Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: ZcdEw6jT8AExg+I/x8qpZqM72zMnBRAQzJ5YukYiJvo=
Subject key identifier: 60:0C:0B:1B:02:23:50:7C:10:C3:BB:B2:81:0B:32:99:FE:2D:34:0C
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 019A00A2F7A598A3BB4783AD7DDF950539A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 15FE
Signing time: Mon 20 Oct 2025 08:01:11 +0000
Manifest this update: Mon 20 Oct 2025 08:01:11 +0000
Manifest next update: Tue 21 Oct 2025 08:01:11 +0000
Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=)
2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=)
3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: jhTZJdX/uZ4+UYKGpLLqdNH6OGFV9+kCqq7BHF0xJKg=)
4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:f7:a5:98:a3:bb:47:83:ad:7d:df:95:05:39:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Oct 20 08:01:11 2025 GMT
Not After : Oct 21 08:01:11 2025 GMT
Subject: CN=600c0b1b0223507c10c3bbb2810b3299fe2d340c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1b:09:4d:0b:52:7f:6a:53:c6:a2:c4:21:67:
1a:bc:ea:c6:e4:c5:01:0b:dc:5e:92:00:75:83:2b:
af:85:a0:64:7d:e3:f9:76:70:20:26:59:95:d6:34:
e0:9c:af:91:e6:61:d9:1a:de:91:37:88:1d:8a:3c:
f1:43:37:dc:0c:fa:f9:19:3b:7c:b3:e7:b1:6e:1c:
bf:95:17:42:a4:81:dd:17:42:c4:84:e1:e8:f9:75:
c8:11:a9:09:ba:44:72:44:ab:e9:ea:9a:ae:8e:3c:
4e:f9:da:f7:11:da:2a:ca:39:69:36:5b:1d:ca:30:
59:7a:ef:96:59:d9:2f:2f:5d:1c:1d:bc:39:0a:71:
7e:bd:c6:59:f4:53:ee:a0:dc:77:9b:e5:ca:c6:b3:
43:ce:97:b4:7a:30:ce:9e:cd:18:51:8d:dc:66:c8:
48:cf:c3:ac:11:ae:a8:ac:4f:09:93:70:69:5d:20:
b1:1f:14:2e:a3:9a:70:d9:1d:77:2d:7f:8d:e0:86:
ee:94:23:4e:1f:0e:6e:65:f7:67:ba:51:45:74:8f:
29:b9:b4:cb:85:07:61:1b:7e:62:5f:40:51:e9:c3:
f2:52:5d:5a:0e:f3:ca:14:bf:40:bc:de:3f:51:db:
f3:68:98:7f:3a:25:af:e1:ca:64:43:73:93:c4:13:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:0B:1B:02:23:50:7C:10:C3:BB:B2:81:0B:32:99:FE:2D:34:0C
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0b:55:2a:18:09:51:6f:dc:40:73:01:d3:23:e3:6b:3a:a9:
73:b0:fb:ba:5a:a6:7b:4d:b9:69:36:40:73:23:a6:e6:a2:15:
12:a4:67:78:ef:75:05:7b:8a:ed:f8:6b:5e:e5:c5:0d:04:97:
8c:cd:a9:cc:4d:a6:09:23:dd:ea:7c:d7:97:37:c0:c0:91:78:
86:d0:19:45:74:5c:2c:73:ab:e2:b9:3b:4c:82:3b:d2:53:a9:
b4:cb:df:0f:66:07:a7:79:52:4a:ee:c7:9f:c5:85:85:70:9e:
f6:d7:2c:5b:03:83:a8:48:b9:1b:18:08:45:f0:ff:60:8e:39:
1f:b0:8e:14:1b:d1:e3:cb:e1:55:f0:af:a6:42:c0:26:09:bf:
3c:66:04:0b:aa:99:90:e0:a2:61:3e:ca:86:4a:41:92:d7:b5:
46:0d:c3:95:b9:5e:5b:a2:23:ff:59:12:32:17:48:05:7e:e3:
55:b6:1e:9b:77:28:c2:51:32:77:81:2a:fd:58:31:aa:6a:b3:
b5:70:bf:19:2f:bc:24:55:c1:c1:e6:b3:a6:06:63:66:a4:d3:
d3:0a:de:f5:7f:2f:f0:18:17:39:77:53:3c:ba:14:41:8f:9e:
20:b2:53:86:48:37:bb:36:d9:a1:b1:8f:e5:5a:7a:eb:c0:ed:
44:28:d0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:16:46 2025 by rpki-client