Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
File: hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json)
Hash identifier: jPRga3Ygvano9tU4aDpePCq6ffOtyUebIqhGcM85Y8o=
Subject key identifier: 63:55:CB:BC:68:51:64:B3:F3:3E:79:BF:FE:3D:B1:F6:30:59:13:A8
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Certificate issuer: /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial: 0199FB0F001CCD61DAE6F16E09A7834B0732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
Manifest number: 07DB
Signing time: Sun 19 Oct 2025 06:01:28 +0000
Manifest this update: Sun 19 Oct 2025 06:01:28 +0000
Manifest next update: Mon 20 Oct 2025 06:01:28 +0000
Files and hashes: 1: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: 6JA8mFTsJQoFaQVWny6apz2o9b0Ng2qAtcgfTg4yQco=)
2: iVxulShReTYBVaVMHOSAPgJMX4w.roa (hash: K1U4ekJDUmOT/6sNVV1rdRQsFS3D9+kf/By0ijYc4Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:00:1c:cd:61:da:e6:f1:6e:09:a7:83:4b:07:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Validity
Not Before: Oct 19 06:01:28 2025 GMT
Not After : Oct 20 06:01:28 2025 GMT
Subject: CN=6355cbbc685164b3f33e79bffe3db1f6305913a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:f4:ce:da:43:dc:2c:b3:62:66:43:53:b8:
e9:11:e9:df:b2:2c:58:2e:27:a8:21:a4:8d:b5:ec:
b6:43:1c:c4:0d:3e:39:50:3e:86:ff:0c:40:67:d8:
b6:b4:f1:04:3b:e6:cd:b0:ad:24:62:85:99:05:ed:
2d:1a:57:2a:5c:d9:bd:f3:02:1e:8d:0d:ad:fc:6a:
5c:fd:fa:41:23:e1:10:4d:a5:ab:36:81:c0:04:0c:
a6:e0:b8:aa:6f:a2:c6:cf:db:f4:e2:b8:5e:d7:7e:
eb:21:29:5b:f2:25:98:6a:9e:5f:fd:ae:17:64:9b:
f7:0f:4d:25:81:a8:7b:6b:7f:11:ff:84:35:07:86:
ab:5e:86:cf:b8:b2:d9:f3:9f:09:96:ca:2b:d5:6b:
69:90:f4:89:c5:5b:70:f5:a6:53:55:31:f4:89:9c:
92:12:9e:2a:1c:88:16:74:dd:9b:0b:e5:af:62:20:
fe:1f:9b:12:2a:ab:fa:c5:0b:68:51:14:39:aa:f6:
ea:66:77:52:8a:f7:e6:8a:66:df:d9:85:32:2a:e6:
1c:b0:ca:2d:f8:8b:27:57:42:66:dc:9f:f9:61:5a:
74:fb:0d:3d:c5:da:36:de:18:71:56:5b:c5:f8:f2:
fc:09:ef:8a:2f:6e:06:44:c7:13:f2:7f:be:de:18:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:55:CB:BC:68:51:64:B3:F3:3E:79:BF:FE:3D:B1:F6:30:59:13:A8
X509v3 Authority Key Identifier:
keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d4:a9:97:63:72:59:cb:db:5f:0a:63:9d:43:ee:e4:81:a7:
73:02:bb:9b:18:2a:cf:9b:2f:19:bb:57:87:39:5b:54:d3:42:
1b:23:0d:ce:9c:01:96:fe:6f:ce:07:0a:60:2b:e3:7f:0b:b6:
e6:b6:5a:12:9e:74:b9:ce:71:29:1b:46:96:83:54:17:86:11:
d1:76:8b:19:36:76:84:65:17:e0:1b:41:a2:10:9c:6b:03:ec:
ec:96:4e:c5:bf:df:9e:2c:e1:50:c0:28:1c:c4:74:06:f3:0c:
f9:33:d1:eb:0d:67:da:fc:87:6d:1e:60:b7:a2:a5:f3:d0:78:
8b:0c:a0:33:28:35:09:b0:ef:1c:c7:7c:f2:da:dc:63:2b:c6:
b4:eb:b6:6d:c6:88:07:1f:3d:2b:ca:98:49:14:c3:df:7e:ff:
f6:5b:9f:e9:e8:bb:de:25:93:ef:49:ab:7a:83:86:45:a4:d4:
61:51:ae:47:2d:a6:b6:9b:ad:aa:bf:f9:65:06:b8:0b:ab:6e:
69:f4:55:d1:03:43:7b:3f:82:4c:97:d2:56:86:ef:bc:3e:ae:
2c:25:45:b5:42:94:af:bc:08:ee:14:69:55:13:11:78:43:e8:
75:84:84:28:b4:8d:81:77:0e:1d:a7:be:dc:22:ec:21:b9:42:
fc:27:18:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:23 2025 by rpki-client