Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: S/skwYU+T24gWjkDvnchhkkGWh2TwIvvlimClrIIDDA=
Subject key identifier: 8F:EC:6A:AF:44:08:AA:90:04:EA:C1:86:1E:69:B4:C1:31:4F:02:0E
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 0199FCFD2EA0C77F8BC8B9300E339A2608D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 136F
Signing time: Sun 19 Oct 2025 15:01:14 +0000
Manifest this update: Sun 19 Oct 2025 15:01:14 +0000
Manifest next update: Mon 20 Oct 2025 15:01:14 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: 7kUN1eXXyRgvwRb1VTJI98Q7vfCJmNEw4jzcRIECKz4=)
2: vOY7PB5NDzFxhVih037o9jJ1bUc.roa (hash: 8OCsn1+9HWmViC4NQ7DEHa7bN4pK4rZb0B/Nsp5g6gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2e:a0:c7:7f:8b:c8:b9:30:0e:33:9a:26:08:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Oct 19 15:01:14 2025 GMT
Not After : Oct 20 15:01:14 2025 GMT
Subject: CN=8fec6aaf4408aa9004eac1861e69b4c1314f020e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:ed:f3:61:33:89:f0:c8:55:53:37:d5:23:
8e:19:c1:6e:96:52:b1:33:99:83:5e:93:ad:9e:49:
10:ac:1f:44:2f:23:55:7c:fb:9f:b0:4f:76:f0:bc:
7e:98:a1:e3:3d:cf:22:9d:8d:00:9b:9b:7b:20:55:
ec:c1:ae:a0:c4:60:05:a8:08:ca:1c:98:0d:1e:c4:
ab:0f:ff:02:8f:2e:19:c9:4a:a0:45:00:42:b8:09:
ae:6d:a6:a4:c4:fa:bd:fa:1c:d3:d0:e5:23:6e:d1:
86:cf:24:86:8f:ee:cd:b2:d1:12:bf:db:35:63:79:
69:88:42:ee:fb:55:10:bd:32:75:0a:9f:dc:42:05:
21:4d:f2:4a:32:8b:e2:8b:93:7e:00:bf:c1:34:0e:
ff:98:ea:19:dc:a5:a6:01:de:7f:5a:88:f0:02:57:
79:29:cd:93:49:dc:20:e2:6a:c2:7b:fc:bb:ed:b1:
57:7d:a7:61:d4:db:f3:0c:e6:0a:09:1f:6d:61:25:
58:1c:6a:aa:07:8a:5d:24:ab:2f:d1:6e:bb:5d:58:
25:23:5c:d8:a6:37:18:cd:96:79:bf:a3:58:0f:67:
a4:dc:53:72:62:7b:6c:07:2f:32:ec:bb:0d:91:ad:
c8:ef:c2:5e:16:56:ee:0b:62:68:10:98:8a:18:26:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EC:6A:AF:44:08:AA:90:04:EA:C1:86:1E:69:B4:C1:31:4F:02:0E
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8d:e0:17:2c:d5:47:0b:17:3e:b1:8f:44:ab:e0:46:03:ef:
98:52:24:19:6b:8f:05:26:86:94:71:75:2a:40:b7:57:9b:d4:
ae:79:b8:ac:c5:81:0f:e1:e9:f8:4a:09:3d:05:d5:d0:b0:82:
3c:6c:4b:30:91:b0:a5:e7:a6:e1:3b:02:a4:d5:f3:0f:71:3a:
43:7e:ca:8f:4a:91:16:95:ee:19:fa:28:26:01:05:64:d5:95:
39:6b:8e:5d:0b:0b:40:5f:1f:57:68:17:bd:1a:12:1a:b4:91:
31:7f:21:26:b3:ae:58:c6:60:31:b3:39:0a:ff:a9:ce:18:19:
ac:bd:0f:e2:73:17:10:05:30:c5:36:20:24:67:3f:42:06:45:
b5:de:da:95:36:0d:32:e2:91:c2:66:cb:35:d0:d4:e4:a8:69:
77:5f:4f:9e:40:2d:06:e2:49:7b:4c:3e:da:15:45:63:5e:7c:
6a:91:de:d7:b3:04:32:65:9f:54:49:ad:be:9e:c6:07:75:4e:
60:0e:f1:cd:12:f8:e1:ad:70:e3:9c:90:4b:bc:30:b6:4d:3c:
fa:05:60:e0:c7:b1:a7:c1:44:f2:6c:3a:e2:a6:3d:7f:5d:b1:
ac:81:ee:66:eb:0c:fb:64:7a:75:09:8f:5a:38:0a:0f:85:96:
f4:ff:bb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:28 2025 by rpki-client