Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
File: hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft (raw, json)
Hash identifier: msDhH7dLB85Aldlq16en8cktt3HzbqpTvQ3nWLPK1zQ=
Subject key identifier: E2:61:EC:0C:A6:86:2D:1D:C7:E6:CF:C7:39:82:04:FC:83:77:B7:94
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial: 0199FEEBC1A62A2B41DB588F16CA3167C524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
Manifest number: 07AB
Signing time: Mon 20 Oct 2025 00:01:27 +0000
Manifest this update: Mon 20 Oct 2025 00:01:27 +0000
Manifest next update: Tue 21 Oct 2025 00:01:27 +0000
Files and hashes: 1: EKLQu7iYylRaZbkh51ntRdvQ1sc.roa (hash: RK+Kru3PnFxl9Ll91ljugGNNYfjxqJD6II7naH011aw=)
2: hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl (hash: TBMO9MOepnLJraLolB2wW2Le/gB9FneuTeqR+FzY7yg=)
3: lO9lnjMKShKR1lmHSBZdeXnPEkY.roa (hash: c7CjjG3dW9IskX6aNGKT3OeAaVeTmT4gSZizwrVUurs=)
4: maJ8CmpVji7iExXaEzUUxHgibH8.roa (hash: JObe+le+P4uoJGOeOZ+4H+wfXfvsZKVWkXVTp6TQq5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c1:a6:2a:2b:41:db:58:8f:16:ca:31:67:c5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Validity
Not Before: Oct 20 00:01:27 2025 GMT
Not After : Oct 21 00:01:27 2025 GMT
Subject: CN=e261ec0ca6862d1dc7e6cfc7398204fc8377b794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:51:37:a7:3b:a3:0c:a3:41:17:36:02:df:cc:
12:4e:38:9a:d2:81:67:09:c2:00:bf:54:93:de:cc:
76:aa:92:31:2c:00:a9:6c:c2:27:6f:fd:e2:48:17:
2d:ac:3a:f6:bf:2d:b5:6c:ed:f9:e2:7a:54:88:93:
d4:c4:25:9d:27:d7:e4:ff:22:e6:8d:a3:0b:f4:d9:
2e:53:48:a3:19:f1:2d:ef:f5:e8:b0:1d:3a:28:e8:
a3:9e:e7:25:4a:88:6d:19:2f:91:c2:63:97:88:38:
e8:a4:fc:15:e4:ac:6f:94:d4:b9:03:3d:75:4c:ac:
91:f6:9c:fd:c6:73:ea:f3:9b:db:e1:19:ee:56:74:
cf:55:64:ec:bb:54:c9:bd:28:85:0e:2c:1e:9a:bb:
ff:61:4a:20:af:d1:6a:13:f2:95:5c:b0:80:3f:7e:
70:e2:f3:4b:98:37:9d:78:9d:fb:27:d2:2e:e3:a5:
e1:f8:3e:de:2e:f5:34:1a:53:6a:b4:2a:16:7d:9f:
9d:19:8e:b7:55:46:b1:c4:94:b2:76:21:bd:56:d7:
a6:8f:d3:62:78:c3:db:7b:5d:74:ff:77:62:c5:d2:
fc:bc:ee:90:9a:cd:34:14:cf:55:88:45:fb:05:b1:
b8:37:17:38:fa:b1:83:7d:55:fd:99:eb:7a:33:75:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:61:EC:0C:A6:86:2D:1D:C7:E6:CF:C7:39:82:04:FC:83:77:B7:94
X509v3 Authority Key Identifier:
keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cd:34:c9:0d:e1:85:d4:f1:15:65:3f:72:ef:0b:3a:0e:07:
8b:99:25:d4:28:36:d3:50:5a:4a:28:72:9c:06:e4:67:4a:3a:
d1:00:42:80:4b:cc:dd:87:98:29:9b:f5:3d:e1:2e:cd:09:d3:
a9:44:8c:96:ac:57:63:fc:4f:2a:83:2d:83:46:42:ef:ad:2e:
43:f3:d7:d1:84:2f:6d:c4:e7:54:69:4c:17:eb:62:b0:95:2f:
56:7a:0a:16:d6:f2:b1:1c:f9:40:93:bd:1d:6e:40:24:0d:a9:
6d:39:d2:8a:bb:a0:57:57:47:5b:9a:d9:bb:e3:f6:43:98:84:
38:2a:24:1f:a8:0b:6c:68:d6:fc:cb:0b:de:a2:2d:51:a1:a6:
5a:52:fe:e7:7b:08:9d:54:98:63:6a:e6:41:64:37:3f:67:62:
7e:0a:95:f2:a4:59:3a:76:4e:87:1e:c0:d4:4c:75:bc:3f:0b:
bb:de:b6:a3:5a:65:c6:69:7e:8f:a2:1c:0a:9c:6b:6f:d0:9c:
75:b7:cb:07:ce:cc:ee:4a:60:81:e5:da:4e:32:51:ce:24:0c:
fd:82:b2:0a:8e:cd:09:58:30:27:c6:04:8b:77:59:83:74:1a:
be:4a:cc:65:ac:31:16:e4:6d:7d:ae:27:8d:d5:56:4e:58:ee:
f4:b8:90:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+68GmKitB21iPFsoxZ8UkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MzZhNGUxNGE3MWRkZDUxMDE2NGI4NjMxYWQ5OWJiZmM3
NTk1M2EwHhcNMjUxMDIwMDAwMTI3WhcNMjUxMDIxMDAwMTI3WjAzMTEwLwYDVQQD
EyhlMjYxZWMwY2E2ODYyZDFkYzdlNmNmYzczOTgyMDRmYzgzNzdiNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFE3pzujDKNBFzYC38wSTjia0oFn
CcIAv1ST3sx2qpIxLACpbMInb/3iSBctrDr2vy21bO354npUiJPUxCWdJ9fk/yLm
jaML9NkuU0ijGfEt7/XosB06KOijnuclSohtGS+RwmOXiDjopPwV5KxvlNS5Az11
TKyR9pz9xnPq85vb4RnuVnTPVWTsu1TJvSiFDiwemrv/YUogr9FqE/KVXLCAP35w
4vNLmDedeJ37J9Iu46Xh+D7eLvU0GlNqtCoWfZ+dGY63VUaxxJSydiG9Vtemj9Ni
eMPbe110/3dixdL8vO6Qms00FM9ViEX7BbG4Nxc4+rGDfVX9met6M3VQpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJh7Aymhi0dx+bPxzmCBPyDd7eUMB8GA1UdIwQY
MBaAFIY2pOFKcd3VEBZLhjGtmbv8dZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjIt
MmY3Y2Y4NDQ2YTMxLzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjItMmY3Y2Y4NDQ2YTMx
LzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALc00yQ3h
hdTxFWU/cu8LOg4Hi5kl1Cg201BaSihynAbkZ0o60QBCgEvM3YeYKZv1PeEuzQnT
qUSMlqxXY/xPKoMtg0ZC760uQ/PX0YQvbcTnVGlMF+tisJUvVnoKFtbysRz5QJO9
HW5AJA2pbTnSirugV1dHW5rZu+P2Q5iEOCokH6gLbGjW/MsL3qItUaGmWlL+53sI
nVSYY2rmQWQ3P2difgqV8qRZOnZOhx7A1Ex1vD8Lu962o1plxml+j6IcCpxrb9Cc
dbfLB87M7kpggeXaTjJRziQM/YKyCo7NCVgwJ8YEi3dZg3QavkrMZawxFuRtfa4n
jdVWTlju9LiQZg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:31:56 2025 by rpki-client