Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
File: HCF8gIa-KdUPg8j9j8kXsAnePIE.mft (raw, json)
Hash identifier: ueOqWlbeCAnVoE0HuVx/d6izPUTGBwaxnJx2JpX/UIw=
Subject key identifier: 77:97:B1:47:94:D2:63:81:A8:BF:B1:C0:CA:20:E2:D8:C3:1D:7E:8E
Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
Certificate issuer: /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Certificate serial: 0199FC5880FDEF1D4738D69BFCBD8C8B294F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
Manifest number: 0208
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: 0Ai9U12mBfKyiWOFnwxyJgomY7A.roa (hash: w93SlMAnXeNUWu2aTB2M64qmn0qVbSFDgVMubrcribE=)
2: HCF8gIa-KdUPg8j9j8kXsAnePIE.crl (hash: PDBWIlG9qItU84/GrjQT/UBbZvHgUvCk+ctPTmTuATM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:80:fd:ef:1d:47:38:d6:9b:fc:bd:8c:8b:29:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=7797b14794d26381a8bfb1c0ca20e2d8c31d7e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2b:16:16:8a:bf:9b:a4:7c:d8:e3:ff:a3:2b:
ac:15:7f:98:52:41:81:72:7a:16:99:93:04:c2:03:
97:d8:84:d8:cf:1d:fd:b9:9c:6e:9e:2d:34:da:75:
36:16:50:ec:09:33:e1:f7:f6:98:43:34:e7:91:db:
36:76:b3:ec:a9:02:81:6e:73:b4:0f:39:7c:ba:4c:
a7:5f:70:ca:77:9e:61:16:42:4f:81:43:29:5b:2d:
6d:96:0f:6a:c8:a4:ee:99:d5:57:89:f0:2a:b8:57:
00:9c:d0:e7:25:e4:a6:56:cf:81:29:40:59:6d:8a:
fa:b4:70:3b:af:2c:e5:58:a3:96:48:a5:1a:85:69:
be:36:51:a6:a9:ea:b1:f4:fd:cc:79:8e:c5:1a:ab:
43:90:14:4c:42:1f:c8:2b:11:83:3e:71:e2:9f:c1:
eb:85:e3:e4:e0:81:df:3c:46:b2:cb:3a:7d:a2:ca:
15:ac:d5:74:e9:f3:13:11:5d:3f:59:fd:0a:24:e0:
d8:e4:08:02:13:0d:88:33:2b:5c:00:87:aa:8d:d0:
47:bf:a0:d7:95:c9:2a:b8:c8:ee:f8:a8:39:8c:93:
2a:7e:f3:f1:eb:9a:73:1e:0c:76:83:1c:1a:e0:78:
44:8c:33:28:2c:14:1f:e5:68:6f:bb:cf:4a:a4:48:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:97:B1:47:94:D2:63:81:A8:BF:B1:C0:CA:20:E2:D8:C3:1D:7E:8E
X509v3 Authority Key Identifier:
keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:52:6a:7e:ba:c9:9d:ef:a2:f8:b7:9f:8e:df:0d:c0:fe:17:
65:8b:fa:20:1f:8c:58:d2:3a:94:b1:ad:f5:9e:0b:20:c9:55:
1a:23:ce:52:d0:8c:ab:0f:d5:95:e9:6c:f8:2a:76:bf:df:7e:
d1:5b:27:5e:2d:ea:b3:97:d7:c2:0c:a2:97:1a:d4:ff:a8:3f:
27:39:0a:20:27:5f:41:43:56:b2:43:20:b5:39:40:de:3d:3e:
80:dd:2e:d6:bd:22:d0:34:a6:4d:50:f7:3a:e8:d3:5e:6e:cd:
a4:2e:0b:d4:50:1a:ee:ca:99:56:53:62:56:87:9d:5d:7e:be:
f9:07:54:8e:7c:ee:5f:5f:f3:20:e8:98:5c:97:83:13:cb:e7:
91:b2:45:b0:22:a5:22:f9:c9:00:6c:e6:c4:1a:f1:6c:f0:86:
dc:f7:81:7d:6f:c0:e2:26:7e:5b:ef:f0:ce:9b:7d:4a:24:35:
59:d0:4d:d7:23:c6:57:f0:26:2b:af:83:e9:9c:68:47:c2:0c:
8a:1e:76:dc:f7:6e:74:5f:96:96:07:e2:d9:fe:f1:84:5f:82:
c4:35:1c:59:ef:4b:2f:8d:d1:24:05:34:59:0b:27:94:81:31:
97:10:47:04:42:ff:25:4e:d4:de:c0:70:fc:e9:ba:0f:2b:99:
80:07:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:58 2025 by rpki-client