Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: 51rPljF50UJ/e7hrC4JbHy+iSKVpkSVQorI4ukaWMI0=
Subject key identifier: E0:E6:32:D5:67:8E:A7:ED:D8:61:6B:90:5B:91:7B:84:EC:6D:80:EA
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 0198D404C35242F1B28709B4AD5F54E0F233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 11CF
Signing time: Fri 22 Aug 2025 23:02:18 +0000
Manifest this update: Fri 22 Aug 2025 23:02:18 +0000
Manifest next update: Sat 23 Aug 2025 23:02:18 +0000
Files and hashes: 1: 4cnRWY5gtsfuxJysdz-vN0qrOUs.roa (hash: 93jxXfokl+svyBU1O0Hr6w6zv+AavA15Ll9wQ0fHJCo=)
2: 7L93z_qlhSOtd1RZOlWCJUWvg_o.roa (hash: vV2gGeYtK37+wnV0Ydlju7P2SHZgL0mA9o+Vjq7iAwY=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: 9WIYep8EKmtnPrgmGyPe3BEXgiLmm6x3ihH+MPLiPNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:c3:52:42:f1:b2:87:09:b4:ad:5f:54:e0:f2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Aug 22 23:02:18 2025 GMT
Not After : Aug 23 23:02:18 2025 GMT
Subject: CN=e0e632d5678ea7edd8616b905b917b84ec6d80ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:23:5b:4e:ca:78:f2:ef:67:64:97:6f:d1:
c0:c1:87:be:74:d5:e0:55:88:09:6b:97:36:fc:b5:
fb:0d:ad:ab:04:62:c4:5f:30:6d:c0:f0:c7:32:57:
ea:40:a4:ae:b6:bb:9f:b8:39:08:06:84:b3:cb:7d:
57:83:c9:70:75:cc:44:87:6c:0f:78:f1:2e:9d:ea:
f6:cc:5f:52:8b:0e:37:3d:86:c4:11:ee:73:97:00:
f3:0a:b9:3e:97:0a:1e:3b:ac:5e:b2:3c:c7:2b:91:
9a:5a:57:ad:05:c0:3a:5c:dc:b7:c2:4c:df:07:ab:
3d:82:0e:b0:3c:9d:e8:0c:fc:39:d8:c5:14:fe:08:
66:6f:84:1d:14:22:b2:42:4f:2c:e6:68:50:42:b3:
bd:42:11:62:ff:fe:f3:a8:6e:60:77:53:08:b2:c9:
37:7f:1c:50:6d:ef:75:5b:7f:52:40:62:7d:33:c2:
3b:8b:01:7b:8e:6b:d9:d9:12:02:41:51:12:d6:35:
58:db:bb:da:53:d6:b2:c2:3d:fe:47:a5:c8:14:f6:
75:a7:65:18:41:78:66:d0:8b:94:9e:4b:06:77:bf:
99:27:77:48:24:d5:a6:f1:d6:2c:e6:25:e3:3d:85:
ff:9c:93:5a:1b:93:7e:6d:33:c1:4f:f4:f9:f9:06:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:32:D5:67:8E:A7:ED:D8:61:6B:90:5B:91:7B:84:EC:6D:80:EA
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cf:b1:30:8a:20:7a:6d:1a:04:89:c7:dd:ec:17:d5:2f:94:
c6:3f:0e:48:e7:1e:35:69:b5:aa:c6:2b:91:18:57:32:b9:b6:
b5:ba:6d:4b:12:04:12:df:10:84:fe:f9:ec:9c:4d:6b:1c:25:
ac:b3:ad:79:08:ec:ce:59:4e:86:dc:4f:82:fa:72:ef:b6:da:
b9:64:ec:9a:2a:24:04:cb:e2:07:f8:02:d1:5c:cb:db:9e:04:
cf:70:a6:80:7f:1a:46:2d:bb:2d:ed:69:54:6d:f0:de:0e:ff:
82:43:9c:fe:e9:a6:da:69:a9:46:21:38:ae:5c:f4:9e:9a:7a:
cf:be:e9:7c:83:f5:51:c1:47:28:84:75:61:c2:90:ff:d4:f3:
3a:57:7c:80:a9:d7:68:bf:7b:b4:e7:a3:bb:aa:cf:1e:80:c8:
37:33:8f:8c:f3:85:22:5e:96:3f:1b:b1:6a:cb:e1:74:9d:86:
b5:37:5c:da:24:d8:19:3a:a4:f8:2e:36:20:5d:c9:1a:53:6b:
0a:ee:6f:14:ad:31:f7:e1:cf:ec:dd:fe:b8:3f:dc:e9:bb:13:
19:d7:8d:8b:f2:0a:11:40:53:18:f2:14:31:ab:c5:67:ee:40:
3b:f5:aa:fd:a3:b1:f1:c2:bd:13:5a:5e:55:8b:b5:3d:9f:9c:
68:71:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:08 2025 by rpki-client