Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: /oEzkWgQYld2u/NxpPkF/0qx32he4zcIcrsTBWwrYuA=
Subject key identifier: 5F:79:6B:31:56:38:D9:E3:86:46:43:FC:22:31:63:15:90:0D:83:0A
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 0199FC8F2F896D682D9CF7092F2DF88BF405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (hash: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: kEyTgVE5QPZyKxx2P3gj301yVq0oktCBTZu2MLTustQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2f:89:6d:68:2d:9c:f7:09:2f:2d:f8:8b:f4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=5f796b315638d9e3864643fc22316315900d830a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:87:0e:cc:24:87:7c:f2:ae:6e:e2:4f:29:
d6:15:59:7f:db:86:99:dc:fc:13:20:8d:b3:da:72:
ec:87:6c:bc:73:45:20:4d:81:2d:47:d1:9a:09:02:
3a:84:cf:5c:06:86:16:5a:01:78:85:d0:35:ae:bc:
96:6a:57:81:68:ec:c0:74:ca:e2:e6:49:2f:31:2c:
61:70:52:f0:16:b7:1d:1a:6f:a0:aa:37:00:00:b4:
f9:ec:a0:45:80:9f:39:9b:41:7d:69:eb:7d:d8:ee:
17:3e:52:65:db:2c:a4:30:33:96:d8:c3:88:fc:6a:
0b:3f:15:aa:fc:e0:9e:58:35:20:eb:01:91:a5:be:
fa:30:ba:46:fc:e6:ce:d9:7c:0c:61:43:a0:07:0a:
52:e4:16:aa:67:2a:b7:25:1f:f0:5d:7e:5b:44:33:
2a:24:39:38:55:50:21:c9:42:9f:96:48:f8:50:9c:
81:9d:d9:14:61:c1:4f:6b:fa:23:01:39:55:83:4d:
c9:3d:0e:f8:6d:5d:02:c4:59:24:29:9d:b1:2d:da:
9e:48:64:5e:34:7e:4d:55:a2:92:14:7d:d7:15:11:
81:58:ed:b5:ab:6d:21:dc:2c:89:09:e4:ea:bc:d2:
a9:cb:b5:01:b5:b4:e9:5f:82:be:2b:09:4a:54:c2:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:79:6B:31:56:38:D9:E3:86:46:43:FC:22:31:63:15:90:0D:83:0A
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:60:ce:71:da:71:37:2a:fe:ee:eb:f3:c9:87:f2:7d:40:06:
7e:a4:63:84:45:aa:5f:04:ce:6b:e1:ca:79:6d:66:f3:e4:48:
ae:af:4e:e7:7b:64:9a:3c:5a:42:2a:51:5e:7d:d0:e9:97:86:
84:d4:69:2b:78:d9:63:a4:49:9f:2d:5b:13:f7:17:e3:28:f5:
70:f6:36:73:59:08:a8:25:f4:b2:29:78:dc:b2:00:3f:1e:45:
6b:df:83:55:8b:9c:b3:2d:7a:c8:15:84:16:f4:b7:4b:a2:de:
b0:8e:20:89:45:7b:1c:2e:bb:a7:e7:96:8d:68:1a:62:78:40:
2e:fe:a3:8b:e2:cc:3c:8d:9c:e9:88:7e:d2:58:42:2b:aa:21:
6b:52:13:7d:0f:d3:cd:0b:39:4d:b2:ab:dc:6e:f8:30:a1:5d:
3b:1c:4c:90:2e:f2:1b:5b:65:7b:b3:9e:30:58:6e:53:be:e5:
91:df:8e:0c:e3:71:da:4d:28:8a:36:ea:46:2f:89:30:e6:78:
e0:57:aa:8c:f8:a2:97:f4:cf:fc:df:38:e0:6e:d4:6a:c0:7b:
30:85:a3:d2:d2:25:c4:e7:3b:e3:3d:64:a6:95:de:a6:c3:22:
b5:be:55:06:21:ad:77:7f:d6:7d:29:32:c5:11:87:62:3a:e8:
d9:48:69:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:55 2025 by rpki-client