Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: 0GnKAJE1nGj9c6/gEvwDV/8aOOHFhIvoCXRJDB2vfVw=
Subject key identifier: 5E:0E:2A:FF:1A:57:DA:E0:A6:84:F2:0F:7A:9C:04:75:5E:CF:DF:09
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 019A4E4FA963F0E4BB0AAD7C4A268740F8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 1293
Signing time: Tue 04 Nov 2025 10:00:34 +0000
Manifest this update: Tue 04 Nov 2025 10:00:34 +0000
Manifest next update: Wed 05 Nov 2025 10:00:34 +0000
Files and hashes: 1: 4cnRWY5gtsfuxJysdz-vN0qrOUs.roa (hash: 93jxXfokl+svyBU1O0Hr6w6zv+AavA15Ll9wQ0fHJCo=)
2: 7L93z_qlhSOtd1RZOlWCJUWvg_o.roa (hash: vV2gGeYtK37+wnV0Ydlju7P2SHZgL0mA9o+Vjq7iAwY=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: SYX01cd/NnfIPlGPO9LxCYPaltvFOBYdrFa7DML31Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a9:63:f0:e4:bb:0a:ad:7c:4a:26:87:40:f8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Nov 4 10:00:34 2025 GMT
Not After : Nov 5 10:00:34 2025 GMT
Subject: CN=5e0e2aff1a57dae0a684f20f7a9c04755ecfdf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:e7:d3:ee:23:62:87:63:29:75:18:35:d3:
fc:39:12:9c:10:25:ee:32:7a:c9:8c:02:85:11:26:
4b:7c:f3:74:11:1e:e8:e7:e5:97:89:36:3e:ef:c9:
7e:17:98:f0:e0:09:e7:08:a0:33:f7:04:46:2b:28:
f2:c3:c9:d9:50:2b:16:f9:9f:04:bc:0f:36:f4:f8:
3c:ba:42:eb:17:ed:5d:88:de:66:b9:ce:df:11:db:
3f:d0:a9:d9:09:2f:dc:79:18:f6:26:8f:e9:81:4e:
95:24:d4:57:07:84:2e:19:c8:e2:81:55:8f:19:f5:
17:73:37:13:b5:b0:b7:96:ac:aa:12:07:71:be:81:
af:44:a3:f3:4e:ea:06:4e:02:30:f6:e3:37:4d:82:
19:10:87:2b:a8:80:bb:87:b1:4d:78:90:4e:cc:f4:
fb:ad:8c:96:6e:dc:45:29:42:ba:65:b4:fd:d2:7b:
04:be:6d:d4:27:c7:36:b4:8b:6f:41:28:ee:e1:f4:
91:14:05:01:45:e5:bc:3f:9b:55:73:50:0c:78:20:
db:13:74:7c:d6:64:d3:6b:bc:14:7c:ec:3d:96:1f:
9d:b9:02:ff:90:62:fd:e1:11:bb:26:7c:ed:db:95:
e6:59:da:4b:17:f4:17:c3:ac:ee:93:af:d0:4a:d4:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0E:2A:FF:1A:57:DA:E0:A6:84:F2:0F:7A:9C:04:75:5E:CF:DF:09
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:aa:6c:bb:e2:b9:16:2d:ef:6d:81:f2:4a:32:0b:43:b9:d3:
8e:26:66:95:4e:8f:fc:7f:d9:5b:58:03:fb:51:e2:4e:41:7c:
f8:e5:2f:01:a9:91:7a:cd:7c:39:ce:bd:2d:16:2a:8a:83:96:
0d:59:97:b4:14:7d:14:79:88:e8:fc:a2:ec:d9:6e:a5:b2:96:
bb:24:02:45:11:5b:57:76:b3:6d:08:06:26:44:7c:43:39:40:
f8:b4:51:4b:ca:b6:a7:ba:a7:d9:c9:e5:aa:f6:45:98:3c:37:
90:f3:a2:a4:2f:b2:d7:94:ad:ce:0a:66:c6:d8:85:b5:83:36:
9d:63:7a:7a:0f:50:3b:3c:0a:d6:a0:f2:1f:e0:42:30:74:76:
44:24:fa:b0:83:a5:f4:0c:24:10:cb:4a:e7:53:c8:8b:94:f6:
7b:e2:22:21:7f:47:3a:71:69:4b:7e:2b:d9:48:c8:ed:00:83:
3c:ab:90:db:aa:60:c4:68:2e:e7:ef:c4:f1:8e:17:2a:d8:47:
c1:91:5f:28:16:ae:4a:9b:48:f0:de:70:1b:8d:46:e9:e6:a5:
23:16:8c:8e:f3:c4:51:fc:59:c7:ca:a4:c9:85:68:2a:eb:66:
49:a3:d6:44:68:c9:b1:0c:74:03:4b:97:62:4d:a7:b9:f8:83:
59:e5:39:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:09 2025 by rpki-client