Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: FQxqwsvk73qnB3hcpihzDv2TRGQ7Rr8PPuJmGsr2DE0=
Subject key identifier: 22:26:F4:1A:10:2E:AB:F4:25:A8:9F:27:2D:A6:0A:74:91:18:8F:C6
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 0199FBEAC3D455C54A7EC627F958171DB419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 1611
Signing time: Sun 19 Oct 2025 10:01:30 +0000
Manifest this update: Sun 19 Oct 2025 10:01:30 +0000
Manifest next update: Mon 20 Oct 2025 10:01:30 +0000
Files and hashes: 1: E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa (hash: 1/I3aoM+yKdAzYPZU70IJvPWqKBQF4IK2mBQQ0GVymw=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: cxjxLmo8cbEjCrH+PZ4/hT8Rj59FBwKfR2OGpDnJMtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c3:d4:55:c5:4a:7e:c6:27:f9:58:17:1d:b4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Oct 19 10:01:30 2025 GMT
Not After : Oct 20 10:01:30 2025 GMT
Subject: CN=2226f41a102eabf425a89f272da60a7491188fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:ba:1b:3e:c8:d7:0c:dc:60:e7:0d:ac:c0:
c3:c4:4c:51:70:82:9d:6b:84:52:67:44:70:d6:ad:
a1:6b:4c:ef:1b:83:61:6c:fb:9d:04:b7:7e:76:f6:
15:e4:ac:1d:6c:18:6a:69:3f:86:ad:3c:c9:41:0a:
d8:b5:53:04:6c:74:4c:8b:65:3b:c5:2c:a5:ab:67:
21:c0:8a:99:11:1e:b0:46:0a:6f:92:cf:9c:d0:71:
c5:10:b6:a1:be:92:3d:87:35:0d:05:0f:22:52:75:
5d:57:49:03:b1:02:46:29:2c:82:78:30:dc:49:9e:
fd:d8:b8:6f:48:fc:08:84:5b:b5:39:fa:3d:ef:e7:
db:ad:31:36:a6:f7:ad:9e:15:15:79:42:cf:4d:ac:
44:fa:5a:fb:bb:5b:c7:52:3a:09:6d:06:4f:d1:e8:
2c:5f:e3:83:62:d0:8b:1c:81:27:6e:8c:be:c8:c2:
82:48:27:40:d3:44:6b:78:61:6b:02:30:77:1a:4a:
be:89:d9:c9:31:f1:47:65:7a:80:6f:bf:99:0e:79:
7d:05:f7:42:36:45:c1:2f:88:8e:8f:23:aa:03:55:
2e:a5:12:d4:ad:44:80:b7:d5:05:e4:cd:0a:0b:25:
c2:f6:9f:73:7a:23:f5:5b:e2:e0:c7:50:53:ef:04:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:26:F4:1A:10:2E:AB:F4:25:A8:9F:27:2D:A6:0A:74:91:18:8F:C6
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6f:2d:d6:50:bd:e2:85:93:26:ea:e2:3a:26:39:35:47:31:
8e:1b:be:26:88:01:f1:12:ad:9c:16:f7:e3:08:1d:5b:c9:19:
a0:3d:21:5d:17:55:db:42:57:6e:94:d3:70:3d:98:a5:9f:6d:
a2:63:23:a1:7b:ce:70:bf:76:fb:de:37:79:da:b7:0a:05:ac:
69:14:5b:0d:c5:dc:3a:65:24:26:19:fa:fc:08:a0:38:e2:07:
9e:48:23:bd:82:2a:aa:1b:41:f9:37:18:98:de:c9:c1:a5:07:
ee:5f:8a:55:ea:7a:e1:b1:f2:db:a3:b0:39:07:ec:52:e4:d3:
91:f1:45:19:50:16:72:9b:dc:01:3b:22:f3:67:f2:7b:80:33:
14:4c:38:6a:c0:c4:99:a9:1c:90:43:16:ea:4e:3d:2f:25:3e:
e2:f2:4d:90:fc:e5:46:dd:f3:00:e4:f3:d1:ba:79:fe:a2:1b:
6d:1b:b8:80:39:67:8a:ca:56:40:24:6d:57:5f:94:57:29:25:
19:a7:c3:9b:50:62:9c:33:d6:f4:43:4d:3a:1d:6f:2d:f8:79:
c1:9d:da:ab:96:bd:7f:ea:0e:c9:18:f5:35:aa:b1:31:05:b9:
1f:e6:9a:68:65:a1:71:da:ee:2b:c5:be:c0:12:ed:f0:d7:dc:
be:d3:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:16 2025 by rpki-client