Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
File: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json)
Hash identifier: Kev1EPfRh6eJzmMP4W0wVwFIyikBAscrpYgnXEmn0T4=
Subject key identifier: AE:B9:10:22:4A:98:B4:4B:6B:B3:B9:BB:7F:70:E9:84:4B:E9:DC:BC
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial: 0199FBEA951CA61779DF9EDEFA8C7D464599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:18 +0000
Manifest this update: Sun 19 Oct 2025 10:01:18 +0000
Manifest next update: Mon 20 Oct 2025 10:01:18 +0000
Files and hashes: 1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: +ospV7b7v02YmMrMBEHiDflPmkVD4QYs5eQhdQHhnsw=)
2: zWwWyLKfCmRpNmwFBTvojnygc1I.roa (hash: rn4lqHeH4XjZAogo04iFGrMuS15xr6iivrKPmjp5V94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:95:1c:a6:17:79:df:9e:de:fa:8c:7d:46:45:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Validity
Not Before: Oct 19 10:01:18 2025 GMT
Not After : Oct 20 10:01:18 2025 GMT
Subject: CN=aeb910224a98b44b6bb3b9bb7f70e9844be9dcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:9a:6e:7f:cc:5f:f7:4b:a7:96:b0:f5:8c:
83:a2:48:ed:d3:f8:9e:da:a2:ee:07:e4:40:71:22:
4f:8c:1f:f1:ee:43:38:c2:d5:ea:4e:7f:aa:35:e2:
78:ba:ce:a4:b6:15:06:06:10:9a:c4:44:62:ee:e1:
d7:fb:29:76:80:58:e8:bf:32:f1:a4:3e:8a:d4:9a:
cc:3e:58:82:8b:f7:c3:b1:36:c4:66:e1:44:d8:f9:
f2:12:46:21:b9:c2:e6:8f:e8:20:8c:1b:4e:a8:fd:
27:62:8d:1b:e4:35:f5:cd:28:21:ac:8d:ae:9c:d1:
bd:74:8e:14:0a:b2:6d:85:7d:ac:18:e0:9a:f4:88:
e8:0b:ca:97:a4:3f:5c:16:0a:41:4f:a2:f2:df:9c:
aa:4e:ef:a4:ad:ae:8e:4a:45:53:b5:a0:9e:55:85:
43:a1:76:16:c0:1d:92:db:ce:0f:ab:6c:05:f3:cf:
a0:8a:25:97:24:f2:32:c9:aa:72:3a:d6:49:87:29:
b2:04:c5:92:af:01:f5:08:96:ff:2a:93:ca:f6:e5:
1d:4b:cb:e8:11:43:9a:c9:79:36:ea:8f:47:b4:1f:
b8:4f:99:58:ac:d1:c6:49:11:33:8b:25:10:2d:5e:
75:d7:a1:ec:aa:fe:bb:f7:cd:3a:dc:4a:d1:09:b2:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:10:22:4A:98:B4:4B:6B:B3:B9:BB:7F:70:E9:84:4B:E9:DC:BC
X509v3 Authority Key Identifier:
keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:f8:c6:7d:bb:d8:02:ec:85:34:34:c3:ac:60:d8:cb:2c:23:
13:8d:83:45:3c:81:09:d1:4d:6a:66:79:d0:4a:49:a3:c6:81:
b8:e7:44:25:30:63:94:77:4d:d3:9d:bc:df:b6:b2:98:99:6e:
ea:c6:f2:43:79:a3:9c:36:04:75:7a:25:c5:3d:9d:e6:f5:3d:
6c:d5:9c:7b:70:27:2d:0c:e1:66:a8:3e:14:bc:12:02:64:2a:
95:55:e5:b3:1a:90:db:cb:aa:ac:dc:42:3c:d3:d3:32:4e:df:
b2:5e:09:00:fb:37:48:61:23:e1:59:8b:7c:d1:b6:8b:fc:d2:
4e:c9:f0:03:24:2a:3d:60:53:68:1e:eb:de:13:af:4e:90:16:
10:91:7c:18:d1:96:68:76:3f:c3:90:b2:99:28:8d:37:ee:2a:
7a:9d:c8:8b:80:14:b0:c0:bf:3c:a1:f1:10:85:a5:6e:7d:70:
8c:bb:eb:6c:6b:ec:b1:ae:d3:65:ba:81:2f:44:7f:ed:f3:e8:
0a:97:31:bd:9b:df:ff:98:15:04:ea:df:e3:35:8d:f8:09:78:
f0:84:58:d3:0a:2b:97:bd:ad:13:43:79:b3:53:c3:c9:11:2f:
39:57:e4:8a:b7:d5:47:91:5c:5a:0c:63:da:a9:1f:4d:06:18:
69:53:21:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:43 2025 by rpki-client