Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
File: hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json)
Hash identifier: wUUA9ToNfXGZtESzWqQRphbd5PZBoD8CrdV9oYd/pyE=
Subject key identifier: C3:34:F9:DA:F1:E6:7F:26:0C:2C:31:A4:1C:EE:42:16:64:9A:DD:38
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Certificate issuer: /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial: 019A0290811B4B2760916842FA67FB5E99A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
Manifest number: 0519
Signing time: Mon 20 Oct 2025 17:00:15 +0000
Manifest this update: Mon 20 Oct 2025 17:00:15 +0000
Manifest next update: Tue 21 Oct 2025 17:00:15 +0000
Files and hashes: 1: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: 7N3spSJbBTO+FjprRpmHyLP8fZwzw5h2ezMPTQHp8yU=)
2: j3mlArIrCrvoTStpcqF9EPTMJII.roa (hash: zagzdTS3IOA1uItKGwOJz9trfPNv/LGCzKt9YV1P5Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:81:1b:4b:27:60:91:68:42:fa:67:fb:5e:99:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
Validity
Not Before: Oct 20 17:00:15 2025 GMT
Not After : Oct 21 17:00:15 2025 GMT
Subject: CN=c334f9daf1e67f260c2c31a41cee4216649add38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bf:07:9d:71:be:96:b9:f4:13:24:b7:f1:ee:
79:d9:6b:31:1a:4a:12:9c:fb:d4:69:08:8e:16:e1:
de:53:20:6d:3d:67:c4:8d:bc:f0:17:5c:a7:2c:73:
2c:ce:9c:3b:cf:b7:4d:bd:f4:53:2c:03:00:07:9b:
ec:fc:98:52:a5:a0:7e:1b:58:81:8e:37:49:9d:56:
6e:b0:fe:6e:07:67:6f:06:76:7d:1b:84:86:73:ed:
79:88:4c:33:40:3f:42:ca:32:b0:90:6b:ea:de:d6:
31:d3:83:6d:76:4d:f4:48:76:e6:ea:fa:d4:b4:58:
9d:ff:91:87:71:47:56:dd:c3:48:14:e4:50:af:44:
11:44:3f:a6:3f:61:2f:7e:80:c6:bd:fa:5d:b7:04:
80:49:ab:9b:af:99:bb:e9:43:86:07:ff:2f:dd:5b:
67:ec:8d:aa:d9:57:da:e0:7d:6e:c5:43:d5:1d:1e:
80:f5:70:69:bc:b0:0f:a9:45:9f:b7:21:df:ab:91:
5b:dc:61:44:6b:9b:1c:80:56:50:25:67:ed:6b:d3:
ec:35:13:c5:43:68:dc:a1:e6:dc:e6:9e:df:da:e9:
c7:7a:4e:56:7c:36:4e:e3:58:e9:f8:78:1c:64:c6:
e2:08:4e:d6:e7:9e:3b:00:b7:79:4a:a8:d6:9c:b5:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:34:F9:DA:F1:E6:7F:26:0C:2C:31:A4:1C:EE:42:16:64:9A:DD:38
X509v3 Authority Key Identifier:
keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:33:76:0a:b2:35:f3:66:39:4a:a6:0d:ea:4b:d3:5f:0f:7f:
5f:4c:6f:b2:1e:b9:2c:68:c9:68:67:fb:0b:79:a4:85:4b:fb:
8f:34:07:69:05:32:9a:00:f8:af:08:ed:69:b9:1a:3a:83:68:
d4:ab:53:99:4b:97:c6:c9:f9:87:dc:aa:a5:d0:5f:7d:b5:de:
0e:e2:44:ee:4b:74:51:ee:10:42:6d:8d:88:84:8b:11:2a:89:
72:ff:a0:11:8a:5c:f2:ec:15:a3:8f:d3:52:81:90:33:ba:54:
4e:35:74:e7:31:5f:3a:4f:6a:96:5b:0e:9c:0e:79:e1:19:20:
33:ec:b8:ce:75:df:2e:33:80:c9:db:ec:3e:e8:7f:46:f3:24:
be:f0:ce:cf:e3:a9:f5:02:17:fb:d0:b2:b0:39:b6:14:1b:bd:
7f:bd:d3:17:d4:c7:ea:56:8a:41:d9:1d:80:6b:ed:9a:37:ea:
a0:6c:7e:cd:0b:9f:40:5b:e1:05:af:da:86:95:56:c5:6c:c2:
77:73:10:48:9f:9e:ee:ca:bf:8c:96:c1:98:a1:6e:bd:45:12:
54:53:e6:ac:c8:d9:65:26:f6:b3:40:4e:64:ff:31:66:5c:69:
f1:3f:19:fd:e5:4e:32:09:66:a3:ea:64:e2:3d:9b:36:e5:7a:
8f:3a:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:37 2025 by rpki-client