Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File: 8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier: RoQM6BW7kx8IfSljWzTfJE2vGNcSoeY9DZzGtyFwcfg=
Subject key identifier: BA:E5:D4:14:A9:9D:F4:21:6F:B3:49:E3:98:A9:5F:9B:46:88:FC:BB
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 019A50E2C3944E0AF4830059C66B05575E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:00:29 +0000
Manifest this update: Tue 04 Nov 2025 22:00:29 +0000
Manifest next update: Wed 05 Nov 2025 22:00:29 +0000
Files and hashes: 1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: A8H3Hla7OWbajKByVEKuNBrE/Bs8+W9i7Uf0lDQRtJk=)
2: uzaT_8pYRSOjnRLn-VDCRDMHjkw.roa (hash: BTL6zzsEp/zMhbPEtqOYQnpjz6sJkx1lWw25F56hHZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:c3:94:4e:0a:f4:83:00:59:c6:6b:05:57:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Nov 4 22:00:29 2025 GMT
Not After : Nov 5 22:00:29 2025 GMT
Subject: CN=bae5d414a99df4216fb349e398a95f9b4688fcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:74:8d:8a:10:6f:0e:e5:03:c6:84:db:1d:1a:
02:b6:2a:14:57:b5:d4:e8:f8:71:53:57:45:d6:f0:
1d:7f:19:5b:6e:68:a2:53:8f:fc:a5:7a:10:a3:47:
aa:42:aa:f9:43:2f:b9:de:ba:91:55:3a:e4:f2:66:
7b:99:2a:a9:04:81:a8:6c:e0:3e:2b:57:71:97:00:
b0:2b:b8:1d:3a:b5:d2:bc:0a:de:09:a8:04:b4:2b:
8f:db:09:61:ba:89:d9:ae:58:0d:25:5d:5d:34:38:
c2:e0:cf:c3:1d:7b:57:ca:ef:e2:68:a4:2a:58:fa:
c2:60:27:c5:e4:2e:15:77:02:c0:fe:bb:bb:62:cb:
c8:03:4a:2a:db:0f:5f:d7:38:18:0f:59:58:18:27:
5c:ae:fb:eb:7f:e1:bc:4d:44:06:ac:c7:c4:73:fe:
35:30:1f:75:0c:24:f5:77:4f:6d:be:ab:bf:f9:3d:
7f:8b:1d:0f:f9:e5:e2:8f:54:29:a2:14:96:bb:eb:
83:8e:87:94:04:a4:42:93:f7:d2:d3:d6:dc:62:08:
ce:16:5d:6b:57:87:ef:44:6d:d4:b9:c1:89:b4:b8:
74:26:d8:f3:d1:bc:91:72:25:d0:03:f4:fb:a7:9f:
36:58:12:be:15:cf:84:21:69:8a:06:42:f1:f8:75:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E5:D4:14:A9:9D:F4:21:6F:B3:49:E3:98:A9:5F:9B:46:88:FC:BB
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ae:cf:6b:b6:cd:08:5f:fe:c5:3a:67:48:db:96:a0:5a:4f:
44:3a:16:34:fe:dc:09:90:cf:c4:a8:da:b7:d9:f6:9e:f4:f6:
12:ef:b9:6d:28:97:c7:03:c8:9b:4c:ff:0b:8e:0b:d4:3e:d2:
84:d9:5d:19:20:3e:6a:5b:04:20:10:aa:8e:f3:ab:b6:db:3d:
f1:c9:31:28:cb:d1:ac:c8:c5:52:fb:8a:32:0f:ef:3c:12:17:
c4:18:2d:c6:17:eb:dc:b1:68:de:72:97:d0:b9:25:4c:89:79:
74:3f:f0:82:09:60:0b:cd:b7:77:04:aa:16:9f:9f:ac:a1:3c:
5b:c7:5c:33:0f:f2:e8:81:4d:2e:e7:30:2d:7a:99:54:71:42:
10:2a:8c:0c:86:20:d2:30:47:14:9c:bb:d2:8b:9e:ab:28:d1:
4f:b4:06:f3:d3:2e:17:14:16:96:d0:e0:64:ed:20:fa:83:d4:
57:15:2d:11:72:f8:cb:cc:b0:b5:5d:bd:66:f3:9c:15:8d:b8:
77:e8:43:d6:f3:c5:1f:1b:94:96:42:3d:0d:c9:de:ef:93:01:
25:23:7d:2c:94:38:4f:6a:cc:c5:be:b2:97:1d:24:d9:eb:ae:
a8:68:23:4d:2a:db:29:2c:51:e3:be:63:3e:22:05:14:38:e6:
e1:29:9b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:15:54 2025 by rpki-client