Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
File: hpNlUyawRyyGbFyZMC4rLXjL3fc.mft (raw, json)
Hash identifier: b/6ofi2dpYIW2QtRNM4KpBFrOBG9O6tGCiKSqmajnVM=
Subject key identifier: F5:0F:97:37:4B:B3:E5:E1:42:6D:78:A5:E5:DF:F0:18:44:61:55:BB
Authority key identifier: 86:93:65:53:26:B0:47:2C:86:6C:5C:99:30:2E:2B:2D:78:CB:DD:F7
Certificate issuer: /CN=8693655326b0472c866c5c99302e2b2d78cbddf7
Certificate serial: 0199FD6AF849CE3EDEDD3CAB469AD79D3C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
Manifest number: 0FBA
Signing time: Sun 19 Oct 2025 17:01:10 +0000
Manifest this update: Sun 19 Oct 2025 17:01:10 +0000
Manifest next update: Mon 20 Oct 2025 17:01:10 +0000
Files and hashes: 1: hpNlUyawRyyGbFyZMC4rLXjL3fc.crl (hash: SU+2Ht5wMaBEdrK/xrzRhOQL/iDHwQlhQ2d1yyNbnQQ=)
2: z8Qgne-FkfA3KYq3e01ob5TLZp0.roa (hash: 7fco4lzAt1GZtpXkjpIq4UVmOihkqjl0I1nfOSI77gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f8:49:ce:3e:de:dd:3c:ab:46:9a:d7:9d:3c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693655326b0472c866c5c99302e2b2d78cbddf7
Validity
Not Before: Oct 19 17:01:10 2025 GMT
Not After : Oct 20 17:01:10 2025 GMT
Subject: CN=f50f97374bb3e5e1426d78a5e5dff018446155bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3f:8d:69:33:2e:2a:0d:4b:61:f3:3d:7e:9c:
7d:15:0c:84:29:09:89:c9:cc:d2:63:9c:f1:9a:95:
81:15:1b:d7:ef:24:42:f7:5f:9b:94:52:d6:27:b9:
0e:be:99:73:43:36:73:e4:01:d8:0d:0b:2a:e0:ec:
b2:3a:bf:a7:cb:07:17:45:1c:f0:83:b8:02:80:af:
25:5f:30:8e:39:d2:14:f7:bd:43:b4:b0:be:e4:b5:
96:17:71:d2:c5:29:cd:57:b6:13:9a:3a:46:6a:79:
7a:d4:6d:9e:96:6e:96:cc:d9:a0:f1:f1:e0:51:bb:
08:56:ca:6d:c8:5b:6e:22:b1:14:ec:e0:35:b4:a6:
ef:c0:53:72:09:bd:61:d9:81:ee:fd:ff:dd:8e:bf:
48:85:e4:39:3d:9c:40:da:d7:7d:ae:80:aa:0d:11:
63:bc:96:83:88:3a:d4:aa:39:f6:25:6b:5b:a5:95:
e8:06:80:8d:a7:e6:cf:3e:88:51:b6:ae:a5:a6:c1:
9b:08:ba:45:64:07:82:9b:b1:f7:8b:6f:24:58:b3:
42:cd:24:95:4b:1e:5e:db:7b:2c:d1:ee:94:4c:0c:
53:c0:cb:25:3d:ef:93:8a:c7:f5:42:06:f2:68:51:
48:ec:ff:7e:1c:0b:01:1b:8f:04:03:2f:16:5a:e5:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0F:97:37:4B:B3:E5:E1:42:6D:78:A5:E5:DF:F0:18:44:61:55:BB
X509v3 Authority Key Identifier:
keyid:86:93:65:53:26:B0:47:2C:86:6C:5C:99:30:2E:2B:2D:78:CB:DD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b8:25:93:c6:ca:af:24:33:2e:3c:06:62:38:8a:c4:8c:76:
4c:b8:1d:e5:e5:01:43:f6:b1:86:a8:4f:44:31:36:3e:7d:e9:
be:4b:e0:d4:58:1a:49:f6:11:d6:ba:ec:ad:73:8a:9a:53:4a:
fd:15:6b:43:c6:c6:aa:4f:8f:69:38:a5:88:cf:86:f1:71:2a:
1f:a6:e0:7c:6b:de:cd:78:32:97:ad:93:da:ff:0f:27:95:c8:
b5:b5:a4:d2:f1:14:b9:31:ea:15:ba:5d:b8:5b:a1:7c:be:67:
76:cf:c3:34:21:18:68:75:c6:e3:f5:58:34:bf:e7:ef:6c:f4:
1f:71:bf:79:2e:5a:5b:54:4d:ea:a1:5c:cf:36:d5:58:3d:e5:
f7:fa:4b:64:94:0e:f2:b5:4e:00:31:95:fb:1d:fb:d8:99:13:
21:ac:a4:07:b0:10:f0:61:61:2b:74:74:d7:8f:16:ea:82:e7:
1d:43:2e:87:28:8f:74:81:e6:bf:50:c4:25:03:d0:61:86:34:
86:bf:57:44:bb:da:5e:e5:ac:67:c5:18:eb:de:60:22:fc:01:
3c:fe:de:14:65:66:43:a2:fa:68:19:b3:b5:16:e1:7f:09:cb:
60:ae:87:64:69:56:db:bf:af:24:d5:0b:d0:67:60:f8:7c:0d:
58:5c:94:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:06 2025 by rpki-client