Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: 0Svm9jP7y0iZSvTy0YDXeWhaNAvHX95SDZe0FVXrIHg=
Subject key identifier: E5:28:A8:99:6D:90:48:8C:AA:40:76:2A:95:88:82:CF:B0:D1:DD:19
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 0199FB0EC38BEAD6B7B908A0D59D30E5CF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 06:01:12 +0000
Manifest this update: Sun 19 Oct 2025 06:01:12 +0000
Manifest next update: Mon 20 Oct 2025 06:01:12 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: SYmcEGmeFapWftDGG5WGVMj3vmmq3+i1OC3ZK1f5zHI=)
2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:c3:8b:ea:d6:b7:b9:08:a0:d5:9d:30:e5:cf:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Oct 19 06:01:12 2025 GMT
Not After : Oct 20 06:01:12 2025 GMT
Subject: CN=e528a8996d90488caa40762a958882cfb0d1dd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:68:1e:ad:fb:3b:33:ae:c2:35:71:40:cc:cd:
e9:55:35:90:7d:bc:48:7a:a1:81:ce:b4:53:76:be:
0f:a0:d6:b6:b3:71:34:8d:08:1f:e5:26:ef:07:10:
a2:ad:10:d7:d1:99:ae:d3:bd:e6:44:44:79:56:7b:
7d:6a:da:91:ae:52:f3:c1:39:8f:6f:ba:68:c3:0f:
5e:6b:b8:c8:90:75:53:4c:ba:89:8d:3d:b8:09:5c:
be:b9:18:98:ed:ef:7b:04:bc:95:de:75:a8:3d:86:
ef:b4:51:75:8f:78:65:2c:2f:e8:57:df:46:a5:34:
77:81:6e:d1:a7:7f:7b:ce:db:43:01:f4:13:8f:30:
d9:99:35:31:54:98:d4:d3:61:b5:12:40:e1:d9:53:
72:a5:e5:69:31:53:b7:1f:f1:40:1b:aa:bf:ba:8d:
1a:ee:4f:0c:87:75:6a:bb:03:37:95:bc:5d:1a:e4:
ab:52:9d:6f:97:a5:6e:51:ba:63:a9:c8:10:50:86:
87:1c:4f:f3:b7:a9:87:36:f8:3f:92:a0:d0:b0:91:
a4:08:0a:45:12:00:c1:4e:10:96:bc:65:d4:3a:08:
28:15:22:5a:18:3f:e8:14:c2:fb:92:11:31:af:0a:
1a:92:2f:d2:38:e8:b0:6e:ad:59:9f:e9:6f:22:a3:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:A8:99:6D:90:48:8C:AA:40:76:2A:95:88:82:CF:B0:D1:DD:19
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fc:6c:55:02:b5:7c:f2:52:4e:88:c3:5d:41:bf:1e:b5:90:
9f:fb:48:c2:5f:c9:a8:67:c7:5a:1f:cc:a1:78:a5:f0:0a:f4:
b7:cb:b8:da:9d:e6:ec:aa:f5:cd:4a:42:1d:0d:92:3e:31:86:
3d:ab:82:11:c1:ce:96:ef:6f:6e:65:4b:57:ec:d1:1d:d1:b5:
96:48:2f:a6:f4:12:11:8b:e6:0f:2c:8f:bd:b7:62:42:d3:8b:
bc:6c:48:aa:2a:3b:e2:1b:53:dd:92:2d:f3:6b:f6:56:e6:09:
ed:65:fb:a4:cb:b0:aa:4b:ad:d5:30:60:1d:ae:e9:1a:73:3e:
d7:31:57:de:51:db:8c:01:01:24:c7:a5:63:42:43:f6:0b:e8:
04:88:32:6c:13:f2:07:1c:5a:04:00:70:09:1a:00:ad:24:fa:
6f:07:82:12:57:15:45:3c:22:b7:64:d1:2e:92:b8:82:a6:5d:
2f:44:01:51:d6:9c:c2:55:9e:6c:b7:2e:d3:98:40:12:29:3c:
5f:19:68:bb:a0:30:b8:2e:d8:aa:3f:b2:97:68:eb:93:35:25:
f4:e3:c4:01:cb:54:59:6b:9a:4f:43:c0:14:25:16:e8:75:09:
f7:08:7b:9f:b8:a4:e6:a1:28:74:d6:08:76:35:89:7b:c3:2a:
74:72:db:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:41 2025 by rpki-client