Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier: ZcIuZSL+xjQUPdgbcrqqqTjs46lKYDJq9UV3oQYYBaw=
Subject key identifier: DC:75:F0:A0:9D:9B:DF:0F:A2:09:88:D3:D9:69:F9:FF:17:4E:9F:ED
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 0199FC8F32DDE6A07CC0205B07914014A72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number: 0198
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: iX+/ISbnriGfEkoBBDdODepe5sy0USBH/Q05Tk+jcIw=)
2: NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa (hash: wYz2fmfXZeLSC/FkxxCfmscRdqW9p4YQgw0dEkDtFvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:32:dd:e6:a0:7c:c0:20:5b:07:91:40:14:a7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=dc75f0a09d9bdf0fa20988d3d969f9ff174e9fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:91:2e:0d:df:65:b3:ee:a5:20:2b:62:af:
31:2c:97:f3:5b:ee:4b:e3:2c:8e:87:87:57:fc:8f:
c6:41:c4:9d:48:ef:1a:ef:25:87:bb:08:a2:05:97:
a4:40:97:14:36:12:d6:a6:89:2f:d7:42:da:21:8e:
65:2d:2f:b9:41:f6:1a:39:54:b2:b6:5d:ca:ea:25:
e0:39:b0:d3:6d:37:52:92:30:a3:c5:dc:45:66:ca:
a1:e2:1e:79:06:99:f8:f3:0e:32:fd:56:51:be:a4:
87:16:7c:dc:f5:7e:8b:85:c2:af:43:1a:2e:27:ca:
5d:c4:27:0e:2b:fe:30:02:dd:66:0f:d9:c4:4f:c5:
30:31:af:4d:bf:db:b3:e0:a6:09:cd:c9:e6:cd:04:
41:bc:cd:71:ef:da:e5:aa:68:44:22:ac:d0:6e:d8:
03:ff:b1:ad:b2:00:82:55:e8:c9:92:52:56:7c:28:
d8:c5:b0:d2:d9:03:3f:3b:36:1f:94:e6:a3:a2:a0:
cd:b7:db:df:52:e9:47:7f:9f:e2:e3:46:96:80:f9:
c3:ee:2b:74:fe:71:ef:87:8d:ac:9f:84:08:36:14:
9c:cc:e5:cc:4e:f2:35:b4:39:eb:ad:94:7e:5f:35:
63:3f:29:ea:f8:f7:43:fb:5a:dc:65:7a:16:2f:6a:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:75:F0:A0:9D:9B:DF:0F:A2:09:88:D3:D9:69:F9:FF:17:4E:9F:ED
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:43:35:53:16:36:0c:ac:b0:dc:94:32:f6:ed:7c:df:2e:0b:
ea:14:f7:1e:73:f2:b7:9e:4b:ba:5d:70:98:56:a5:9c:4f:5f:
9e:34:ff:bd:0e:8b:7d:28:08:6f:b1:7f:60:b8:e2:c3:2f:dd:
4c:2d:6f:98:cb:f9:8a:c9:7e:d6:84:62:20:c7:aa:1b:b4:3c:
c1:32:67:60:c8:67:4b:d9:ee:bd:e1:d2:6e:db:aa:19:0b:33:
22:61:0a:66:2f:e8:f5:b4:36:09:62:ca:3a:a8:87:83:af:53:
09:d6:87:41:d1:d7:fb:af:5f:c9:80:55:d9:0c:28:ba:f6:be:
dd:a3:c3:e1:ca:1e:16:78:d1:1b:81:52:40:78:e5:70:bb:ca:
7e:bd:d5:bc:c2:1a:26:2f:92:4a:36:9d:8e:2a:82:c2:d0:3d:
72:0c:95:64:a3:87:62:1c:75:4c:06:90:ca:29:be:f7:6a:89:
64:b2:2e:4c:d5:09:69:45:29:c6:20:46:29:06:62:b6:59:0d:
c0:4d:12:1c:7b:e0:e2:f1:63:87:52:b8:1c:ae:46:74:fc:50:
a4:f9:e3:19:69:c3:37:62:d9:d0:32:fa:89:2b:82:ff:a3:2c:
15:e3:4f:c5:07:8b:a4:7b:2d:80:08:82:68:d7:5d:4d:c2:b0:
50:89:e6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:44 2025 by rpki-client