Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File: hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier: ftHuRUayqYTeMX/1HijRLQW0Gnn1RVcuYqTo8+mESPE=
Subject key identifier: DF:2B:D6:DB:80:42:5D:08:EF:20:17:28:74:05:ED:C8:77:75:CB:7B
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer: /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial: 019A5263310D4B5926A5A317C2E0202C0D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number: 08BC
Signing time: Wed 05 Nov 2025 05:00:23 +0000
Manifest this update: Wed 05 Nov 2025 05:00:23 +0000
Manifest next update: Thu 06 Nov 2025 05:00:23 +0000
Files and hashes: 1: Wz8gpxFEqCzA2qAsOF9aMTaoyYY.roa (hash: 8Yp0I8zuDn5gEhy8EguTTzeHbg2UtzMf6sSJEuTPZH4=)
2: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: K/djGhxuu+155Jj/Ee3JReiHqAJRnvfUShX4ySlOw20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:31:0d:4b:59:26:a5:a3:17:c2:e0:20:2c:0d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
Validity
Not Before: Nov 5 05:00:23 2025 GMT
Not After : Nov 6 05:00:23 2025 GMT
Subject: CN=df2bd6db80425d08ef2017287405edc87775cb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:41:d9:d9:4e:fd:a9:e4:9b:16:35:7a:85:
07:10:d3:42:e5:0d:03:b9:07:c8:c6:55:c3:9e:67:
c1:37:34:4b:70:4e:4a:72:81:f7:f1:00:ec:b0:ba:
54:6b:b8:bc:ba:0c:ad:95:5c:af:da:a8:94:a0:f8:
af:5e:d8:6a:01:40:f0:3e:e0:4a:35:ee:6f:74:48:
1f:11:12:9d:a9:f9:93:ae:4f:24:7f:50:bf:ce:84:
2f:65:66:a6:df:a1:d0:f8:e5:75:31:e9:28:26:d8:
00:7b:20:5b:5f:8e:4f:ea:82:13:d5:a8:15:d6:11:
ce:93:d5:46:47:46:40:70:16:70:69:ad:47:e1:2f:
6b:91:15:42:bf:f9:ca:dc:73:11:6b:65:73:5d:d6:
4b:d8:5a:7c:09:1a:aa:78:2e:88:2b:dd:87:db:9c:
49:3e:d2:4d:8a:f1:25:94:be:f4:14:5a:7e:61:c4:
7d:0e:29:88:4f:5a:02:db:b9:eb:cc:25:f9:f3:df:
4e:f0:1f:25:68:2b:a6:e2:62:d7:14:de:ad:15:58:
3c:a4:6f:d5:56:63:6e:d2:df:57:3f:fc:93:3b:6e:
fe:bc:2e:9a:d3:ef:ed:18:54:59:ee:26:50:63:2e:
f5:46:04:f6:81:32:54:8f:e9:69:0e:a8:46:56:c0:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2B:D6:DB:80:42:5D:08:EF:20:17:28:74:05:ED:C8:77:75:CB:7B
X509v3 Authority Key Identifier:
keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:48:29:79:d0:b7:2e:58:a6:e6:0d:68:52:0d:5a:61:d7:ff:
07:05:11:3a:cc:61:ae:72:d8:ef:9c:72:78:eb:45:0a:0d:37:
5a:5f:48:29:ab:ae:65:05:79:8e:fc:bc:84:5f:fd:a7:c7:1d:
0f:f2:a1:f4:20:d2:f6:07:58:e8:58:a6:04:cf:16:54:9a:46:
cb:17:c7:51:95:cc:78:fa:30:33:30:92:48:01:c4:97:c4:13:
6f:ff:35:77:28:48:db:13:83:b5:12:ca:0f:60:19:96:01:e9:
4f:81:11:24:50:74:cf:b4:5d:54:60:51:18:46:c8:f3:79:9c:
7e:61:ab:ae:82:1e:1f:04:f0:8d:06:7d:c0:b7:b5:39:fe:95:
60:40:c5:a4:2b:30:3f:b6:8a:8c:51:20:97:d3:c2:da:31:c1:
e9:b0:51:0c:c6:f3:f6:3c:c0:e5:3e:55:19:5a:19:0c:85:3d:
1f:11:e2:82:8e:cc:29:fa:d0:a2:1d:56:59:a2:77:40:f8:27:
bf:a7:66:0d:00:2e:fa:b5:e3:b7:04:7a:86:5b:53:6a:72:cb:
e7:ef:bc:17:63:03:e0:5f:41:6f:c0:0c:46:95:0e:19:f4:7e:
88:34:4f:96:eb:b4:0a:77:a2:d7:28:b0:6d:80:da:f1:7a:a8:
34:0b:3d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:36:40 2025 by rpki-client