Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
File: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft (raw, json)
Hash identifier: TMvd25obSLeFTMtSkMQ3hfa3n9D3igmZIZNmdEIfApo=
Subject key identifier: 49:6D:8A:6A:83:E8:74:9B:76:44:F6:62:F7:BF:07:D8:E4:F6:93:40
Authority key identifier: 87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
Certificate issuer: /CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Certificate serial: 019A4F99587B99048BEF576CA0662CA2BDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
Manifest number: 10F3
Signing time: Tue 04 Nov 2025 16:00:40 +0000
Manifest this update: Tue 04 Nov 2025 16:00:40 +0000
Manifest next update: Wed 05 Nov 2025 16:00:40 +0000
Files and hashes: 1: 86_3LCbOcCp3yM191EWRi4FTvKM.roa (hash: T6YVBcckx9oAAL2sgQLtUYTYtIf9ZyYKJMrHcxK/x/E=)
2: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl (hash: qhFpF04f5Wxd/X0xb3Rmxr0El51h1ZRESkqcQyCUE2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:58:7b:99:04:8b:ef:57:6c:a0:66:2c:a2:bd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Validity
Not Before: Nov 4 16:00:40 2025 GMT
Not After : Nov 5 16:00:40 2025 GMT
Subject: CN=496d8a6a83e8749b7644f662f7bf07d8e4f69340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:97:bc:b5:c1:55:53:ec:92:b2:b0:62:fe:
57:dd:13:ef:f4:d5:d2:8b:0a:17:fa:c5:fc:24:01:
ca:da:aa:cb:cb:38:fc:b6:df:72:4d:2f:4b:75:e9:
e7:17:e6:73:4f:18:22:2b:ec:81:25:c5:d8:db:29:
c9:12:a2:8e:b0:6e:47:92:41:4b:67:68:fa:a9:b9:
35:0b:e0:ba:79:21:a0:09:4a:68:1d:2f:42:07:1b:
74:9e:1b:38:dc:16:7f:c8:86:65:2e:ac:c1:0f:68:
b7:a1:60:83:82:16:9f:56:b9:68:c9:a1:6e:73:16:
55:59:55:e0:ff:05:b7:94:37:a8:12:86:3c:85:ce:
83:84:4d:e5:91:14:e5:50:c7:15:6f:a8:b6:de:c9:
5c:cb:b6:aa:a0:47:87:50:eb:e0:29:af:7b:99:64:
bc:a3:ea:e6:a8:3e:30:70:c9:ef:43:d6:d5:d3:fd:
e9:2e:7e:71:d3:86:42:30:63:f3:7f:bf:44:ee:61:
4e:c1:7b:ea:98:33:fa:b8:0f:49:b3:b3:3e:6c:e4:
75:37:41:62:dc:5f:a9:f4:a6:b8:57:dd:4b:e8:8e:
3f:00:71:a4:29:50:56:1b:ba:bd:87:7c:38:f5:58:
68:a4:45:2e:78:58:fe:94:3e:c6:32:2d:fe:64:27:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6D:8A:6A:83:E8:74:9B:76:44:F6:62:F7:BF:07:D8:E4:F6:93:40
X509v3 Authority Key Identifier:
keyid:87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d8:e0:ae:27:9e:d2:85:ac:46:2d:c5:fe:04:e0:92:61:86:
27:59:b0:02:51:4b:36:9d:cc:1a:44:55:25:57:dd:1a:0c:ab:
5b:6f:c9:4e:af:13:6f:79:6e:fc:59:39:f9:33:53:47:40:b4:
49:f2:21:87:a6:68:b3:f4:33:b8:bd:da:44:eb:35:db:16:77:
90:00:aa:be:c2:10:98:d6:38:61:2d:da:46:84:fd:bd:8f:9a:
f9:e8:87:3e:be:64:0f:65:20:3b:25:cd:0c:a2:1d:a3:f8:ea:
c2:e1:53:05:7d:da:07:a2:65:c9:06:d6:fd:9b:5e:24:59:d9:
ad:1f:e7:79:6a:2e:bf:b1:b3:4a:82:2a:ec:33:89:ff:cb:0d:
9c:f8:9a:db:a4:7f:6b:c3:9d:a4:0a:76:d3:64:79:d4:70:f0:
96:6f:31:79:cb:cc:d3:79:86:1e:0a:55:2d:0a:f0:4e:be:13:
60:e6:4c:38:af:25:aa:6c:81:8d:8b:6e:2b:ab:54:07:f7:6b:
ce:7c:52:28:96:ef:9d:e8:5e:4f:ff:65:fe:6f:5b:64:d0:12:
6c:e8:bf:f2:95:30:22:69:7d:c2:78:48:35:e0:2b:ff:6f:94:
7a:6b:3d:3d:3a:58:e7:65:b6:be:c0:b7:a4:4b:c0:47:63:b3:
25:8c:fd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:06 2025 by rpki-client