Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: JYT80YXbeFGoGhdLD01NYANMi2gYOMkfxDk2IeiwzFI=
Subject key identifier: 60:21:9F:14:8B:F3:8C:56:78:8E:05:4D:6A:C0:45:63:76:79:EB:4C
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 0199FC216D06DAE088A0A47A072AAAD9D66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 0BD3
Signing time: Sun 19 Oct 2025 11:01:12 +0000
Manifest this update: Sun 19 Oct 2025 11:01:12 +0000
Manifest next update: Mon 20 Oct 2025 11:01:12 +0000
Files and hashes: 1: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: v1Un7WXvtEl+zlLdHqGKJAomtX3D2tzMk5OGysUB5Ys=)
2: wWq59skVXk0ZG4IFLK9dggmPZBc.roa (hash: G7C47jomjQ8yRWntSox+zS/AjFvrINeu+2AEHacLP1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6d:06:da:e0:88:a0:a4:7a:07:2a:aa:d9:d6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Oct 19 11:01:12 2025 GMT
Not After : Oct 20 11:01:12 2025 GMT
Subject: CN=60219f148bf38c56788e054d6ac045637679eb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:50:b6:79:c2:7c:e6:59:54:1a:b5:f4:95:
d4:2f:32:0f:66:9f:95:57:cb:c9:52:c4:02:5a:ef:
af:a3:31:a7:fb:13:f7:69:61:72:bc:5e:83:32:26:
87:7d:09:4a:3b:ec:ac:c2:c3:58:f0:e1:aa:e2:b4:
8c:69:0e:e2:9f:00:37:07:84:56:87:a0:0a:b7:32:
f9:74:7e:8a:c4:9b:c7:93:6b:23:ce:08:68:59:20:
26:ef:f6:55:00:9d:9f:0d:f0:11:52:62:ae:63:d8:
da:86:fa:a4:0a:a5:09:68:a8:2f:c5:d3:ac:15:ea:
a2:10:f4:d9:3f:7f:df:c0:45:b8:9a:2f:37:46:fe:
af:b6:ec:39:bf:d5:cb:17:48:14:f4:e4:24:21:ed:
90:1a:59:f2:c3:da:1e:80:ed:fb:3e:df:db:33:5e:
35:a0:ec:29:14:2f:eb:51:e8:e1:a7:72:6a:22:05:
be:9c:06:d3:7b:a4:63:1e:48:6a:a9:a4:a7:18:b6:
42:72:98:75:c2:7e:43:42:9a:6f:a0:fd:5f:50:be:
da:79:b9:9e:1f:19:6a:3e:b8:53:ab:e9:33:3c:43:
8e:e6:f2:17:7e:58:27:7c:a6:f3:fa:1a:fd:97:23:
83:6f:48:4d:e9:0b:57:ed:0a:02:3f:74:c6:fa:e3:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:21:9F:14:8B:F3:8C:56:78:8E:05:4D:6A:C0:45:63:76:79:EB:4C
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:77:0c:e2:b4:7a:6b:0f:ef:5f:e1:f5:40:9c:0f:53:82:e7:
92:a6:f3:a2:70:06:da:f5:03:c3:c5:78:cc:ed:02:55:73:01:
3c:0d:4b:04:1c:4b:2e:be:cd:a5:d8:c8:00:c7:4a:6a:ed:3c:
b4:b5:53:53:90:ec:7a:bd:33:d1:1a:ee:dd:c1:fa:89:99:4c:
f3:fc:8a:32:50:81:37:7a:9f:e4:78:09:2b:28:bf:1e:d8:3a:
5a:96:2b:bb:74:0f:88:7d:c9:9f:c0:f4:31:84:a7:81:22:18:
99:96:79:68:dd:72:a7:d9:8e:d9:bd:17:e5:ba:28:3c:8a:46:
99:b8:17:4a:04:4f:71:60:62:dd:6e:1d:1e:e3:80:88:12:85:
98:36:23:20:ce:d8:0e:15:bf:8d:21:34:94:4b:87:f9:a2:b1:
7c:26:97:f8:3a:dc:92:df:12:11:d4:cc:af:20:6e:a8:5b:19:
26:ff:3d:a1:de:ee:99:42:bd:3e:ee:da:86:4e:58:ad:b9:ee:
ea:b9:6e:ec:fa:31:59:d7:cf:4e:9a:4b:49:63:42:7e:d0:cd:
54:6b:8c:5f:73:d4:f4:76:e1:a1:3f:a6:7c:80:64:57:65:ce:
e9:0f:d5:06:1f:c3:fc:04:21:96:dd:30:32:9e:c5:41:46:5b:
ad:b6:92:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:37 2025 by rpki-client