Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
File: hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json)
Hash identifier: UUC4uW83ysjrZUHiZneYlRY89CzCo/gcCvs2PaDrjuk=
Subject key identifier: 77:58:3D:27:C1:80:8E:E3:A1:E0:3E:F0:81:C6:46:F1:3A:AA:0B:74
Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Certificate serial: 019A54BF6CBB663426D0E49979DB35CE5CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
Manifest number: 2A
Signing time: Wed 05 Nov 2025 16:00:22 +0000
Manifest this update: Wed 05 Nov 2025 16:00:22 +0000
Manifest next update: Thu 06 Nov 2025 16:00:22 +0000
Files and hashes: 1: 8hT_E2lP_XAAVJsTroBoa69lbkY.roa (hash: wsftIcKlCqe+R912iWtJnREYgPP40XIaQmbFqEEoMJE=)
2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: voEkfSXfwLx3JFxLikmVx7mvfP5f4IhE0PKph7EhxQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:6c:bb:66:34:26:d0:e4:99:79:db:35:ce:5c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Validity
Not Before: Nov 5 16:00:22 2025 GMT
Not After : Nov 6 16:00:22 2025 GMT
Subject: CN=77583d27c1808ee3a1e03ef081c646f13aaa0b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:41:fc:56:23:7d:3a:17:da:46:3f:22:07:bf:
ef:b7:f2:ad:c7:32:3e:55:64:d0:b3:b3:22:57:85:
ee:2f:00:1c:02:d5:b7:8d:26:6f:a1:d4:4d:f4:8e:
fa:2a:d1:7b:c8:b3:bf:9e:49:00:20:11:fb:bc:44:
89:6a:92:b5:2a:1e:67:51:c0:c2:84:16:f8:2e:00:
11:5d:cd:6f:2c:14:cc:13:d8:57:0a:29:d3:62:3a:
f8:de:bf:36:7e:0e:98:9a:e3:bd:ed:74:15:aa:4d:
aa:6e:c5:c0:f5:37:4f:44:a5:dc:1c:38:c5:d9:59:
8f:31:1b:95:ff:15:27:c6:d9:ea:25:71:93:9a:07:
70:02:35:f0:95:95:8d:3a:d3:7a:15:48:82:e3:d1:
08:8a:59:02:1b:88:c6:b4:8b:e8:a1:f0:80:79:4f:
73:ee:d3:b5:ab:e5:63:04:f1:09:30:55:30:59:25:
08:e9:0e:f6:dd:48:c9:b1:df:25:af:cd:34:3f:a3:
9a:31:cd:82:0c:e0:cc:57:4e:c5:e2:b6:12:a7:e0:
4e:f0:3d:b3:47:0b:1b:56:b1:0c:d2:86:90:3f:01:
e9:7b:ab:91:b4:bc:87:d4:3a:ba:69:2b:30:ed:f1:
7b:e5:fa:0e:a2:a5:bd:57:e6:9b:ae:13:1d:97:c8:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:58:3D:27:C1:80:8E:E3:A1:E0:3E:F0:81:C6:46:F1:3A:AA:0B:74
X509v3 Authority Key Identifier:
keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:26:c0:1d:6d:ef:b8:50:e6:47:57:d1:18:7a:0e:a6:dc:1d:
14:cd:34:77:a0:59:f9:bb:13:e1:7f:50:9c:9c:2e:5d:e1:8a:
f3:52:6c:00:01:47:2b:d0:50:8b:71:e2:c2:6e:a9:79:b1:50:
f5:73:c5:bd:85:1f:68:25:cf:89:3d:aa:96:8c:b2:e2:62:f8:
17:73:59:fd:1a:db:39:54:b2:87:da:1e:92:75:99:fb:9a:22:
3c:df:51:a7:74:c7:9f:4b:36:9e:e3:5e:f1:a9:db:e7:07:4b:
c0:3d:b0:d1:a8:37:1c:3d:f1:3c:81:74:3e:01:00:9b:55:af:
09:c9:fd:8c:3d:ba:4a:e6:09:a7:b2:72:9a:2b:fc:94:26:8e:
22:24:a1:6a:70:83:61:05:f3:d0:1e:36:43:87:fc:53:03:78:
6c:7a:30:d6:ca:f8:97:1e:a7:52:21:af:65:66:35:82:0d:96:
3d:d5:06:40:e6:98:90:7b:a6:9b:9f:08:3e:40:83:2b:1e:4d:
42:62:41:8d:d3:88:5e:08:9f:cf:77:d0:fb:14:20:6b:9d:92:
0b:18:9d:08:ff:f3:04:30:41:32:64:91:43:ea:16:16:00:42:
74:a3:d7:97:97:ec:85:19:82:20:9f:ad:5a:9d:68:57:d1:08:
a7:5d:e8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:06:46 2025 by rpki-client