Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
File: HgxHunmaBgczODuKTbNuhLYtMV0.mft (raw, json)
Hash identifier: J49csO8wSHGuMsqDuJO16hnRcBTCYI/e+gvz9gPlBuE=
Subject key identifier: A1:3D:D0:9B:ED:F0:D2:FA:33:5B:FD:F4:EB:71:AC:EF:77:B2:99:DE
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Certificate issuer: /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial: 0199FCC663216860E98C2CAD435AB41B1079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
Manifest number: 1477
Signing time: Sun 19 Oct 2025 14:01:23 +0000
Manifest this update: Sun 19 Oct 2025 14:01:23 +0000
Manifest next update: Mon 20 Oct 2025 14:01:23 +0000
Files and hashes: 1: HgxHunmaBgczODuKTbNuhLYtMV0.crl (hash: IrTrgj7w7mv2ZBa8ZR3ymzRQJG1rTqGgGOahwMThGuw=)
2: efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa (hash: Ks2lZAvTiIXOJHL4XOxVW69lFz0D0Ra18E8s7zHIoZo=)
3: xFzbq7zegADAXEC3JlJ8gW_VXDA.roa (hash: NRYhSLCd0Q4zIkCT1UgOQ1E2p+RPP3+6wGhkQgIto+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:63:21:68:60:e9:8c:2c:ad:43:5a:b4:1b:10:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Validity
Not Before: Oct 19 14:01:23 2025 GMT
Not After : Oct 20 14:01:23 2025 GMT
Subject: CN=a13dd09bedf0d2fa335bfdf4eb71acef77b299de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f7:4d:7b:4c:8d:1b:28:21:ea:b7:d4:8a:18:
89:92:01:7f:93:a0:2e:45:1b:40:5b:20:50:09:77:
c4:a0:29:34:d1:71:23:31:60:6a:b3:bd:4d:48:d8:
d6:e2:52:94:65:da:17:67:8c:e7:77:5e:fa:29:1f:
da:ad:5c:65:fd:93:b0:4c:bb:ca:b8:96:ee:49:40:
3b:d6:7f:8b:4d:7e:62:d1:a7:f2:30:f1:a4:af:0e:
47:87:35:5f:77:36:f5:7b:83:1d:46:9d:ff:e9:e1:
4f:3b:ce:36:03:a9:b2:94:14:15:c2:e2:3d:22:56:
d9:ac:3c:44:32:d6:ff:d6:31:86:c1:fa:97:30:2a:
10:f3:eb:1a:60:18:d6:2c:a4:2e:eb:82:e2:ae:a6:
b4:fb:39:35:50:fc:eb:c0:02:3f:c8:cf:df:ae:9b:
09:bb:9a:c0:99:5c:28:0e:47:00:d0:ea:80:5c:99:
b0:ec:f3:c5:d1:d6:a0:21:5b:35:19:dd:d9:44:1b:
38:1f:4e:b3:21:15:c2:84:c8:ab:cd:5c:28:2b:c3:
86:5c:18:26:2a:e0:b1:f1:2d:83:54:b6:ba:21:10:
25:fe:e1:b8:dc:a1:e3:5d:54:86:8d:61:78:56:4a:
de:91:3f:fe:7d:71:91:85:95:09:74:83:86:4b:c9:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3D:D0:9B:ED:F0:D2:FA:33:5B:FD:F4:EB:71:AC:EF:77:B2:99:DE
X509v3 Authority Key Identifier:
keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e8:f5:19:a9:0f:7a:29:44:92:b1:4e:23:ba:ce:13:be:59:
e0:f0:e9:24:55:26:bd:9a:0b:b6:06:9f:98:12:5f:6d:2f:37:
63:94:39:7c:02:07:22:89:5d:fe:c2:3b:61:74:c4:0d:79:7b:
d5:c3:d0:9c:ce:11:e2:0b:15:43:fc:de:fe:0e:a3:57:04:40:
e0:35:9e:01:a6:9f:e4:55:85:93:89:58:21:b7:28:7e:fb:77:
4e:19:a5:ea:30:03:92:c0:76:4c:0b:cd:44:d7:e5:e8:b4:d2:
d3:da:63:dd:e3:5f:97:bc:99:ad:e9:a1:43:ae:4c:5d:51:93:
fe:52:2c:28:49:c6:ef:a6:8b:53:30:56:09:4b:c7:44:57:0f:
fb:2c:be:26:63:74:6b:e0:88:40:52:9b:62:be:f6:af:fd:74:
0d:e2:90:e3:b5:9b:79:7d:5d:62:96:86:ab:56:05:0f:e3:89:
fa:05:2c:00:73:fd:32:db:0b:5f:62:37:9e:0c:26:a1:89:11:
07:f1:ec:00:33:f4:07:eb:e8:61:88:15:1b:53:c3:39:85:90:
35:a2:7a:41:54:51:bd:39:91:46:fd:3e:20:25:57:32:83:e0:
ea:24:ff:71:ac:dc:24:88:78:bb:43:1f:29:6f:53:a6:c8:ea:
29:0a:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:14 2025 by rpki-client