Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
File: HgUGRdac54HkkMDzxJle5tTmB4s.mft (raw, json)
Hash identifier: o3UiAjK0c/P+nTM2D97pKKURRUXARWgkIWD2V6qinsA=
Subject key identifier: DB:37:09:EE:2B:60:F9:51:20:90:69:74:A5:84:8A:93:45:5E:92:44
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial: 0199FC58DB781DCCC68CC091287BCA38F0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
Manifest number: 08BC
Signing time: Sun 19 Oct 2025 12:01:45 +0000
Manifest this update: Sun 19 Oct 2025 12:01:45 +0000
Manifest next update: Mon 20 Oct 2025 12:01:45 +0000
Files and hashes: 1: Cng8TcnIXSMG5gaf3EVbnwwbQjk.roa (hash: SlPAu0/v+q9AU8NTLPmY4PB0nlmzfGz86P4I7oW5+Ns=)
2: HgUGRdac54HkkMDzxJle5tTmB4s.crl (hash: fyJQYnOpZUJRRV+ffLPNEG6STR0Sbi7ZZ4oT3YJVc9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:db:78:1d:cc:c6:8c:c0:91:28:7b:ca:38:f0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Validity
Not Before: Oct 19 12:01:45 2025 GMT
Not After : Oct 20 12:01:45 2025 GMT
Subject: CN=db3709ee2b60f95120906974a5848a93455e9244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:08:9c:27:e7:97:18:62:4b:a6:e0:9d:ae:
6a:e2:c2:30:82:43:4d:7c:91:2c:28:d8:4c:ea:27:
cb:c7:f2:14:dd:92:6e:3e:23:4e:17:ac:93:9f:ba:
b8:cc:08:32:23:6d:4a:0d:43:08:4f:2e:84:08:ea:
33:eb:c0:a9:8c:27:4b:82:84:cb:c9:5b:65:16:b5:
17:27:40:4a:b6:61:09:3b:e4:74:ec:ce:a3:f7:f7:
6e:39:91:da:e0:4a:9a:01:a5:73:97:79:3a:96:a6:
b5:75:49:c2:f6:01:1e:da:3d:e2:aa:8c:53:47:48:
2d:06:2e:e1:91:0a:11:76:48:5a:e8:7f:d6:f8:2f:
80:c5:55:e5:16:fe:ce:a9:e2:15:f7:86:74:5a:8a:
0c:3d:38:ee:e6:94:b9:3b:46:8e:1a:d1:af:d6:c3:
04:f5:51:17:7b:3e:fe:c3:38:97:a0:a5:90:f2:8f:
02:06:f6:11:9e:6b:41:25:34:ee:c7:90:49:23:44:
d1:35:77:e9:89:63:4d:a0:de:ea:06:3d:3f:60:5e:
eb:4e:63:5d:f1:0b:07:b7:5c:3f:0f:85:12:06:43:
c1:36:94:f7:8c:43:8a:ba:87:bf:b3:f4:6f:db:28:
e7:45:f7:95:2f:75:00:34:ea:8e:85:ae:f6:e2:46:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:09:EE:2B:60:F9:51:20:90:69:74:A5:84:8A:93:45:5E:92:44
X509v3 Authority Key Identifier:
keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5f:64:af:2f:b0:0e:c6:99:07:4c:70:46:84:d4:6f:49:31:
af:60:33:1a:34:41:48:a7:1a:9c:a3:48:31:44:d1:0f:ff:e1:
40:37:76:3d:9c:93:2b:55:fe:ca:20:86:9b:51:07:c0:0a:e7:
dc:4a:37:f5:c8:ca:d7:3e:41:5b:a0:66:e9:50:70:ce:95:65:
03:50:1f:d2:62:50:e7:55:b4:ce:0a:30:a1:98:05:45:9f:74:
b3:7c:50:20:82:e0:48:65:bf:28:cc:f5:d8:13:83:c7:39:20:
a8:e6:56:0c:6c:75:23:3c:06:0f:5c:4e:8e:67:ea:4d:a7:11:
33:91:a6:1e:87:37:16:57:22:63:c5:aa:d4:e9:08:54:26:e5:
83:a3:a9:84:31:7b:38:a3:0c:e1:76:70:65:54:8b:fd:4f:66:
9d:a6:10:5f:53:98:04:13:9b:d8:4d:3a:03:c1:ad:43:e4:73:
c9:8f:cb:2c:ce:bc:21:bf:2f:f9:83:7f:fc:4d:e7:bf:6a:a0:
40:1a:16:78:01:19:05:3f:69:5e:4f:3f:92:c2:19:68:d1:e7:
e6:33:d2:36:78:e5:b6:f2:2e:33:0f:d5:0d:64:8a:05:36:e3:
32:4b:ae:3a:ee:b0:3e:e8:8d:1a:62:b8:9e:2c:10:f8:55:d7:
19:7e:09:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:58 2025 by rpki-client