Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: U7JuHSotRGOHCrJ+6aB4dabUE2lKxorFrEHZ0lDGXd4=
Subject key identifier: 1F:59:C8:AF:84:D8:10:1E:85:1F:17:91:1D:E7:68:2C:80:EF:A0:E3
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 0199FE46EBC46ECD9FBCE87C343BCB87F805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 165D
Signing time: Sun 19 Oct 2025 21:01:24 +0000
Manifest this update: Sun 19 Oct 2025 21:01:24 +0000
Manifest next update: Mon 20 Oct 2025 21:01:24 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: YHZGwV3honygxEjGXyK5xYJhtCjlXpt4OjTU3cNpNR4=)
2: gzmNz0PYWdcLgL6_SHiIcrAToJE.roa (hash: Guzyh0bDeJqFnbpc68wrDXyHWPH3X5psfEh7CAeI44k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:eb:c4:6e:cd:9f:bc:e8:7c:34:3b:cb:87:f8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Oct 19 21:01:24 2025 GMT
Not After : Oct 20 21:01:24 2025 GMT
Subject: CN=1f59c8af84d8101e851f17911de7682c80efa0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:1a:f0:7c:0d:a9:e4:c7:7b:06:a5:7c:88:
8a:27:ad:1d:6b:bc:7b:71:7c:fb:9e:4a:5d:f9:97:
57:a9:18:a8:88:d5:9c:ff:bf:7d:4d:cd:1d:f5:90:
5d:1a:60:fa:83:34:08:97:44:02:51:24:13:3b:a4:
84:67:c7:b1:48:c4:0c:e3:1f:f1:41:3b:de:87:38:
5e:09:e9:2d:43:c8:97:fd:26:d3:e8:54:d5:fc:ff:
79:39:85:23:ab:98:40:62:a9:02:54:78:86:0d:af:
41:35:c2:e0:e0:eb:31:21:4a:5a:e7:02:66:30:18:
32:6d:be:0a:65:a4:34:3e:54:9c:e5:87:92:16:8d:
2c:e9:1b:ce:ed:2d:8c:53:08:32:57:49:1b:8d:67:
c2:92:73:69:1c:10:7e:0c:95:50:a9:d6:50:9a:1d:
0b:6d:d6:a4:da:ec:7f:c4:e1:09:cc:e2:13:ed:c8:
94:3c:86:e6:29:9d:23:fd:fe:4e:c8:d3:74:8d:c0:
cd:00:91:e8:be:b5:f9:9f:aa:5a:b9:6d:d0:dd:d6:
6f:63:47:b8:cb:31:40:59:a6:39:bb:41:09:a4:69:
7b:8d:9f:ad:ee:30:c7:a7:4c:0c:06:26:c0:8a:34:
8d:74:b2:71:09:56:df:64:bf:0c:9e:a8:c3:b3:fd:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:59:C8:AF:84:D8:10:1E:85:1F:17:91:1D:E7:68:2C:80:EF:A0:E3
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c1:16:88:ae:d3:16:71:ef:cb:97:2b:72:53:e8:48:31:e9:
e0:35:67:84:5c:47:9a:93:b0:a2:fa:7d:e4:60:81:1e:02:00:
cf:19:15:54:db:84:a8:06:dc:d9:5d:83:a4:18:1d:be:08:e7:
20:32:37:b2:d1:85:df:ab:ce:16:99:e7:51:80:8d:24:3b:63:
ee:41:86:5f:1f:a2:cb:d3:fc:17:1f:df:b2:20:65:c9:a8:09:
e4:11:aa:40:1f:0a:ff:2f:ec:fc:f1:64:a6:0d:f1:19:43:9c:
df:e5:96:0c:ba:61:97:bc:ba:60:fc:07:c1:65:70:d3:97:7a:
18:47:7b:7e:82:8a:5e:b2:c7:06:4a:f6:3c:39:f0:42:f0:a9:
d7:28:aa:65:5a:7c:cb:16:e7:00:2e:5a:76:49:8e:a9:84:2c:
32:18:58:6d:0e:81:d4:7f:6d:e5:e0:f1:e1:1b:31:76:a5:f7:
f1:76:38:ec:9a:61:b8:07:1a:30:8d:7b:05:4e:5c:94:de:c5:
1c:53:ca:b3:cf:7e:88:3b:e3:ae:96:fd:e3:b3:5b:fa:e2:bc:
99:77:d0:4f:fa:86:5c:ec:80:82:56:7c:71:42:d5:b4:94:39:
2c:03:66:90:d5:8d:c8:5d:09:18:61:fc:95:62:60:91:c9:d7:
dc:93:2a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:03 2025 by rpki-client