Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: PkZcgDt6CWKq1qaCZT4UkCOpt+zfaYIEPqimf2dAA7k=
Subject key identifier: 8B:CE:9D:E7:57:81:1D:EF:1E:26:A7:A3:F6:C5:5E:07:39:38:1E:04
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 0199FEB49A07D9DB1B37E5C5D0F3C83F4FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 15FD
Signing time: Sun 19 Oct 2025 23:01:12 +0000
Manifest this update: Sun 19 Oct 2025 23:01:12 +0000
Manifest next update: Mon 20 Oct 2025 23:01:12 +0000
Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=)
2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=)
3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: gPmpk9lkVJNEtTGOTT0oAm2MumKe+lqwESFofjDwyaA=)
4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:9a:07:d9:db:1b:37:e5:c5:d0:f3:c8:3f:4f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Oct 19 23:01:12 2025 GMT
Not After : Oct 20 23:01:12 2025 GMT
Subject: CN=8bce9de757811def1e26a7a3f6c55e0739381e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:0e:d8:40:d2:b6:75:dc:d8:42:f2:b1:9f:
db:8f:18:b4:da:ef:4c:a7:93:66:e4:eb:5e:67:1a:
5b:f3:b3:0a:50:38:a6:09:d6:1e:f2:49:a1:00:b9:
6b:2e:3d:55:f7:d6:98:dd:13:05:16:05:5d:e2:60:
ce:72:91:41:0e:42:2c:d1:f6:66:0d:35:b4:83:59:
2e:b7:9d:4d:d7:ec:0e:5d:e3:32:40:b3:d8:c2:df:
e8:c5:aa:90:df:0b:de:98:92:5c:49:1b:d5:fc:9d:
68:d5:c7:ab:52:7f:a2:02:09:ba:ca:75:d5:5f:ec:
37:13:bb:96:df:1f:79:21:bc:70:c5:b9:2e:0e:b6:
49:c3:39:49:94:61:97:3d:24:95:04:f8:80:6a:25:
02:14:dd:e4:fb:50:c9:49:1d:21:8f:cc:10:91:fa:
08:e0:27:63:e7:b5:83:36:a5:1d:4c:95:a5:1f:91:
51:39:82:67:28:07:b5:56:6e:48:88:3e:18:04:e2:
20:3e:99:80:40:86:6b:39:bc:ba:03:25:62:5e:8c:
bf:2a:12:22:c1:50:9a:2d:05:a6:5a:38:f4:9e:b1:
3b:7f:83:a9:5f:c1:1a:4f:6d:bc:68:99:eb:7c:a8:
f2:6b:ec:29:42:a5:a1:c7:0a:f9:5b:31:70:3d:ef:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CE:9D:E7:57:81:1D:EF:1E:26:A7:A3:F6:C5:5E:07:39:38:1E:04
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d6:85:3c:10:ce:4b:a3:b7:b2:a8:da:b4:0c:de:bd:03:85:
4d:a2:7a:0f:a8:13:6e:0a:89:c4:cb:4b:bb:a1:6b:f0:58:83:
f9:c5:4f:c0:3e:14:c9:c9:3a:07:87:19:d4:da:6b:53:e6:42:
56:be:c2:5f:1d:d2:78:9c:40:13:0e:5c:92:91:0c:63:0f:d9:
55:98:a2:2f:3b:76:6f:e1:1e:b5:14:73:91:1d:8c:bc:a9:4c:
91:2a:82:90:a2:ca:3d:18:e0:ed:67:79:89:83:c2:81:ae:5b:
d0:eb:b9:55:9b:9a:a4:2f:96:90:a1:07:48:9a:1e:9d:41:cb:
75:dc:4d:7f:51:13:7e:f4:27:c7:75:d7:4a:2d:dd:48:56:a7:
f4:b7:8e:89:1f:2d:a0:6f:1c:b1:15:8f:38:c9:a9:93:82:bb:
1c:ef:62:07:b7:d1:49:c3:92:af:8d:d5:90:ef:36:5d:ad:a2:
68:2b:ea:fb:ae:30:c7:a2:02:00:d2:dc:b6:a7:70:db:e6:2d:
ab:72:d5:13:72:d7:5a:8f:3c:fc:5e:1c:2b:ab:93:e1:c1:56:
62:74:c6:9f:d7:05:69:3e:13:ea:a8:2b:68:c8:ca:c0:34:9c:
3c:c3:26:04:f2:7f:d0:e4:00:00:d9:af:bc:80:a2:ce:be:c7:
33:f5:57:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:59 2025 by rpki-client