Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: SbVOW1SkTRJknlwwHeKeXCn4oeRHCPWqo8I7A0STa1Y=
Subject key identifier: 65:6A:90:CE:1C:35:AD:88:47:6F:92:5D:AF:D4:0D:1B:F8:F5:05:D1
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 019A526306C657632E4CF6E5AE24BD2726A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 0922
Signing time: Wed 05 Nov 2025 05:00:12 +0000
Manifest this update: Wed 05 Nov 2025 05:00:12 +0000
Manifest next update: Thu 06 Nov 2025 05:00:12 +0000
Files and hashes: 1: GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa (hash: Twu1XyErZ1bzBOtE8/HK3XbggJvMpOYaRXT376BODWE=)
2: XUIGCJfhGsoP5FdVAQmT9lUNYuc.roa (hash: hjmwDLHRKf4c787nov0R6bRVLxtqmM1uwueYf+NK6fU=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: LSijPC25bl6WL+VSZGNqY6Uuk4/93i5HySldPXnwRPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:06:c6:57:63:2e:4c:f6:e5:ae:24:bd:27:26:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Nov 5 05:00:12 2025 GMT
Not After : Nov 6 05:00:12 2025 GMT
Subject: CN=656a90ce1c35ad88476f925dafd40d1bf8f505d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:7a:3a:7b:7c:75:16:38:41:96:a3:51:0e:
51:93:85:15:d5:48:15:44:21:39:0c:ed:18:05:f6:
f6:ad:fb:dd:4e:26:a2:20:bf:d6:e6:8a:d9:3f:2e:
0a:ee:8c:5a:8a:f1:79:49:86:22:7e:72:53:ad:5e:
67:a4:9e:be:85:bf:85:c3:e6:37:60:ca:a9:2d:f2:
c4:c8:a6:55:85:6e:17:05:db:6c:53:36:c8:a2:a7:
3c:20:a4:d2:20:80:02:89:e4:8b:1f:ca:43:7a:c3:
6b:2e:54:f8:6a:8f:10:00:87:58:09:f6:77:38:59:
21:42:3f:e8:82:b7:73:22:c9:86:50:6d:16:af:e9:
a7:a6:6f:96:13:c5:32:88:7e:b4:47:8f:46:57:23:
f2:b0:f0:6b:ed:09:a2:73:99:16:5a:3e:13:f5:94:
76:f1:7c:c0:34:e7:7a:ee:d0:6f:8c:be:88:2d:b8:
5b:89:70:ce:c7:60:bd:36:38:cb:69:f8:54:dc:60:
29:97:c2:04:17:a5:99:6f:55:2f:ee:5d:61:32:1d:
7a:8c:4e:90:5c:f0:02:4b:57:ec:35:1b:36:da:7e:
a9:29:ca:ad:86:7d:0d:70:f4:9a:47:9a:b6:b0:b1:
2e:ef:19:79:92:d1:1f:27:87:09:69:62:42:80:2d:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:90:CE:1C:35:AD:88:47:6F:92:5D:AF:D4:0D:1B:F8:F5:05:D1
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:86:56:54:4d:80:cb:15:4c:19:86:12:bc:59:5e:79:99:c8:
f8:39:a0:64:13:9a:a1:50:71:50:ff:7d:15:68:ca:26:49:14:
4a:f9:f3:34:1e:11:af:26:b9:f5:cd:96:5b:e2:9b:f7:81:0b:
1b:9d:da:ed:72:fe:fc:bf:11:0b:e3:55:91:3d:0b:3e:c4:05:
a6:e7:38:7b:e4:80:74:18:22:54:5c:6a:fe:4f:8a:97:87:8f:
51:6e:04:a0:fb:e2:b1:60:55:0f:e3:0b:93:5d:d8:ca:b5:30:
03:ea:01:2a:3c:c1:8d:f0:75:50:42:ca:14:63:be:97:fb:62:
b4:2b:b5:1a:af:9c:dc:82:f2:b4:cd:ee:e9:35:1f:ee:ba:c0:
68:16:3d:c8:94:9b:cf:bf:3e:1e:e7:02:4d:15:bb:42:bd:1b:
ad:0e:06:a9:45:4d:05:f0:9b:58:ab:0a:0a:89:46:c1:e2:80:
d8:c2:6e:6c:4c:a2:e0:7d:74:52:c6:03:57:7b:75:a3:ed:31:
16:4c:00:02:b8:81:33:06:d8:3f:74:c9:02:78:a7:38:9a:66:
55:0d:a2:8d:1b:92:a4:24:7f:39:27:de:e2:dc:a0:5a:32:0d:
e1:a8:a0:65:15:97:ab:78:f2:b3:01:11:4d:d4:89:bc:41:85:
e8:43:74:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:02:45 2025 by rpki-client