Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
File: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft (raw, json)
Hash identifier: 3bLnucA1LbM0+nMtY7HkUvfs1RDLuWK4ZDmbW2D7Quo=
Subject key identifier: 83:4F:71:5E:A3:70:56:29:33:4E:58:15:92:3B:3D:E9:9A:E3:05:A7
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial: 019A02C741E7E5B1BA383EE15652CC0708F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
Manifest number: 08FD
Signing time: Mon 20 Oct 2025 18:00:04 +0000
Manifest this update: Mon 20 Oct 2025 18:00:04 +0000
Manifest next update: Tue 21 Oct 2025 18:00:04 +0000
Files and hashes: 1: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl (hash: qNtMkPOyB6BITIFsupyAKfDMxnEWcj/+YLq4A7X9RQY=)
2: oiBFy3pkObmB-SUVyi8mjUeggCE.roa (hash: DrQMitQl5NyHBIDeRzh85R9x2+NpayUje01H5X2GJbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:41:e7:e5:b1:ba:38:3e:e1:56:52:cc:07:08:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Validity
Not Before: Oct 20 18:00:04 2025 GMT
Not After : Oct 21 18:00:04 2025 GMT
Subject: CN=834f715ea3705629334e5815923b3de99ae305a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ac:20:ca:65:32:f3:d6:3a:bd:c6:43:fa:e0:
b4:25:13:6b:e0:c1:b2:e0:bf:de:6c:a7:21:3b:5f:
b2:22:37:fb:a5:80:3f:53:20:3c:4e:b0:db:81:e7:
38:04:6c:de:12:f6:80:d2:05:75:44:a7:14:42:6f:
bd:8b:80:6a:e5:98:73:80:a9:c1:18:d8:2a:b6:dd:
62:56:0c:f8:ca:e4:52:25:cc:5b:61:ab:2a:d5:dd:
e2:6d:12:00:85:00:81:db:74:15:64:30:a4:04:63:
ee:0e:6f:61:c1:8c:03:1a:1c:ee:e1:1d:73:92:6c:
9d:bd:5b:25:7d:4a:b1:b2:fc:29:68:04:4c:d9:4a:
c2:42:fb:f8:df:86:9a:9e:5e:bc:02:49:b1:74:1b:
87:5c:9c:aa:06:8d:9a:4e:65:4d:24:79:6d:a9:5c:
24:00:5c:6c:0e:7a:f4:b8:ee:45:c2:9f:3f:ae:c8:
28:4f:1f:2a:7f:2e:8b:48:1e:4c:5b:d0:60:ff:83:
4a:e5:19:80:51:a0:9f:f8:80:cd:a1:31:33:1e:8e:
af:c1:7e:f1:f7:34:56:9e:21:7b:eb:fe:00:cc:2d:
aa:04:a8:b5:ff:70:08:7b:8c:94:47:c6:6d:32:eb:
02:25:6d:62:ad:d3:cc:df:d9:39:9f:30:f3:91:cb:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4F:71:5E:A3:70:56:29:33:4E:58:15:92:3B:3D:E9:9A:E3:05:A7
X509v3 Authority Key Identifier:
keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e9:5b:4d:ec:c0:76:51:1a:41:6c:7a:34:b0:ef:a9:64:a9:
ee:06:11:a8:0b:ab:2c:e9:7b:06:1f:29:ca:e6:47:c9:3c:15:
06:cc:7f:98:3b:6a:67:5e:5e:bc:96:38:8d:b8:ab:05:25:91:
3b:97:33:25:8f:1f:1c:43:4d:61:85:1f:36:ed:38:ca:b1:75:
31:db:2a:ed:2c:0b:47:5a:41:57:98:1b:52:36:40:97:84:dc:
24:38:9b:9a:79:dd:fe:4a:4f:96:dd:45:13:ba:a5:71:03:05:
38:64:5a:dd:d4:98:93:10:7a:3f:0b:a1:7f:73:9a:75:95:f1:
b9:e9:d1:f1:34:4f:e2:54:4c:22:eb:81:79:d5:ad:df:81:2a:
ac:18:d1:46:db:a6:7a:75:35:37:8c:ba:81:41:f0:ee:00:01:
2a:82:eb:ec:18:a6:a8:de:74:4c:e1:3e:8e:9e:c6:09:4f:b1:
38:6b:7b:f6:a0:a7:9b:73:a1:61:b2:f7:08:fc:da:06:bb:87:
5c:93:27:5c:69:62:42:eb:6d:24:9b:97:65:9d:fa:19:7b:52:
0f:a6:7e:38:6b:20:db:1f:41:83:1e:92:ab:0d:10:04:81:26:
79:5d:38:3a:09:eb:9b:5f:00:cb:cf:f5:5e:49:97:69:7c:05:
99:a1:b2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:18:35 2025 by rpki-client