Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
File: HM0FImy0wZeflqBtLrZoO1sPao4.mft (raw, json)
Hash identifier: FswkAv3lLloyyIfoUbP48o4FWkMpVzrrJ6dRnqh+xjA=
Subject key identifier: EB:B6:83:3B:FF:73:89:A5:60:DF:D8:9D:DC:45:6C:CA:0F:5C:A4:45
Authority key identifier: 1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
Certificate issuer: /CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Certificate serial: 0199FC8FAC77ED0EB6414ABB1C6FE8576446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: HM0FImy0wZeflqBtLrZoO1sPao4.crl (hash: yrfHBOXsQGASm9xITdhnaRABilIgccJ2HIfu42vigfE=)
2: HNpMhKMf-UOKB_2xrTd5Ah5Jh4E.roa (hash: wTidaPS7G17Hoeusbm7EV9pgsdks7oYQI4PUUl46YEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ac:77:ed:0e:b6:41:4a:bb:1c:6f:e8:57:64:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=ebb6833bff7389a560dfd89ddc456cca0f5ca445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:8b:dc:06:ed:bc:c2:bb:a9:e6:87:8f:3e:
02:f6:61:f5:7d:49:1e:09:6b:84:25:02:7d:d0:15:
29:ae:ce:82:1b:fb:e8:63:11:79:c6:94:79:ed:1d:
46:c8:5f:0a:97:37:4c:8d:38:06:51:35:29:32:09:
e0:77:57:5d:4b:66:ac:63:a9:3a:23:57:1b:21:6d:
68:f1:c3:19:9c:27:2c:89:b9:de:76:e8:27:db:f6:
d3:5b:f3:87:3d:76:0b:28:fc:04:1e:b7:1a:50:72:
df:01:0a:77:20:8a:8e:62:72:af:ff:9f:c0:e4:7c:
64:3f:5e:12:39:4f:d8:4d:fc:f7:aa:7b:ba:78:18:
03:f6:02:71:2c:02:bd:10:69:2b:8c:03:9d:c7:15:
7f:c0:4a:ab:c7:80:33:81:19:30:16:a6:15:44:1d:
11:dd:b8:dd:15:54:2a:4f:d9:bc:2c:87:6e:70:61:
dc:8b:a4:b4:50:10:4a:e2:d3:fc:90:51:72:48:0a:
66:d5:d3:97:51:9e:eb:e3:9a:6e:6a:b8:74:b6:58:
f6:bc:2a:9c:07:0b:1e:05:2f:74:b7:08:db:b9:df:
03:15:92:62:e1:07:ab:6e:5e:41:2d:f8:de:7c:8e:
4f:70:29:45:ea:ab:53:2a:60:1c:e4:c9:36:38:4d:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B6:83:3B:FF:73:89:A5:60:DF:D8:9D:DC:45:6C:CA:0F:5C:A4:45
X509v3 Authority Key Identifier:
keyid:1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:84:3c:0f:46:54:8c:e8:25:01:56:b1:40:0f:b8:9e:c3:a5:
6d:a8:4e:1b:9b:d3:de:16:89:36:6b:4c:a8:a4:33:a8:fa:74:
74:cb:7a:74:a5:60:b7:b9:66:60:a4:a6:0f:d1:ba:89:ed:d4:
31:29:81:e3:d9:b9:83:20:f8:d6:f4:21:1d:6b:ad:12:b2:ad:
74:ac:4e:2b:7c:18:ca:d4:66:58:c0:10:16:64:96:a8:01:0a:
dd:30:f6:07:9f:c6:38:04:f9:d5:be:f6:ba:9a:fe:16:13:ba:
16:f4:f7:78:2b:82:de:59:70:2f:d3:90:20:96:32:48:96:fc:
a0:02:5e:cb:88:8e:ad:44:fd:58:47:36:de:89:12:ba:04:7e:
a5:d0:4c:42:89:2d:70:4c:b5:5c:2f:34:fb:28:29:ae:91:f5:
77:c7:5d:d1:ba:ae:c0:b2:8c:e1:a4:77:93:23:b2:c6:32:28:
b8:df:90:2b:09:22:ec:7e:6b:1f:25:6d:5a:eb:79:c5:09:ab:
f8:a9:3e:2e:8e:a4:d5:84:d2:d5:1b:cf:22:a9:fd:50:d7:aa:
82:bd:c4:3a:a8:a0:c5:49:99:08:c2:75:5f:79:04:b6:6a:c6:
2e:a1:18:ad:86:ed:28:dd:0b:d6:00:a5:6c:25:ac:dd:4e:7f:
26:f6:e3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:57 2025 by rpki-client