Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: VPwfbEMDN1jggUka7YHZr0e67LsUzXHkxnjdfueNJus=
Subject key identifier: 1C:1F:32:37:D3:BB:18:C4:3D:91:15:03:28:99:3D:0A:FF:3C:46:56
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 0199FB45885E50AED75DD01D34D1B3553878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 1268
Signing time: Sun 19 Oct 2025 07:01:02 +0000
Manifest this update: Sun 19 Oct 2025 07:01:02 +0000
Manifest next update: Mon 20 Oct 2025 07:01:02 +0000
Files and hashes: 1: 4cnRWY5gtsfuxJysdz-vN0qrOUs.roa (hash: 93jxXfokl+svyBU1O0Hr6w6zv+AavA15Ll9wQ0fHJCo=)
2: 7L93z_qlhSOtd1RZOlWCJUWvg_o.roa (hash: vV2gGeYtK37+wnV0Ydlju7P2SHZgL0mA9o+Vjq7iAwY=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: Y9Y/moBPNHaeHnBm6T+Q750sqPvpLCl0/jweRahVrG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:88:5e:50:ae:d7:5d:d0:1d:34:d1:b3:55:38:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Oct 19 07:01:02 2025 GMT
Not After : Oct 20 07:01:02 2025 GMT
Subject: CN=1c1f3237d3bb18c43d91150328993d0aff3c4656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:7f:90:83:2f:a7:7e:32:d6:6b:07:a9:66:
10:09:dd:ca:27:82:91:1f:9d:e4:de:a2:9d:c2:78:
3c:e2:36:19:8f:70:3b:bc:a7:e7:91:0a:50:04:a6:
29:56:ab:f2:fb:95:c1:b0:eb:00:a2:89:f9:8d:ac:
32:f2:04:29:54:e0:00:fb:5e:78:b4:62:71:f9:35:
a4:15:de:87:24:8f:98:4d:37:96:02:a8:3f:2a:31:
9e:3c:31:ab:aa:53:22:c0:c0:64:76:84:46:3f:a8:
2f:2e:87:7b:1b:e4:a7:25:d5:7b:b6:fb:de:ee:f7:
9b:b2:00:ec:66:33:22:6b:08:5b:df:98:e2:9b:32:
91:3c:71:c6:fc:68:7f:15:90:cb:d8:17:49:94:c3:
b1:4a:1c:74:88:14:dc:4d:07:f4:b8:8a:47:2c:ed:
7a:3b:54:c2:8a:0a:0b:47:ff:c4:19:60:98:c4:c5:
b3:b3:7e:44:86:51:43:08:6a:c6:0d:e6:ad:f3:fe:
2d:80:d2:16:cd:50:a5:68:f0:25:13:7e:6a:f6:ae:
c9:61:75:b3:9e:24:b5:c6:ec:86:65:7b:0a:03:9e:
d4:56:ac:2d:5e:2a:11:7e:e6:be:2f:7d:c6:69:4c:
aa:7b:72:88:cf:0d:2d:ee:aa:1a:10:c1:34:74:d7:
6c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1F:32:37:D3:BB:18:C4:3D:91:15:03:28:99:3D:0A:FF:3C:46:56
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:38:96:cc:d2:45:2a:c1:5e:9a:eb:df:0f:65:97:27:a8:95:
98:45:4b:25:06:b0:85:c8:cb:e0:3d:1d:1e:ed:a2:af:c7:cc:
fa:47:2f:c2:f4:e1:81:e4:3f:b4:74:cc:c1:d7:56:90:5c:7f:
09:76:ec:2f:c6:d8:d3:fe:9b:d6:d8:a3:04:a9:4d:e2:ae:a5:
f7:b4:18:0b:99:44:3b:f7:0e:26:49:83:9a:fa:94:3a:2f:fe:
90:e2:f7:c4:a8:06:eb:e9:6f:ab:8e:f5:c9:c4:67:2d:34:6d:
0e:3f:11:13:4d:54:d9:23:32:56:2c:e2:a5:ed:56:5b:0f:0f:
34:0e:c1:e5:7d:51:52:8a:d6:8d:dc:16:d6:d0:60:63:58:a5:
63:d9:57:3a:80:60:e4:54:7b:85:78:35:13:84:06:d1:96:1e:
82:ef:f8:7d:cb:65:f4:c3:cd:c0:9b:06:67:4e:ea:27:cf:35:
a9:67:8f:c5:04:21:d0:aa:dd:77:a6:aa:c9:2d:0f:f9:09:15:
31:1c:84:c6:50:ce:1b:9c:a8:61:4a:29:8e:95:09:a5:5d:b3:
74:01:0d:d7:72:b3:d1:38:85:b7:fe:0a:38:e9:50:a5:f2:49:
2b:45:d3:e8:9f:4c:3b:2d:6e:f9:3a:d0:f6:fb:b3:fd:05:81:
f5:58:94:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:52 2025 by rpki-client