Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
File: HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft (raw, json)
Hash identifier: uscfS8CNkH4rVdqMe3ImMcON/pP6ZbTlcG8enefO4J0=
Subject key identifier: 5B:AB:80:43:8B:1A:49:73:12:ED:06:EE:AD:51:47:72:B4:26:1F:19
Authority key identifier: 1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
Certificate issuer: /CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Certificate serial: 0199FB0F16E658C4DC93C98C1178014AE9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
Manifest number: 0263
Signing time: Sun 19 Oct 2025 06:01:33 +0000
Manifest this update: Sun 19 Oct 2025 06:01:33 +0000
Manifest next update: Mon 20 Oct 2025 06:01:33 +0000
Files and hashes: 1: GPBnMrccvHfLRUetSr0V2OhSV78.roa (hash: bMjAfl7v9vzL7TDoDm3Lu45G9wMjJfK+MiFqNCPT/Us=)
2: HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl (hash: D+jjECyQlMsoxpMHmOejVYrX6yw0em9jCO3fAG5ftyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:16:e6:58:c4:dc:93:c9:8c:11:78:01:4a:e9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Validity
Not Before: Oct 19 06:01:33 2025 GMT
Not After : Oct 20 06:01:33 2025 GMT
Subject: CN=5bab80438b1a497312ed06eead514772b4261f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:e5:42:5a:f6:3a:73:fa:6b:89:0c:8f:c7:
19:4a:c9:59:da:aa:dc:da:da:8e:cc:6a:33:dc:7f:
0a:76:c3:a0:81:65:23:27:dd:33:1a:08:f7:fe:3c:
17:31:65:59:4d:4c:f2:ae:25:41:45:f7:b8:0a:f5:
c1:7b:e7:04:5a:51:c1:03:c8:0d:45:b2:2d:4f:da:
91:5b:96:d5:b4:67:a7:41:75:73:ae:51:e3:8b:42:
53:30:29:17:b2:7c:53:21:b8:93:e6:16:a7:9e:e5:
85:8f:67:f1:db:de:be:a0:f4:58:6f:64:6c:13:1b:
f1:74:af:4f:03:7f:e7:5f:cf:ac:af:b0:8a:c8:c3:
b4:0a:0c:e2:1a:32:59:8b:72:a9:69:d3:2b:09:c3:
0e:ac:34:f2:8b:4a:b0:91:49:3c:62:97:f2:0c:13:
20:62:1c:04:7b:e5:cb:85:6b:c0:82:5b:a4:53:53:
a8:6f:3b:6d:83:f6:69:05:27:78:d6:08:19:e1:55:
70:df:b3:1f:30:05:0d:4d:cc:2a:1e:d9:87:dc:40:
8c:6b:f6:05:76:24:8a:05:9c:7f:f8:05:cc:23:a5:
34:f5:6a:b0:45:02:be:d8:87:51:02:36:5d:07:a8:
23:0e:41:68:37:7e:aa:7f:90:30:e0:e6:0b:09:b4:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:80:43:8B:1A:49:73:12:ED:06:EE:AD:51:47:72:B4:26:1F:19
X509v3 Authority Key Identifier:
keyid:1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6a:7f:63:33:8e:cc:1b:ca:1e:75:2f:8b:b5:65:9e:85:2e:
be:3e:9d:f9:95:f5:a7:bd:0a:ae:68:02:76:32:45:32:c7:30:
9c:9c:a0:ad:8e:e3:4a:6e:61:7f:27:10:a5:87:46:0f:fe:39:
bf:4d:8b:7a:38:8a:10:c7:de:de:25:78:ec:f2:86:6b:d7:62:
7f:bc:e5:00:4c:c6:c9:de:d7:32:74:cb:db:70:74:47:42:ba:
d1:b9:bf:c2:38:ec:c8:05:81:6a:db:9b:83:3c:c8:92:7c:a0:
45:d9:f3:f5:20:6c:61:41:31:3f:6b:49:5f:a5:50:7a:e0:e5:
88:e2:da:84:c7:24:36:13:fd:ff:e7:89:d0:d0:5a:1c:6d:9a:
0a:5f:d8:f0:d2:89:b7:1a:dd:d5:b0:5b:a1:89:9b:8d:85:11:
0d:8d:7f:b8:5e:1d:77:36:f5:09:60:2c:13:78:46:0b:ac:4b:
db:4e:67:99:af:44:64:73:6e:28:ce:fc:4b:ac:57:63:e5:bb:
78:9e:02:6d:66:6f:64:bb:29:b0:0a:1b:e8:24:46:6d:da:fc:
6d:a0:ea:27:43:8f:e0:81:4f:e7:b1:54:0d:11:02:fb:d0:d3:
29:08:11:2c:5c:84:56:8b:d2:15:f3:47:3d:94:87:d8:7c:ed:
15:91:cd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:59 2025 by rpki-client