Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier: hAbMNUMT7/scPDxeyet2AFf+Q3VrB6BPm+QO5sZO0u0=
Subject key identifier: F2:95:C0:32:FF:92:9C:B2:61:36:D5:A0:01:99:5C:EB:14:51:27:56
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial: 019A0259EC54319A8C4C835010234F328841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number: 0DC9
Signing time: Mon 20 Oct 2025 16:00:38 +0000
Manifest this update: Mon 20 Oct 2025 16:00:38 +0000
Manifest next update: Tue 21 Oct 2025 16:00:38 +0000
Files and hashes: 1: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: qbL9P1AJEf3FVHEYJ6JDj0RzbQnQs0J2avZt+P297Xs=)
2: lE0Hn99x0fhwc2jXac5uga-vHXs.roa (hash: iA0oHrpgL6CqGZiYUNOViB4cOKniJ8+iyJSulMgnLyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:ec:54:31:9a:8c:4c:83:50:10:23:4f:32:88:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Validity
Not Before: Oct 20 16:00:38 2025 GMT
Not After : Oct 21 16:00:38 2025 GMT
Subject: CN=f295c032ff929cb26136d5a001995ceb14512756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:95:4c:5e:78:fe:87:79:c8:b1:76:5c:7b:
a7:8f:65:06:81:e4:30:29:c1:4b:bf:9a:dc:39:50:
19:c5:de:84:b8:be:55:28:0d:09:42:75:93:2d:13:
f2:6b:dc:70:b7:a4:45:de:7c:bb:ae:ab:8b:fa:22:
f8:a8:60:4a:1b:aa:e2:0d:ba:ed:e0:3c:9d:f3:50:
ff:16:0d:b9:1a:49:d8:fe:b3:5e:88:24:f7:a5:e0:
af:57:ca:34:74:ea:48:15:88:5a:29:5f:37:c0:05:
0a:50:e9:17:c0:6e:6c:a7:a8:54:a2:64:96:82:4e:
b7:aa:97:e4:1f:85:6e:12:b7:a1:88:2b:0c:14:ef:
fb:23:9d:2b:fb:2f:09:ab:26:f8:3b:23:d1:e3:36:
a5:0c:bf:81:52:e7:9d:d6:65:29:e6:df:ea:9f:46:
c9:dd:54:bb:c7:dd:b0:5a:f0:6f:fd:de:7e:c3:81:
08:c9:1c:a5:30:7b:5b:bf:c0:a6:59:da:05:de:88:
97:c5:ab:a8:18:25:1a:bd:d9:17:bf:97:f7:12:0b:
5e:16:2d:51:3d:79:a4:f5:28:62:6e:1e:77:f1:59:
47:cd:67:70:b3:dd:c8:05:15:80:ba:3d:92:e3:6c:
dc:50:74:35:ed:37:b2:05:b6:78:f2:e8:07:a1:a2:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:95:C0:32:FF:92:9C:B2:61:36:D5:A0:01:99:5C:EB:14:51:27:56
X509v3 Authority Key Identifier:
keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:26:7f:ec:30:21:dd:7d:3d:92:12:7d:d7:ea:9d:59:26:10:
a9:2f:09:cd:ac:51:b6:17:f9:18:3b:7e:3b:40:e8:fa:b7:0e:
90:6d:78:f3:51:b3:29:65:78:2d:3f:8c:0a:20:0f:17:eb:7e:
9e:10:4d:0c:fd:e8:94:22:9f:76:11:b1:55:01:82:d7:f2:21:
23:bb:90:dc:60:fd:e3:0e:12:64:7a:34:87:f0:7c:c3:86:33:
ea:79:d4:e8:c0:ff:6a:ff:0a:54:80:a2:46:49:4e:e8:1a:d9:
c2:dc:b1:a3:bb:3a:3d:1e:5e:53:96:cb:0e:21:89:5e:33:61:
a1:57:ed:cb:c5:12:77:39:8e:47:b2:68:c9:a1:1d:96:aa:b8:
be:b7:d1:6a:b6:57:cb:af:ac:46:63:1d:fc:e9:c7:d5:4b:18:
62:ef:49:9a:bf:43:9b:4e:72:a1:b4:b0:06:91:35:b0:8d:cf:
fd:5a:67:52:6b:60:3a:b1:db:5f:19:2b:7f:c8:45:69:66:68:
d5:c9:10:d4:d2:a1:60:e6:a7:18:a1:60:93:76:b8:08:12:8a:
91:da:ce:68:b7:d6:01:98:b5:a1:3e:80:8b:61:05:d2:c3:85:
da:d7:c4:b9:b7:8c:5f:c5:47:0c:9d:3e:5b:a0:de:b6:f0:20:
ee:29:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:25 2025 by rpki-client