Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
File: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json)
Hash identifier: DV9OLpyWjALuNOhscMx3g9xEZDL8C9fTviLw3DYas8k=
Subject key identifier: 29:AF:3D:C5:2D:D5:2C:8C:98:C1:04:84:48:B4:66:64:55:F4:16:A1
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Certificate issuer: /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial: 0199FC58FF7F11170386E040E6187509DE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
Manifest number: 0773
Signing time: Sun 19 Oct 2025 12:01:54 +0000
Manifest this update: Sun 19 Oct 2025 12:01:54 +0000
Manifest next update: Mon 20 Oct 2025 12:01:54 +0000
Files and hashes: 1: 2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa (hash: midqdd826AD6+dmyiJS8kWbnJkkjvvshmNXqoFoo9/0=)
2: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: Op68QhBIS+Z2V4R47+RXyAHXvcn4h3iOFevNkboBhdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ff:7f:11:17:03:86:e0:40:e6:18:75:09:de:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Validity
Not Before: Oct 19 12:01:54 2025 GMT
Not After : Oct 20 12:01:54 2025 GMT
Subject: CN=29af3dc52dd52c8c98c1048448b4666455f416a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:6b:be:9a:5d:65:4e:6e:b9:dd:1d:84:12:
5c:96:eb:9f:10:4a:50:30:d4:26:b2:10:75:36:c7:
76:4e:3c:f0:ae:0a:4e:7a:2f:68:c7:70:ab:83:71:
97:f4:33:b9:0e:06:d4:83:ef:4d:ef:7e:70:06:3a:
2d:2e:8a:20:ea:80:fa:05:f1:bc:76:c7:e2:f0:ce:
46:82:f2:72:80:25:95:bd:41:2a:7c:a9:37:5f:9a:
47:46:a1:38:ce:aa:8f:4e:21:7f:0a:e0:b0:fc:3e:
e0:3a:51:b5:70:cc:ca:b7:38:c0:58:01:12:97:a8:
44:5e:94:86:7d:4c:d0:57:23:db:8d:55:c5:68:ad:
39:e7:c3:77:93:ae:a3:e9:e8:63:19:b0:b8:31:78:
8f:e6:65:44:69:62:01:1f:a6:e9:d1:59:f2:a2:4d:
1d:4f:86:eb:2e:3d:ce:8d:ed:03:25:a3:33:4a:99:
1d:25:ba:9e:41:13:5e:3e:6c:28:72:4c:28:d7:5f:
7e:3b:2c:f4:72:09:5b:19:3e:c7:57:19:11:f2:5b:
90:1e:23:eb:66:ee:19:01:58:6d:fc:77:c8:e8:2c:
16:93:31:42:62:9b:1a:4e:ea:ab:d7:72:79:44:40:
ae:f8:7f:75:1f:d5:2f:1d:91:a5:b4:c4:c1:1b:ca:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:3D:C5:2D:D5:2C:8C:98:C1:04:84:48:B4:66:64:55:F4:16:A1
X509v3 Authority Key Identifier:
keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:83:93:3e:62:6a:01:30:1b:5b:1d:86:a3:1c:cc:b8:39:4a:
ea:cd:cc:44:c8:a2:e5:fd:4f:bd:5e:6e:b7:14:87:2d:19:f5:
2f:cf:22:be:bb:f4:9e:83:c9:99:dd:0e:a1:57:92:70:1d:19:
e0:78:e8:a0:c1:b0:41:76:e8:a1:73:1e:e0:73:73:ba:fc:27:
91:d8:78:eb:df:fa:2d:db:7c:eb:bd:23:7e:60:04:0d:0a:d7:
e0:8d:5e:5f:af:68:39:42:8f:0c:ff:78:f8:02:ae:03:58:81:
bf:8b:e3:d3:0b:b6:7e:db:75:c0:a8:f2:af:18:1a:40:89:80:
9f:df:60:d8:fd:26:3d:f9:5f:a9:21:d8:40:4d:ea:ef:22:cc:
34:30:df:c4:9e:5e:02:ec:d8:a2:fb:81:c0:50:bb:13:da:75:
44:ce:d7:70:39:78:32:3f:4d:c6:76:b7:7a:02:dc:89:90:98:
8a:b1:ad:7c:38:58:f8:21:53:0a:cf:f1:b2:53:5c:31:9d:73:
4d:0d:9d:e1:1b:c6:65:a6:45:bd:5b:fb:b5:13:84:ff:e7:75:
a3:f6:a8:77:d3:47:f6:53:ae:70:3e:c5:7f:6e:89:81:22:29:
74:bb:de:35:d2:da:05:2d:80:c5:f7:15:28:a6:8e:69:8d:d0:
28:12:3d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:36 2025 by rpki-client