Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier: hFmnsq8h/dhEgS9Ja5o1ZsJZ0zJBP/RofdVVX5/xDWY=
Subject key identifier: 29:54:22:DD:5B:F5:A4:D7:9E:D6:DC:FD:DE:E2:68:6C:81:BE:D5:1D
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 0199FF22572701071A0AAD1E519FDED6BF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number: 1474
Signing time: Mon 20 Oct 2025 01:01:04 +0000
Manifest this update: Mon 20 Oct 2025 01:01:04 +0000
Manifest next update: Tue 21 Oct 2025 01:01:04 +0000
Files and hashes: 1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: bnlKetaQKU40ou9TNwCr0Lp4hm6DJnEVymFz8AJmecw=)
2: siSVK589afKFmNB4xui803eAFA8.roa (hash: pIfAtolx6StiwhL02gSeSu2zm+FTXp7cgi/yqREz08c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:57:27:01:07:1a:0a:ad:1e:51:9f:de:d6:bf:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Oct 20 01:01:04 2025 GMT
Not After : Oct 21 01:01:04 2025 GMT
Subject: CN=295422dd5bf5a4d79ed6dcfddee2686c81bed51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:6c:a1:b9:7d:92:97:f9:cd:26:23:0b:74:
59:0a:d5:59:c8:8b:39:8b:5a:69:ca:63:55:17:2a:
5a:e4:17:6d:6d:58:9d:08:1c:a2:00:2a:39:26:27:
b1:28:d0:9b:48:2a:43:44:42:a8:b9:55:31:64:6e:
3d:ae:93:23:72:c5:ef:04:ff:a2:da:af:84:6d:ce:
2b:3b:14:b8:b0:d6:cf:6f:71:b8:00:af:f6:a0:b5:
fa:01:c0:cc:30:af:0e:85:85:b0:db:35:b4:15:d1:
a2:f0:8f:f2:10:79:04:14:5c:23:a8:42:52:7b:d2:
b5:2d:39:6d:3d:9c:16:e0:ff:87:a0:73:68:a7:e4:
05:2d:b6:5c:da:f3:e7:ec:b8:ae:22:9c:4c:64:7b:
db:29:63:ec:f6:db:ac:a7:c1:47:2d:d7:a1:e0:9c:
86:5a:5e:0b:ca:68:5e:4a:94:fb:36:d0:bf:16:3d:
65:b7:8b:b1:1f:45:1d:ce:7f:ac:b6:59:ef:be:a1:
08:be:85:4d:bb:5e:74:b7:3b:a5:38:ee:f7:5f:5b:
7e:e0:b6:cb:9f:23:ac:d1:71:03:bc:0c:2f:4e:0a:
03:57:ba:6c:86:25:88:65:4d:ef:68:59:36:fe:07:
7d:bf:01:12:0f:95:db:80:ba:da:55:23:4c:fd:3c:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:54:22:DD:5B:F5:A4:D7:9E:D6:DC:FD:DE:E2:68:6C:81:BE:D5:1D
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:38:f2:5a:b4:6b:86:fd:ff:46:07:00:4a:ad:93:96:c9:f6:
af:47:0d:e3:dc:7e:30:eb:3c:7f:93:da:36:d5:68:84:e2:4f:
18:3d:58:74:1f:47:83:19:a0:ce:67:bc:7a:a9:4a:3b:fc:d9:
51:e6:62:4b:5a:21:7e:56:04:77:e7:27:62:44:51:b1:93:6a:
19:8c:fa:e5:11:9d:b4:39:c4:8c:36:90:ce:38:23:c0:5a:a3:
6b:12:f4:fb:db:73:4a:40:b1:20:c7:67:60:34:be:ba:1c:6d:
6e:9f:18:d7:de:a7:dd:06:52:fd:08:eb:7a:d4:93:75:94:7d:
7d:79:10:c3:45:10:35:62:b7:8e:8c:49:9a:ba:31:eb:a8:9f:
aa:45:35:06:e7:27:d4:5c:02:2a:f1:a8:02:4b:04:7c:c2:7d:
e1:f2:ad:ab:c8:35:4d:d2:69:3b:0a:32:ae:8a:ae:0c:e5:b7:
c1:55:03:1f:98:98:97:f0:72:7a:c9:82:1a:36:e6:b8:38:bd:
61:d3:ee:3a:3f:90:45:1a:c6:e1:5f:8f:3a:bf:db:9c:c1:f6:
73:f8:c1:c9:2e:70:e3:c2:9f:b0:90:df:72:da:bb:62:b7:e7:
0c:3a:c3:ee:f6:c9:88:ff:a8:cd:25:a5:62:19:b5:a7:e7:8f:
d2:8f:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:34:03 2025 by rpki-client