Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier: sFlXK/0Kp8NMAP2++/M97cZC33SaBuM7uGrbAV1djro=
Subject key identifier: 1E:42:7B:A7:21:40:8A:7A:08:55:CA:07:1E:8A:33:63:18:66:44:D7
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial: 0199FBEB7B4EA60244C047C01F5AC4027692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number: 0528
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: VDFoDTle2aquJoql7HaQjdlCOXh48cOvSlobDzrRr4c=)
2: thETdmyhsrSxA59VxLlSHQ0J73Q.roa (hash: KY6/Rka8NKx7O/9lJJyGOxFVIRAxMy7b72Qvukxyq9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7b:4e:a6:02:44:c0:47:c0:1f:5a:c4:02:76:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=1e427ba721408a7a0855ca071e8a3363186644d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:75:04:3b:e1:ac:5d:cb:22:ea:3d:fe:99:ca:
c9:7d:62:68:81:27:91:1f:7d:18:99:b3:45:26:8e:
e6:a4:21:af:a0:74:61:f2:96:30:03:bf:f6:61:c1:
d0:fb:5d:ee:ff:83:81:77:7c:75:2d:75:b3:0f:29:
80:c8:53:f2:83:5a:ed:39:17:77:02:3d:0b:38:81:
1b:eb:71:c9:a9:7a:d2:8c:65:74:11:fa:0f:d7:4b:
81:79:40:8f:c3:59:5d:62:f3:72:2f:7b:7a:d2:7b:
91:c7:de:0f:69:41:f2:85:90:8c:65:fe:b8:7b:c1:
48:c2:ca:84:8f:24:95:ac:ba:54:bd:a5:13:7d:4e:
01:f7:bc:96:a2:e2:6e:85:20:d1:5c:f6:d4:13:e7:
05:d3:08:b1:75:d7:e2:7c:0b:01:57:be:05:c0:9d:
ae:24:d1:7e:f1:46:63:0a:6f:84:d8:15:2d:33:f0:
b2:f5:cb:60:60:96:79:70:43:17:5c:9c:14:da:b8:
50:9f:dd:94:90:4b:97:b2:ff:4b:aa:bb:a5:83:b5:
a2:af:87:ee:38:b0:eb:2e:53:e5:27:da:6a:23:fc:
b1:e5:66:40:a1:3a:09:07:f3:27:4d:2f:6b:2f:e7:
df:f6:dd:cb:23:74:25:f5:67:24:f5:5c:f3:f4:79:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:42:7B:A7:21:40:8A:7A:08:55:CA:07:1E:8A:33:63:18:66:44:D7
X509v3 Authority Key Identifier:
keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:39:b4:af:f4:7c:f6:42:ff:8c:d0:5d:4d:04:d9:57:99:2c:
77:be:84:fb:b9:b9:fd:af:19:30:bf:d6:d4:75:e0:4e:8a:81:
d2:13:3c:28:06:67:a5:0b:7a:95:af:fd:66:78:e5:f6:5f:ad:
63:d1:91:1b:4c:e8:61:9d:01:4c:62:a8:92:73:89:b4:7b:38:
a7:72:86:84:58:6f:9e:de:6a:a2:8a:c8:d7:9f:d6:d7:31:ce:
99:d2:0c:09:0d:2c:74:e0:e7:3b:4c:31:09:f8:dc:2f:46:27:
de:f8:65:dd:c2:8d:d1:e0:bd:78:26:77:0b:74:93:90:5f:f6:
2e:27:3c:8a:db:5b:ee:aa:2a:e0:4e:d0:33:00:6e:cb:3e:1d:
6a:1d:8d:5d:26:12:f7:b0:b0:df:45:13:05:8c:eb:51:c1:d1:
8c:46:c2:97:ce:8c:bb:6a:2a:69:0e:5f:26:dc:96:f5:0f:b6:
63:7b:27:d2:24:7d:04:ed:2e:1a:b9:c7:98:08:62:af:fb:7c:
98:8a:94:cd:ef:e6:70:1b:1c:d8:c0:31:3d:b8:b3:40:d7:f5:
e6:0d:d3:de:14:0c:12:e2:c5:96:40:77:f8:3e:57:4d:4e:87:
a8:0f:02:bd:d8:f6:3e:72:ac:94:60:66:d9:d2:86:85:b2:85:
c7:64:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:36 2025 by rpki-client