Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
File: HnTfStSP8hGgY1s38DeXeBnNQnY.mft (raw, json)
Hash identifier: 7nOf7Xj1Ve8z3lr4BfYEDvENcXv4xwnRhBHLxNjCktU=
Subject key identifier: B8:6B:B7:9E:AB:9D:FA:77:7D:60:10:AC:CF:2B:14:9C:58:38:90:09
Authority key identifier: 1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76
Certificate issuer: /CN=1e74df4ad48ff211a0635b37f037977819cd4276
Certificate serial: 0199FBEBBD02B9D593EB3CD7943E22CEF9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
Manifest number: 1A
Signing time: Sun 19 Oct 2025 10:02:34 +0000
Manifest this update: Sun 19 Oct 2025 10:02:34 +0000
Manifest next update: Mon 20 Oct 2025 10:02:34 +0000
Files and hashes: 1: HnTfStSP8hGgY1s38DeXeBnNQnY.crl (hash: JOFXyHsiKABIahidd1ywurD+FrlWVZpiWA2/91hwQVU=)
2: Ok6NAKJyDsxny6Pu8sgaLOPK-4Q.roa (hash: AjljfyyHOKD+CNGB+VnvlFrpChVnBPt40RoW2b77ukE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:bd:02:b9:d5:93:eb:3c:d7:94:3e:22:ce:f9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e74df4ad48ff211a0635b37f037977819cd4276
Validity
Not Before: Oct 19 10:02:34 2025 GMT
Not After : Oct 20 10:02:34 2025 GMT
Subject: CN=b86bb79eab9dfa777d6010accf2b149c58389009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:42:ba:81:c4:43:6b:70:c6:aa:04:da:6e:
b0:54:b2:4a:ca:79:43:90:c1:99:9f:d3:fa:38:06:
c2:f2:5f:23:5a:29:41:67:8c:6a:5c:7f:92:24:fc:
dd:3e:07:3d:b8:11:66:4b:f8:b5:a9:47:8a:1e:46:
3c:cd:f4:cb:e0:06:98:8b:d4:24:4d:c5:43:06:f4:
08:ea:5a:f7:89:b2:a4:20:8f:6b:07:03:e4:6d:65:
58:f4:02:d3:e1:73:3c:f7:32:40:ad:26:ae:fb:e9:
89:42:24:d8:c1:9a:b2:62:07:a7:30:d5:15:2d:1f:
de:dd:dc:4c:93:ba:87:a2:ce:35:e9:9e:d0:81:c0:
3b:69:06:4f:9a:77:7d:44:56:d6:31:e5:3e:d9:34:
c6:e8:1a:ab:32:20:e3:75:3c:89:f8:f2:b2:0b:92:
9d:ea:49:a0:16:7f:cf:30:9f:ad:34:ee:11:33:42:
c7:ee:a0:64:1d:23:03:dd:98:d6:4e:9b:6b:09:b1:
82:cf:4f:88:b1:51:07:3b:f5:b9:02:47:96:eb:55:
a1:9a:c1:f7:f9:13:9f:d3:46:a7:01:15:a7:27:0e:
a2:62:27:f5:64:41:40:5c:87:9e:6e:ab:70:bd:53:
61:3d:54:62:30:50:ea:45:bc:7e:4b:cf:c4:d5:a3:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6B:B7:9E:AB:9D:FA:77:7D:60:10:AC:CF:2B:14:9C:58:38:90:09
X509v3 Authority Key Identifier:
keyid:1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d6:6c:c8:eb:23:fd:f5:b5:f4:db:22:35:70:8c:5f:df:07:
64:2f:ad:ff:03:42:a4:47:d8:33:09:fd:d8:9e:35:51:45:e2:
8f:4b:f9:9a:74:ca:fd:8f:be:01:49:43:1f:3b:cb:89:3d:c5:
66:61:70:65:fe:13:a3:54:2f:5d:d2:ab:a0:67:e1:1d:16:34:
c2:c1:3c:71:95:77:15:7a:89:90:de:c2:66:b9:b2:9d:b8:46:
e5:f8:3b:c1:6b:80:16:8d:0a:2e:5e:42:0e:7e:af:19:5f:55:
e3:ad:d0:5a:19:a6:92:10:6f:b5:69:4a:92:95:de:ba:9c:d5:
37:85:e6:5d:8b:7d:cf:a8:81:d1:65:0d:4d:cc:83:aa:a8:11:
ec:30:ab:d2:eb:43:cf:65:46:c6:94:e3:66:bd:9c:15:3b:c9:
eb:7a:16:6f:12:32:5e:d6:4d:ba:7b:dd:43:3e:9b:44:e2:39:
62:49:16:cd:28:45:67:f2:0d:71:ab:8f:3c:3f:41:ae:8a:d6:
e3:54:64:8b:cc:e9:da:aa:92:1b:36:a9:a7:b7:e4:2e:fa:20:
5f:62:7c:da:9f:36:b0:03:9c:79:d2:df:7b:9c:f1:fa:ee:87:
8e:3a:f4:35:89:47:2a:5a:e2:aa:02:21:92:c2:08:31:eb:15:
04:a9:78:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:32 2025 by rpki-client