Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File: 8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier: l5CQ625Ca9ah8UG2wk60HG+dci1kqVgiRqit+FGG9S8=
Subject key identifier: A8:89:E1:9E:B4:41:12:B6:B6:07:F8:C8:B5:92:07:0A:06:E5:53:D8
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 019A54BF4894F2A471B4772DC6A790C8B27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 16:00:13 +0000
Manifest this update: Wed 05 Nov 2025 16:00:13 +0000
Manifest next update: Thu 06 Nov 2025 16:00:13 +0000
Files and hashes: 1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: AvV5G3S/HPTRXQ6Oagmvq5vVyqK4S2chITZttIjOQiA=)
2: uzaT_8pYRSOjnRLn-VDCRDMHjkw.roa (hash: BTL6zzsEp/zMhbPEtqOYQnpjz6sJkx1lWw25F56hHZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:48:94:f2:a4:71:b4:77:2d:c6:a7:90:c8:b2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Nov 5 16:00:13 2025 GMT
Not After : Nov 6 16:00:13 2025 GMT
Subject: CN=a889e19eb44112b6b607f8c8b592070a06e553d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:ec:ca:09:79:bd:fc:a5:a5:27:8d:7e:c6:
2c:ff:fb:b7:ba:1a:61:d9:cf:f0:23:f3:3d:b2:7a:
e3:1e:f8:d5:20:1d:d7:89:90:e5:cb:b6:fe:49:95:
98:61:67:b4:ec:e3:b8:3a:8c:8d:a4:27:76:e1:98:
72:43:77:b4:0d:08:24:72:fb:93:bb:58:b7:72:17:
0c:9c:55:ff:30:21:da:9b:d7:1d:e4:eb:b5:03:67:
4c:b3:1e:09:43:2e:48:59:d3:3c:90:54:91:2b:e8:
a2:b1:1a:fb:46:88:b6:bf:19:f8:c7:ac:f1:c5:e8:
9e:60:0a:93:09:d1:55:65:43:cd:35:80:04:02:4d:
14:7a:ee:8d:ae:49:6f:f6:3d:04:10:98:8e:36:c0:
ad:0b:9a:b6:7b:1a:db:f0:ad:c9:7b:11:43:c2:95:
34:80:2e:8e:b4:5f:c5:35:16:51:a0:f9:e5:a9:72:
b6:98:16:c6:ae:51:c0:50:42:36:fc:58:92:4b:91:
9b:57:23:f2:78:da:f1:c7:62:18:e9:02:78:ef:91:
0e:aa:23:ed:d4:fb:da:57:63:97:34:be:5e:d2:da:
4d:ef:db:8d:54:d1:08:25:a7:d8:17:e9:8a:b5:ec:
92:0b:ff:bb:50:14:4c:4e:80:ad:48:66:2e:a8:55:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:89:E1:9E:B4:41:12:B6:B6:07:F8:C8:B5:92:07:0A:06:E5:53:D8
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5a:7f:fe:4e:0a:e6:ff:49:31:5b:74:d6:0d:54:83:6f:40:
72:87:32:aa:84:10:1e:82:83:83:9c:dd:d0:f3:72:b1:9d:73:
80:8e:bd:17:de:b1:d7:68:05:0f:f7:07:c7:11:74:46:59:b5:
a4:44:4d:8b:9d:36:c3:b7:59:f9:75:bc:f9:f2:98:24:61:80:
c9:0b:fe:37:f5:23:f4:d0:69:f3:83:5d:81:19:99:3a:ca:6d:
d6:c1:aa:66:9a:c2:ba:2e:d1:c9:48:6f:b0:c1:63:9a:e8:8a:
7a:be:5f:1f:1a:9b:21:cf:63:82:65:1f:b3:cc:8a:5b:c2:95:
31:e0:6d:62:38:12:dc:f9:92:c1:2b:41:c6:d1:37:c8:ef:38:
4c:f8:11:8b:02:b2:cc:c8:d3:9d:44:f1:a7:05:03:92:b4:8a:
8b:4b:bd:d3:04:c0:5d:18:29:c9:4b:66:25:7c:01:6e:ce:40:
4d:52:05:67:a6:8e:a8:69:a1:14:3d:b2:44:6a:66:f7:bc:9d:
2c:67:ca:5e:2e:fc:21:e6:a2:3d:bf:eb:47:54:3c:e5:e0:d7:
3d:fe:5d:9b:a7:81:d9:a8:60:f6:4f:a0:bf:1a:39:e4:4d:43:
95:8c:6d:d9:ed:92:67:93:82:12:15:33:bb:34:0d:c5:76:6f:
8d:a6:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:27:52 2025 by rpki-client