Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: 5e3sRHYcygLDCZW3jzWPJbF3BiIR4VCBsEA6brqBWYU=
Subject key identifier: DE:57:72:57:61:B4:DF:A9:A5:BC:45:30:88:1D:00:67:B9:DD:E2:F2
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 0199FB7CF25E2951230638E786C42AFC29A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 08F5
Signing time: Sun 19 Oct 2025 08:01:33 +0000
Manifest this update: Sun 19 Oct 2025 08:01:33 +0000
Manifest next update: Mon 20 Oct 2025 08:01:33 +0000
Files and hashes: 1: GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa (hash: Twu1XyErZ1bzBOtE8/HK3XbggJvMpOYaRXT376BODWE=)
2: XUIGCJfhGsoP5FdVAQmT9lUNYuc.roa (hash: hjmwDLHRKf4c787nov0R6bRVLxtqmM1uwueYf+NK6fU=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: xgHOZAB4QTaWDJ4GGHAKszEYryv0LiXgxyqgBlZCF5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f2:5e:29:51:23:06:38:e7:86:c4:2a:fc:29:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Oct 19 08:01:33 2025 GMT
Not After : Oct 20 08:01:33 2025 GMT
Subject: CN=de57725761b4dfa9a5bc4530881d0067b9dde2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:20:98:e0:f8:6a:20:1f:eb:35:51:06:db:
c3:fb:09:b2:dc:ea:24:0a:53:13:1c:3f:a1:3d:03:
bd:e5:a1:90:e9:c0:d6:11:11:8d:d1:ea:46:3b:86:
6a:d1:8c:86:b6:ec:c9:f4:5a:69:55:73:dd:1f:0e:
48:f9:c9:cb:56:73:03:70:0f:62:e9:69:ae:2f:a6:
d5:73:0f:c5:f4:9d:2f:78:0c:f3:8a:0a:6d:b4:43:
a9:95:d6:cc:ce:b5:60:24:ee:2a:d4:4f:19:af:c4:
81:d9:10:db:5e:24:f4:e8:51:f4:ac:74:6a:a5:7c:
7c:21:b4:5e:a0:12:96:0c:de:4b:e5:61:b2:28:30:
d1:30:7e:09:74:eb:2b:bf:96:a2:cd:7a:8e:ae:0e:
8e:c1:d5:b1:3d:79:78:27:56:f0:5c:18:49:56:8e:
c3:74:35:a0:53:09:21:26:e9:ed:81:09:0f:9d:1d:
24:94:7f:32:02:04:75:ba:a0:a9:a6:56:7b:32:74:
00:59:f3:aa:f0:70:fd:9a:ad:36:af:16:3f:12:b0:
02:ad:a8:90:d1:53:1e:f6:52:b1:55:68:dd:98:b4:
05:91:a8:12:46:04:9f:49:80:d7:4c:fa:a7:6a:b4:
b6:d3:03:cf:da:d0:90:68:58:20:1f:b9:e9:26:b0:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:57:72:57:61:B4:DF:A9:A5:BC:45:30:88:1D:00:67:B9:DD:E2:F2
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bb:24:01:83:5a:47:8e:c4:64:8a:72:1c:13:3b:fb:d8:b1:
91:44:fe:4f:e7:db:06:9e:29:a5:10:19:7d:28:62:23:88:46:
4e:3a:57:e1:c0:04:82:d1:76:ce:ef:2d:bb:a2:4a:bd:d8:3b:
bd:74:1b:95:f3:10:03:9c:22:3b:26:85:37:75:9c:cf:1e:51:
4c:bd:28:3a:18:c3:0f:dc:9c:35:57:72:36:0a:3a:54:2b:d1:
75:86:60:fd:e3:7d:c5:07:77:db:fd:e8:06:85:78:19:d5:4e:
71:79:b3:40:5c:33:68:cc:9c:87:d4:df:51:a7:1f:4f:96:cb:
11:36:7b:05:1b:6a:5e:b9:aa:39:07:d8:aa:17:bd:be:af:20:
64:01:9a:70:8b:96:30:52:62:aa:b1:fc:86:1d:2b:3f:a9:2a:
7c:d9:05:6a:1c:1f:11:54:36:a4:03:f8:08:4b:62:a0:0a:c2:
50:ef:47:6a:ec:94:f3:c0:f9:8e:9c:e7:ca:a9:fc:ef:a7:f5:
96:34:c7:b9:4a:4d:9e:cb:c2:45:fe:f3:da:f7:43:4b:37:d6:
75:16:72:02:62:34:b5:83:65:3e:47:42:45:54:17:70:0d:ab:
ab:57:32:bf:fa:df:2e:df:48:84:6f:89:5f:44:3c:fa:13:83:
e6:33:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:48 2025 by rpki-client