Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File: hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier: PVJousf/z1+vetOgT3cNAIqnF+58SY351T9Ouj5uDeg=
Subject key identifier: 4D:45:87:9D:03:CB:31:FB:98:A5:BF:55:CE:4D:9E:5A:CE:4F:C5:E9
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial: 0199FBB363B21335998647115AAF9ECA7590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number: 168C
Signing time: Sun 19 Oct 2025 09:01:01 +0000
Manifest this update: Sun 19 Oct 2025 09:01:01 +0000
Manifest next update: Mon 20 Oct 2025 09:01:01 +0000
Files and hashes: 1: D22ywRwvNb9l3Ejn0IhkTIbbqtw.roa (hash: MXQ5UIAvuNHHez6ImEjyKvenCI0hemAJDRUs3ItPy8E=)
2: E5_9p_TGg2FNMpZSH1jH4wJ3rfA.roa (hash: GcTlxtoi4GEP2bLooVydD/oQvGI42+1RU87/9gjgDvc=)
3: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: 0qLOsskkmHZZJAEHI2taE4SQYHjuCOnSri+aUNI1APM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:63:b2:13:35:99:86:47:11:5a:af:9e:ca:75:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Validity
Not Before: Oct 19 09:01:01 2025 GMT
Not After : Oct 20 09:01:01 2025 GMT
Subject: CN=4d45879d03cb31fb98a5bf55ce4d9e5ace4fc5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:07:eb:25:81:8e:ae:4f:93:84:ba:02:bf:
27:4b:ef:b8:58:ba:a3:da:98:4d:08:f5:17:e7:3c:
5f:70:a4:92:65:31:ff:93:a4:da:17:55:70:4a:9f:
ca:30:0a:f6:95:74:e3:b2:48:dd:cc:66:da:16:bf:
1d:13:54:2c:eb:af:35:62:82:55:ae:69:45:e9:e5:
07:92:ce:0e:22:31:5b:f3:fd:f3:3f:7d:41:15:09:
e1:e6:de:de:e5:94:ba:9f:ce:fc:d6:a6:75:a7:ad:
f5:2d:cf:31:70:bb:cc:71:38:a8:e5:64:29:d8:61:
e2:ab:2c:44:27:c6:c6:31:75:9e:82:b9:67:03:82:
32:08:cd:cf:f1:31:0e:13:53:9b:02:1a:65:a6:89:
af:18:25:c0:09:fd:f7:ba:e6:86:5d:8d:a5:16:43:
2e:81:33:55:e0:bd:ef:7a:7b:6f:26:5f:d4:f5:b1:
c1:2d:52:de:d4:3b:26:63:7a:c8:ca:f0:88:59:1a:
d5:d5:61:24:75:7f:9e:f6:eb:7f:16:ec:a8:3a:7f:
cf:df:bc:a4:b5:37:32:ae:cc:74:a0:bd:a2:f5:6f:
1a:2b:1a:44:17:3e:e9:e5:e9:64:76:dd:d4:97:94:
f7:66:cc:74:3d:cf:6a:67:2c:1f:fc:f6:16:05:ff:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:45:87:9D:03:CB:31:FB:98:A5:BF:55:CE:4D:9E:5A:CE:4F:C5:E9
X509v3 Authority Key Identifier:
keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7c:33:b3:df:59:d8:b0:7e:8f:8f:25:8d:01:62:0a:f7:37:
74:1d:e3:e3:1f:ba:9a:a7:06:0d:53:8d:d5:05:36:a9:c5:78:
c9:3e:9c:2f:2f:a4:f4:dc:cb:21:e5:cf:1a:37:e2:6c:33:06:
ba:2c:60:7e:d3:bf:cb:ee:74:f5:36:46:95:7f:bd:b0:b4:f9:
a0:72:ef:8b:86:8e:f0:1d:be:bb:44:ef:f0:16:0f:21:ad:76:
d4:26:25:38:52:7d:b2:5c:90:c9:8f:9f:0b:b6:bf:a0:41:35:
7e:e6:82:74:c4:97:39:81:c0:7c:3e:da:f7:23:75:7e:9c:a1:
bc:41:de:70:46:d9:8e:5b:03:4c:fe:f0:0b:90:3a:4d:aa:9c:
9c:7d:95:c8:4d:40:20:9a:76:23:3b:08:be:d3:58:95:52:8b:
00:07:c7:d5:12:8c:98:33:fb:1c:7f:94:75:3f:1d:00:99:e0:
d1:c7:36:4a:23:74:4a:2a:de:2a:79:94:30:cd:e7:8f:ed:36:
c8:f0:c2:47:5f:16:18:ac:83:c4:88:b7:9a:0f:ce:88:ae:c9:
df:94:53:ac:b8:54:88:2c:37:7e:0b:ac:80:8a:b7:0b:c3:57:
4c:e8:db:31:8f:78:9b:c3:8f:6c:44:21:18:4a:80:63:45:ea:
8c:83:4f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:31 2025 by rpki-client