Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: FdNGjhLPZECOAUa1+WnbmP8AI/p8/x5xxGYIgEWd68U=
Subject key identifier: A5:70:EA:9B:44:E2:34:3A:62:04:ED:79:5B:FB:48:D4:8F:5F:89:C9
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 0199FD6B49A0D10C47C85B076714CC1CA624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0BA6
Signing time: Sun 19 Oct 2025 17:01:30 +0000
Manifest this update: Sun 19 Oct 2025 17:01:30 +0000
Manifest next update: Mon 20 Oct 2025 17:01:30 +0000
Files and hashes: 1: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: sUCXDLJnUosUfcDmvW/oaYiZP6ixrSl0NRFLpo6Nlp0=)
2: IGa7QfhbXaDsGCT9xJOI5gdu6yw.roa (hash: X0y8/lBS1BHPwzQ2lfqfjmgEWEXvXO2MftnVLJbE6FY=)
3: VwEoUNw-ez0MhDo9hKLki2sD7x8.roa (hash: hJNorU0BhP7KaHlsAZlKF465rhSAsAGROKIAje3NnsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:49:a0:d1:0c:47:c8:5b:07:67:14:cc:1c:a6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Oct 19 17:01:30 2025 GMT
Not After : Oct 20 17:01:30 2025 GMT
Subject: CN=a570ea9b44e2343a6204ed795bfb48d48f5f89c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:90:17:33:83:f6:36:3e:f1:d6:23:dd:55:
b1:d2:b0:63:d0:ad:1f:74:b3:e9:e8:1e:5c:2d:2b:
45:1a:40:6a:ef:f8:cb:d8:a0:e5:34:7d:fc:8d:58:
8a:ea:b0:bc:ff:d9:84:21:e6:c0:dc:82:01:92:9e:
11:f9:0c:70:3a:af:1a:6e:10:b1:48:64:09:59:6a:
5d:22:2a:0c:e4:0d:0a:14:d3:9a:39:d9:5b:14:71:
4f:5a:8c:78:59:ca:7a:73:76:e2:67:3d:4d:b5:4e:
45:21:63:24:19:91:6c:7b:e7:1b:64:73:2f:04:6c:
23:a6:2e:e0:6f:f8:48:6d:49:b3:e7:c4:f8:94:b0:
e0:ee:3f:1c:ec:b0:bd:9a:92:d6:5d:dc:99:96:e9:
6e:a8:e6:87:eb:ae:1e:e5:8b:d3:55:d0:5c:bb:6f:
e2:e9:87:fc:32:9c:0a:f6:40:ee:83:99:8a:02:2f:
11:a2:00:30:95:ef:69:90:da:c7:dc:88:4d:52:48:
50:6e:bd:39:99:8c:05:94:21:fd:b0:df:04:2d:06:
04:a0:ad:49:cc:32:0c:bc:c9:16:61:87:24:68:8f:
37:84:af:9d:d9:b5:79:f4:ac:2e:c0:01:75:e7:a1:
8e:7a:89:55:cf:90:52:b6:dc:54:7f:19:9b:d3:95:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:70:EA:9B:44:E2:34:3A:62:04:ED:79:5B:FB:48:D4:8F:5F:89:C9
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5f:bf:db:52:e7:63:44:25:0b:85:ec:81:58:b8:17:21:6c:
f3:72:57:f8:13:4d:07:97:40:10:13:7c:1c:93:f3:6d:56:d8:
5c:55:e9:7c:15:f6:1d:65:5b:23:05:56:99:78:8d:33:ec:14:
53:91:ac:b9:c5:c0:fa:ed:1c:55:66:93:29:94:2f:23:d0:c3:
69:6d:73:b2:8d:18:8d:ed:1d:46:9b:86:cf:68:44:5d:c1:ad:
98:18:6f:52:33:aa:d2:1b:e3:ba:3b:50:cd:69:22:2a:70:94:
a0:17:69:a1:0c:72:0f:47:ac:92:2c:f4:d0:f4:5d:53:88:ac:
9c:ec:28:9a:16:1a:9f:e2:95:04:03:35:60:07:0f:00:fe:80:
1b:a6:cb:ac:36:35:5f:da:51:e2:65:78:e4:d6:37:56:38:b2:
4f:29:4f:8e:dc:05:dc:f6:f3:2a:6d:0b:61:09:5c:51:d9:55:
fe:76:6f:e7:84:75:c6:6d:6f:1d:1f:2c:09:ef:14:d9:cb:81:
45:60:eb:a0:30:3f:6c:40:42:ed:57:95:0f:57:19:24:85:35:
ee:d7:c0:da:2e:e1:bd:2e:df:11:06:19:38:cf:7c:b6:4b:03:
9e:95:f6:21:97:6e:29:e1:b7:4e:38:43:d3:ad:3c:d9:c1:3a:
d1:c2:30:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:11 2025 by rpki-client