Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: R7AnMnevfNu3q8qw0paRGwsPLTah3r72as0RW9P+xOE=
Subject key identifier: 66:E2:8B:D9:06:3F:46:B9:B0:C0:5E:CE:90:70:60:28:1D:18:86:BC
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 0199FB7C73261939A57BC4552590CCC9F29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0A0E
Signing time: Sun 19 Oct 2025 08:01:01 +0000
Manifest this update: Sun 19 Oct 2025 08:01:01 +0000
Manifest next update: Mon 20 Oct 2025 08:01:01 +0000
Files and hashes: 1: cASyfuH0abUwpn-V7hmuZSIQ09c.roa (hash: U2HpSDc4zJjb5yR4FxelHkJvS6rW6HvOOx+N/+WSuMk=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: VJF+M1Dpo/mPTdGErfGeVAegGjBm4Po9PAjzhHA3Gcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:73:26:19:39:a5:7b:c4:55:25:90:cc:c9:f2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Oct 19 08:01:01 2025 GMT
Not After : Oct 20 08:01:01 2025 GMT
Subject: CN=66e28bd9063f46b9b0c05ece907060281d1886bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:b1:4e:e5:38:e5:f4:bf:f9:63:a0:2b:cf:
b4:4d:6d:e4:11:2b:df:14:c4:c5:2a:b5:76:e5:c6:
df:84:f3:5a:7a:12:b2:ad:f0:27:6d:37:59:13:9c:
aa:d7:f8:df:08:34:f0:18:14:a1:22:c7:53:66:f8:
0a:83:b5:7a:a2:41:e8:9f:39:c2:ea:3b:00:ae:75:
e7:c0:57:85:7b:ec:a7:9c:0e:bb:06:c3:da:3d:c8:
99:b8:40:3c:8a:98:30:72:8e:7c:73:33:71:c2:26:
73:e0:84:ab:38:6f:41:b0:8b:27:f7:84:f4:75:6d:
0a:3d:c2:21:04:1b:79:c3:98:82:9b:75:7b:f6:16:
89:fd:53:7d:9e:56:b9:6c:46:3b:b5:19:7f:c7:ab:
b2:1f:b4:f3:e5:d0:90:01:a8:1d:81:7c:f3:2c:ab:
a4:ab:d7:2e:46:86:d6:e5:4f:b7:8d:bf:49:38:06:
e6:02:76:e2:9d:d2:91:0d:66:42:ac:e6:21:eb:6c:
0f:c8:07:7e:4d:63:b3:c3:36:2a:2b:32:95:9d:40:
44:47:77:14:b2:14:e1:83:be:d1:c9:2a:44:70:1a:
16:15:00:e8:ea:f2:6a:d7:c6:99:79:57:81:48:a4:
5a:0e:c8:6c:9d:74:cd:68:a1:2b:36:f4:f7:49:26:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E2:8B:D9:06:3F:46:B9:B0:C0:5E:CE:90:70:60:28:1D:18:86:BC
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f5:93:15:93:8a:ae:5a:52:1d:00:82:73:d9:a2:56:ab:e9:
d3:7f:5f:d2:d0:09:b4:ee:51:5e:97:86:8a:c1:03:4d:52:ff:
3a:82:24:d3:e8:81:cb:bb:dc:db:11:74:1f:0e:9a:74:9b:e9:
ce:57:f5:b0:6b:9d:b6:e5:ec:73:4f:f9:09:78:52:27:12:ac:
b0:82:1f:38:70:50:ce:a9:7e:f0:6a:75:de:90:14:2d:f8:ec:
e9:eb:a3:af:45:e1:25:0b:83:94:19:78:a8:4d:5c:9c:c0:4b:
37:39:53:a5:a2:2b:34:99:08:d2:68:a9:fa:03:df:7d:bb:2c:
e3:09:93:8d:c3:dd:6d:4c:0c:7f:25:0b:a3:06:44:0b:73:f8:
a1:8f:3a:98:d6:bc:42:ec:9d:53:7d:5e:d5:94:51:27:0f:95:
c4:b4:1f:33:5c:fa:5b:fe:5e:35:c6:bc:eb:4d:31:7c:4b:35:
80:70:69:0b:a0:af:37:cb:82:99:1f:ba:33:f3:5b:dc:46:71:
6e:1c:29:1d:46:b2:04:7e:f2:b5:8f:bc:9e:8f:e1:0c:5f:32:
42:0a:71:0c:9f:2f:2a:21:7e:c8:39:2c:c6:56:31:bf:54:07:
78:2f:b8:db:e4:a5:40:95:06:f1:37:aa:58:c9:49:6c:42:9c:
f2:8c:88:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:12 2025 by rpki-client