Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
File: hRwoH1drQ6HKuVPJIEHOlZknDHg.mft (raw, json)
Hash identifier: j8CPF2tVd8Bvd0tpCzUVv3eJIE9A+hhmExsl6GELpm0=
Subject key identifier: 57:39:F7:BF:5C:D0:47:D9:FB:4C:64:AD:61:39:89:35:D2:5B:C7:03
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial: 0199FCFD54F097939A80B4314455599C133D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
Manifest number: 1569
Signing time: Sun 19 Oct 2025 15:01:24 +0000
Manifest this update: Sun 19 Oct 2025 15:01:24 +0000
Manifest next update: Mon 20 Oct 2025 15:01:24 +0000
Files and hashes: 1: XhZd4AXcprYaSWJWAkCvII9n7bo.roa (hash: +WoaFZAXvgLhbONkinxfr9JdPcFsQuGimoN13TlQ0XQ=)
2: hRwoH1drQ6HKuVPJIEHOlZknDHg.crl (hash: cHDf1ITmh/UiDp6j6IygVSXhA/p3l9qC9jGVSHikj74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:54:f0:97:93:9a:80:b4:31:44:55:59:9c:13:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
Validity
Not Before: Oct 19 15:01:24 2025 GMT
Not After : Oct 20 15:01:24 2025 GMT
Subject: CN=5739f7bf5cd047d9fb4c64ad61398935d25bc703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:3a:e8:81:af:46:c3:c3:36:fd:0b:4d:61:
16:40:0b:64:7c:ab:1f:2d:57:9a:93:f2:de:65:21:
46:b2:67:24:04:5d:ef:4e:98:2f:fd:7e:a9:b1:05:
42:3a:df:aa:a3:93:9c:1d:1e:00:dd:0a:85:7c:a8:
9e:2f:29:b3:bb:70:cc:40:18:2a:2e:5e:31:2b:2b:
54:f5:02:e4:91:9c:f4:40:0a:a6:70:da:e0:64:45:
0f:4f:47:70:83:3d:4c:88:9d:0f:36:46:df:9a:29:
61:d3:6e:92:ff:83:ea:c7:f8:a0:ba:88:7a:c7:a1:
a9:b2:74:e0:14:f5:15:03:11:d1:03:01:6c:cf:ac:
7d:f5:50:20:af:a9:9c:fa:cc:50:18:44:c6:ed:f7:
62:7c:8c:19:9b:dc:6b:38:74:29:16:6f:58:9d:7c:
47:3f:36:c9:89:25:50:d1:19:eb:ae:3b:cc:49:be:
90:48:88:ce:fe:31:8c:10:5e:b9:21:da:f5:9f:6d:
42:2b:ad:d0:78:c9:09:f3:35:bc:c9:8c:3d:8b:68:
ad:87:aa:cf:ed:19:3e:84:b4:e5:e5:15:77:2f:6d:
33:98:fd:3f:bb:da:c1:2c:0c:03:b3:56:13:0e:0e:
1d:75:ac:24:c1:d0:45:1d:5d:3b:cd:20:70:8b:d0:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:39:F7:BF:5C:D0:47:D9:FB:4C:64:AD:61:39:89:35:D2:5B:C7:03
X509v3 Authority Key Identifier:
keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ad:ee:31:5d:43:49:f2:7b:bd:2c:4c:66:0d:1d:d1:de:28:
47:5d:35:c9:52:ff:05:86:b5:e8:fd:74:54:34:9a:aa:89:15:
61:f4:ac:03:bd:13:89:ec:4b:a2:7d:d4:88:0e:b5:5e:70:f5:
a7:9d:fa:1d:75:b0:da:89:7a:ab:cd:1b:a9:fc:d9:0c:a7:e5:
15:5c:ab:86:34:15:5f:78:32:66:74:a4:1d:49:67:05:6a:e2:
11:14:cb:0b:bb:4e:bc:e4:3d:4b:29:e6:d0:c5:f8:ad:3b:d6:
dc:b5:b6:ea:01:43:c8:e3:fa:0b:dc:b9:47:04:18:46:e1:7b:
55:70:d1:2b:39:83:93:c8:84:95:65:9a:d1:0c:97:35:da:4c:
29:a9:c5:95:56:ec:e6:7c:fd:96:71:9f:5f:76:c7:32:80:17:
0c:72:0c:37:35:8c:76:b0:d1:87:1e:7f:9f:2a:21:9e:98:3e:
13:fa:06:12:02:c1:15:15:1e:fb:cf:f1:4b:4a:99:53:b8:6e:
b3:7f:cb:97:a2:0d:6d:f0:31:2e:62:89:c1:e5:69:d6:da:77:
08:c7:6c:de:6c:01:80:75:9b:0e:d6:8f:a2:84:2c:f1:f9:0a:
21:c5:49:f2:4f:27:c4:3a:84:2a:05:00:b2:d8:50:cd:0e:9a:
6c:c9:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:41 2025 by rpki-client