
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
File: hcAE7tTPscJ2cTgiL_wJUooqXIY.mft (raw, json)
Hash identifier: J3CfdAvHidomBIQN282Km87sKYEWG/plgfnp9zU4u/U=
Subject key identifier: 8A:A8:CD:9D:56:B4:1B:06:42:B1:CC:E0:AC:49:21:4D:9A:E6:1D:69
Authority key identifier: 85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
Certificate issuer: /CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Certificate serial: 0199FE7DEA173DB4248DD7D292E3B020BE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
Manifest number: A0
Signing time: Sun 19 Oct 2025 22:01:28 +0000
Manifest this update: Sun 19 Oct 2025 22:01:28 +0000
Manifest next update: Mon 20 Oct 2025 22:01:28 +0000
Files and hashes: 1: 7TL45FNYtrXr6cYEMzlJ0xM19tA.roa (hash: AkAdvmK+KKLZ/hW3c+GoX6JUBJ/Tn/r+Hpuz7kRNXhI=)
2: hcAE7tTPscJ2cTgiL_wJUooqXIY.crl (hash: 118g8nxbqc2EyDTsLLG0viZtJ21ne/p6emEe88mk+C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:ea:17:3d:b4:24:8d:d7:d2:92:e3:b0:20:be:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Validity
Not Before: Oct 19 22:01:28 2025 GMT
Not After : Oct 20 22:01:28 2025 GMT
Subject: CN=8aa8cd9d56b41b0642b1cce0ac49214d9ae61d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:2d:57:8c:0d:cb:8b:4e:2b:3f:80:34:30:
da:b1:e5:49:60:9b:14:2a:11:97:01:6f:1b:8c:87:
67:92:32:3f:cd:1a:0a:3c:60:43:14:e8:18:de:27:
6d:0f:14:5b:32:6a:79:84:30:36:dc:d9:cd:94:49:
79:72:c7:f8:89:56:04:8e:cb:57:bc:2b:be:4c:02:
9e:59:dd:62:05:b1:23:cb:4d:ff:0e:99:c6:b4:a1:
d8:8a:ca:27:2e:93:e3:e6:2f:28:06:02:42:69:b9:
b4:d3:11:8a:07:fe:0f:5f:aa:f2:c4:99:8e:49:98:
68:34:c0:55:4f:af:14:e0:57:a5:06:94:2d:cb:b2:
5a:f9:c0:8e:51:b6:ff:84:59:64:ef:82:8f:ad:aa:
b8:1e:57:c0:63:ff:89:c3:f8:2f:07:d6:49:c7:98:
27:fe:df:e6:28:e3:0f:89:7a:74:5d:2b:d2:90:bd:
ff:98:93:5b:1f:45:90:bf:1e:c1:8c:d8:96:bc:07:
ef:06:25:ca:9a:e3:1a:fe:e2:87:2a:68:a0:75:7f:
e4:0e:3d:d8:fb:4f:bb:b0:79:b0:11:f4:be:3d:be:
44:7e:a6:b8:75:d0:56:2a:86:88:01:89:36:b5:3b:
36:9d:06:07:7f:1f:17:60:7f:dd:f2:cf:4f:9b:21:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A8:CD:9D:56:B4:1B:06:42:B1:CC:E0:AC:49:21:4D:9A:E6:1D:69
X509v3 Authority Key Identifier:
keyid:85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:aa:79:2b:e9:f5:11:56:2e:b6:37:e9:cd:26:b9:39:0a:df:
bb:02:f1:00:27:a9:d9:4f:9b:1b:94:e7:23:97:86:fb:68:12:
2c:c1:94:dc:f0:44:d7:7b:de:d4:6c:ea:78:ec:5f:c1:12:a1:
29:f9:60:af:ef:43:b9:8d:17:62:63:bc:c1:8f:ba:2a:1a:49:
73:b7:02:c8:a3:56:0d:d6:19:36:e9:a6:cd:50:6c:88:a0:7e:
1e:50:77:3a:61:a7:56:18:d3:cd:b9:97:1a:3b:1d:1c:e7:e6:
69:5e:1f:27:fd:ef:f5:f3:d5:de:f5:cb:e0:9d:e7:cf:f9:cf:
c7:04:a5:b3:26:a8:20:a5:b7:02:5c:dc:8e:49:cf:b9:bb:89:
da:9a:f1:7c:91:9e:83:60:f0:13:0b:e1:e8:f4:95:48:b5:54:
94:41:7d:cc:82:d0:38:d2:40:63:a2:86:cc:06:7d:ea:2d:a9:
94:f2:33:ef:da:4b:da:34:17:f1:3a:73:30:51:48:aa:ab:8e:
af:fe:42:b7:ed:ff:70:e1:34:b9:cd:a4:47:8c:3e:02:78:df:
4a:55:49:76:82:17:18:91:68:35:ce:43:bb:03:6b:59:31:ab:
7e:14:81:d8:53:ed:7e:86:57:0c:a2:30:17:db:e2:26:20:c7:
1b:6b:00:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:20 2025 by rpki-client