signing time: Sun 19 Oct 2025 04:01:04 +0000
Manifest this update: Sun 19 Oct 2025 04:01:04 +0000
Manifest next update: Mon 20 Oct 2025 04:01:04 +0000
Files and hashes: 1: 86_3LCbOcCp3yM191EWRi4FTvKM.roa (hash: T6YVBcckx9oAAL2sgQLtUYTYtIf9ZyYKJMrHcxK/x/E=)
2: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl (hash: PjWR1fTVYUaiAYWJgT60HLoAs6z7n25nBvrlcooSQyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:c5:55:46:89:9b:6f:f8:05:6c:96:c1:9f:cf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Validity
Not Before: Oct 19 04:01:04 2025 GMT
Not After : Oct 20 04:01:04 2025 GMT
Subject: CN=9d26251ec6c9aaffaaea0d5955b5809d8b18b810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:63:ea:d9:44:73:59:dc:93:cd:8d:2e:f7:
ef:f9:be:26:a7:cb:35:79:9c:4b:4e:5b:bf:73:7f:
e2:2f:19:8b:8d:ea:bf:de:38:21:fb:6e:08:01:b3:
18:5b:7d:88:ac:2b:6f:19:bb:7b:30:18:24:f2:08:
b6:fe:7c:9a:5b:77:f2:d1:0e:69:96:f5:b2:47:8f:
84:78:c8:45:d8:c3:4b:cb:23:29:27:91:51:bf:28:
4b:8f:30:46:0d:c2:1a:d3:a3:09:45:49:15:83:0e:
a1:e0:53:71:00:31:3d:89:87:59:6c:58:95:b6:a0:
ef:a0:d9:4a:e7:ef:06:fd:0a:4a:e7:60:d1:5a:46:
0d:22:2f:d6:c2:59:76:cf:bf:d2:52:e2:ef:4f:63:
ef:1b:67:c7:a6:17:1d:a4:c1:58:15:ac:4f:27:5d:
29:f4:bc:7e:eb:c4:26:cb:9d:a7:5a:ed:5e:59:a5:
76:2a:6c:fb:25:29:0d:7e:41:7c:66:a4:64:27:f9:
07:5c:6c:e9:1b:10:49:42:57:0d:d2:c1:89:2b:50:
59:9a:85:b8:02:b9:65:1d:f0:ff:a7:27:50:d9:e1:
9f:93:2a:f4:9e:99:33:58:c3:4d:4f:f8:bb:77:38:
98:05:27:f7:47:09:73:b3:aa:c9:f5:98:35:a6:66:
cc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:26:25:1E:C6:C9:AA:FF:AA:EA:0D:59:55:B5:80:9D:8B:18:B8:10
X509v3 Authority Key Identifier:
keyid:87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:95:cb:f0:0b:04:44:f3:27:48:82:51:53:05:b7:6f:bd:29:
36:ee:39:44:48:10:ef:3a:9f:50:5f:41:48:ad:b4:a1:96:76:
69:92:3f:b2:8b:44:38:d1:e4:c6:7f:55:60:a7:7d:d2:56:ca:
e9:0d:90:2e:a2:23:a5:92:ae:65:1b:8f:d1:b6:52:fb:8e:26:
53:d8:e1:17:8f:da:3a:17:23:f1:27:57:64:60:23:4b:ac:57:
df:2b:23:38:f5:50:b0:df:ae:0b:f3:ed:dc:05:00:be:10:e7:
92:eb:35:4c:33:37:aa:51:23:47:84:47:fe:37:a2:2f:bc:90:
73:e7:28:a8:40:58:e1:1a:df:14:4d:ce:e4:ed:9b:95:de:22:
1f:17:24:08:94:9a:48:ac:80:fd:b1:da:16:23:a0:5c:b7:bb:
06:f9:9e:d2:c1:0d:f3:fd:55:7a:e7:89:36:df:c3:49:cf:82:
bf:d3:ed:83:44:5b:ef:12:23:43:29:f9:a8:5f:26:63:97:04:
21:0d:6c:3c:1a:d7:69:dd:9b:6e:e5:14:ae:93:b7:a3:12:eb:
b8:e5:b5:3c:60:a8:ca:69:f6:2f:9f:5a:a9:83:e0:50:96:49:
10:eb:71:b3:64:2f:47:54:16:50:63:54:13:9b:9f:d3:dd:4c:
00:0e:5f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:11 2025 by rpki-client