Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
File: HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json)
Hash identifier: 1bGMN+GhzFXVjpUAp7XjFNTKt2ATnS11ahH3axTDyJw=
Subject key identifier: 53:7E:C9:0F:F6:31:CB:C1:CB:8A:6A:BF:75:57:B5:7B:34:4F:BC:1F
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial: 019A006C4CA4CACF3A6067A9F2D9ABE7218F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
Manifest number: 0E67
Signing time: Mon 20 Oct 2025 07:01:28 +0000
Manifest this update: Mon 20 Oct 2025 07:01:28 +0000
Manifest next update: Tue 21 Oct 2025 07:01:28 +0000
Files and hashes: 1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: MGRSo+OyqYQ27IzBxEDaVfrcHXsqJ3XGX+qUg6Jcn90=)
2: qBbXPlomssD9zrP_xFljqdR0LbI.roa (hash: Gow+NF8w68xqHQfvdIHVUtAvsOi+ZzLSZN8/SeU/9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:4c:a4:ca:cf:3a:60:67:a9:f2:d9:ab:e7:21:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Validity
Not Before: Oct 20 07:01:28 2025 GMT
Not After : Oct 21 07:01:28 2025 GMT
Subject: CN=537ec90ff631cbc1cb8a6abf7557b57b344fbc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:c6:a6:6d:41:a7:36:14:87:73:37:eb:90:
59:02:c6:67:06:d7:4c:fe:b5:66:06:4b:29:6d:a8:
a2:8d:e2:81:c0:5a:31:07:2a:fa:4d:04:06:40:e0:
6a:cb:2d:f6:41:0a:4e:26:8b:c7:f4:82:71:18:d1:
6c:43:be:d1:14:49:d4:27:b4:2c:bc:33:ba:ff:61:
f1:1f:8d:6a:fe:76:2a:4c:79:ab:84:e7:ad:4b:34:
84:d9:57:54:87:74:95:cd:29:2e:2e:46:22:da:00:
b7:76:be:0a:23:e8:49:2f:c1:bd:31:3b:61:eb:d2:
ca:80:35:70:48:26:5c:42:6c:72:25:32:5c:09:1f:
79:d6:32:b8:dd:d7:4c:df:00:d5:3f:55:a8:51:d2:
5b:6a:19:2d:f1:2b:4e:f2:e2:7a:71:f8:f5:24:6e:
f3:47:bc:ec:b2:1a:70:fa:17:67:3c:95:a4:4b:6b:
4c:d3:2c:e5:25:f8:c5:af:57:82:ba:99:42:fe:46:
0b:b2:96:fd:b3:84:55:88:6f:c0:49:88:81:c0:07:
e4:46:47:27:a1:8c:9e:63:71:62:5b:78:5a:30:d6:
31:9d:2f:be:41:1c:6b:99:08:d6:9f:48:81:f5:92:
56:78:dd:ed:b8:b0:80:82:69:55:2e:cb:ef:cc:82:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7E:C9:0F:F6:31:CB:C1:CB:8A:6A:BF:75:57:B5:7B:34:4F:BC:1F
X509v3 Authority Key Identifier:
keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4b:09:80:97:37:91:91:31:fd:3e:70:28:d7:b1:a8:bf:b6:
2e:c9:b2:f9:4c:d7:84:c1:3c:db:1a:d9:ca:81:92:fd:7a:78:
db:d8:e4:3c:38:a1:82:ec:61:8c:0d:43:6c:05:33:99:f9:be:
a7:a0:c2:f4:5f:99:38:2e:1b:76:c9:a6:08:a1:95:f5:87:61:
32:3c:8b:9f:8b:c8:3d:65:9c:06:49:89:a2:fa:6a:c6:98:81:
0b:05:ff:5e:ed:79:7e:68:c4:c4:38:21:dc:3c:6e:1a:79:0d:
19:a2:e3:a2:5d:92:32:4c:57:84:f3:2a:f4:62:ba:37:28:5f:
2b:48:d4:c3:e6:95:b2:8c:f3:04:cc:4a:a7:8b:d6:85:7e:e6:
dd:16:eb:0e:e9:69:e4:d3:c0:83:8c:92:6b:80:a6:ee:32:f7:
f4:f5:a2:69:97:05:72:f6:57:06:ae:0f:2c:82:e7:72:ef:d3:
d4:44:a3:0b:74:be:1c:a9:9a:13:f1:d4:7c:67:51:76:16:3b:
93:e4:93:81:a7:5a:b0:57:19:a8:c8:89:df:55:07:c8:5f:ff:
ac:95:19:e9:a3:17:9c:a8:5a:63:a0:dd:81:73:4d:0b:3c:ee:
61:11:b2:de:1b:25:bb:e2:34:59:5a:8c:88:d6:ee:32:15:67:
06:27:c7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:43 2025 by rpki-client