Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
File: HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json)
Hash identifier: C2Sro5R8qb51D2cj9/xQXG5hqX1sq+Ul+74MzWsQHxk=
Subject key identifier: 18:FD:6A:F7:E3:4E:84:9F:7A:F9:58:B2:65:35:E4:13:0C:0C:35:E4
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Certificate issuer: /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial: 0199FBEA8C18E4AEFC708A66012F9C3FFB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
Manifest number: 16EE
Signing time: Sun 19 Oct 2025 10:01:16 +0000
Manifest this update: Sun 19 Oct 2025 10:01:16 +0000
Manifest next update: Mon 20 Oct 2025 10:01:16 +0000
Files and hashes: 1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: jXx1g1sewYqKvMdPjk/AS8//Nk4Jw2BgqNkj3OSkNCU=)
2: f0vhGxR72MG9W3aRCoI9VCH2wQA.roa (hash: PDzMyuMmfdbsbyADvkBIQZLummxADm7ztnq8hanW6ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8c:18:e4:ae:fc:70:8a:66:01:2f:9c:3f:fb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Validity
Not Before: Oct 19 10:01:16 2025 GMT
Not After : Oct 20 10:01:16 2025 GMT
Subject: CN=18fd6af7e34e849f7af958b26535e4130c0c35e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:1f:3a:74:b9:80:96:02:45:6d:ea:01:64:
5a:20:64:1b:bc:26:0c:eb:29:5c:ec:89:46:f6:99:
94:7d:3f:4c:90:15:23:57:4a:34:5c:f8:a4:ec:ff:
85:f6:9e:1d:5c:a6:38:69:ba:5f:d8:89:c6:38:38:
79:9f:57:5c:81:66:02:6c:60:7f:79:c6:27:75:c5:
73:5c:32:ea:f4:c9:05:be:bb:2e:3f:66:28:a9:81:
bd:27:91:f9:b1:19:9f:ff:ec:e3:53:8f:c3:ec:a8:
36:03:d6:02:e3:9b:42:b5:10:d5:8e:02:66:13:be:
0d:02:60:36:a3:3d:22:5e:90:8d:11:cf:fe:47:b1:
e3:4c:1a:22:6d:dd:05:22:bf:0b:d7:c5:d7:68:2d:
5b:72:82:de:07:3e:e3:a4:33:36:ba:b4:72:19:3e:
ed:3d:43:aa:67:8a:07:e0:5e:4f:a8:07:4d:42:79:
7d:d0:64:87:0b:c8:15:60:4e:b8:d7:a7:ab:1f:ca:
ef:e3:b7:e0:8d:27:ec:4d:fe:c9:64:cf:6f:43:2e:
01:1c:7d:17:90:1f:09:e4:b7:37:99:61:7c:45:bf:
c9:8c:06:d1:e7:c2:d5:42:ab:25:2e:3f:d8:c8:38:
69:c0:2d:c8:cb:47:b7:d4:5f:e8:d1:53:8f:5f:33:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FD:6A:F7:E3:4E:84:9F:7A:F9:58:B2:65:35:E4:13:0C:0C:35:E4
X509v3 Authority Key Identifier:
keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ad:bb:be:ba:09:d1:a0:51:30:bb:43:08:36:e5:83:05:b0:
4e:30:3d:c8:12:be:19:d0:2a:b7:d9:38:39:4f:56:27:da:df:
21:47:f0:63:b3:dc:31:ab:13:74:24:48:14:22:f6:99:a4:ba:
e8:54:65:f9:1b:85:62:ad:56:82:8e:13:94:12:83:1c:03:e1:
ea:63:da:e5:5b:3b:40:a1:6f:7e:d5:78:ac:04:28:b3:18:d2:
2f:04:cf:55:05:61:44:6d:3b:7d:46:74:ba:6b:ca:c3:fc:67:
82:c4:a7:56:7a:d0:94:4c:91:87:46:fb:8f:d3:15:5f:73:8c:
9a:8e:28:45:28:48:16:ef:60:82:7f:01:74:3e:fb:cb:83:f0:
4a:99:f9:45:dc:f9:39:97:eb:96:32:da:1b:9b:b1:2f:04:7b:
bd:19:98:e0:82:a5:47:1d:52:f5:15:8f:88:f5:46:a0:73:c9:
99:86:7b:16:a5:83:47:ed:b5:67:1e:22:f4:b1:44:69:6f:e5:
00:47:63:27:47:72:bc:39:27:65:49:99:88:cc:cc:63:30:42:
09:72:23:32:bf:aa:af:87:8f:51:ac:2f:21:7e:60:04:4c:21:
03:f5:56:6e:57:a3:da:05:10:4b:85:fe:ca:4d:05:d3:0f:a3:
a9:a4:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:28 2025 by rpki-client