Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: W8rtGDYAzBlUIxcgwFPB2gkd+Q16s+srIPJCP3+UlNw=
Subject key identifier: 1B:4B:C5:E8:3D:42:CA:A8:08:D7:36:FF:5F:F6:6A:ED:37:AA:3A:36
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 019A00356DC8B757A0371330AF2B42A090E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 0345
Signing time: Mon 20 Oct 2025 06:01:32 +0000
Manifest this update: Mon 20 Oct 2025 06:01:32 +0000
Manifest next update: Tue 21 Oct 2025 06:01:32 +0000
Files and hashes: 1: 0tHvPtdsZRMSdECFrWywHEFzjJY.roa (hash: wDxCLikDUetb91mXxU1f33qmz0PqiuAAUobRz5+KIoE=)
2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: NcsAwKXtZARkGpOMnLmi98qda3AGARm04cZITskJimk=)
3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:6d:c8:b7:57:a0:37:13:30:af:2b:42:a0:90:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Oct 20 06:01:32 2025 GMT
Not After : Oct 21 06:01:32 2025 GMT
Subject: CN=1b4bc5e83d42caa808d736ff5ff66aed37aa3a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:45:c6:61:ab:68:54:d9:11:cf:da:a3:cb:
9d:7c:16:4f:73:4d:b0:72:f6:f4:38:2c:9f:6f:a3:
3a:70:18:35:0e:a3:42:73:41:5e:ea:f6:5e:09:7b:
a1:77:ed:bc:7b:eb:67:88:cd:88:96:b4:46:6e:48:
2d:ed:1c:35:5d:c3:34:87:be:1c:f5:7a:03:7b:d1:
a4:ce:a6:40:99:11:c6:c6:56:f6:b1:55:c3:fe:a1:
ba:c1:95:35:ee:62:80:b9:e3:12:5e:7d:8e:e2:f1:
f9:83:e6:d9:58:fa:3e:03:8b:a6:40:90:87:dd:52:
79:2e:79:27:50:4a:52:0d:48:57:3e:6a:45:6c:f2:
70:a1:c6:40:78:2f:32:f2:db:6f:f9:52:84:f3:f9:
53:d3:fe:af:89:d2:54:88:24:d5:23:65:4a:0d:5d:
30:be:b8:9a:20:0e:99:0a:03:d2:e4:23:bd:8a:76:
70:46:10:46:49:4a:cc:86:39:c2:c5:c3:3f:0f:cb:
2c:40:f2:7a:74:2b:c3:9a:1e:a9:bd:a9:1f:60:37:
b1:2e:97:4a:43:5a:38:2b:56:9d:7f:d3:9b:2a:94:
d4:59:cc:4f:32:ad:4c:f0:fe:bc:2a:84:36:55:ab:
71:e6:46:9b:69:48:46:1b:84:d6:2a:e0:9e:f5:9c:
c0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4B:C5:E8:3D:42:CA:A8:08:D7:36:FF:5F:F6:6A:ED:37:AA:3A:36
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2c:94:7a:ae:c6:2b:f0:40:99:ce:19:95:a3:b6:5a:5a:3f:
7f:4f:66:6d:66:f8:ec:d2:c4:16:42:bd:88:da:fc:34:47:9b:
52:7c:ee:26:13:4d:07:02:95:62:3f:14:f5:04:c7:56:50:ce:
d1:47:b4:1c:0b:e5:01:ca:a0:79:62:36:74:dc:cf:32:73:6d:
66:65:15:38:e6:15:44:b3:cf:66:c5:16:ca:86:ab:9c:93:80:
20:cb:f3:af:9c:8b:5f:73:69:dc:7a:59:ad:b1:41:79:44:ee:
6c:81:4b:a4:89:60:3f:6a:ad:d8:27:3b:9b:b1:4a:c3:e2:f4:
e5:78:b2:91:15:46:00:f5:f1:98:fd:80:98:0a:29:76:0e:3a:
35:4b:a5:1a:87:9a:35:5f:c9:51:c2:de:af:4f:fa:fc:5b:5c:
a2:78:32:27:d4:a8:a7:46:37:00:74:05:bc:f6:97:20:5c:f0:
32:e4:9f:ef:99:65:28:31:49:b6:1a:92:20:85:a9:73:1b:b5:
8e:f1:7f:9d:59:5a:8b:69:86:92:27:f7:e7:31:ab:cb:d2:b2:
ea:71:aa:64:c7:c3:03:66:56:17:39:38:41:10:2b:5c:49:d9:
e3:14:39:ed:3d:77:e9:d9:17:13:11:e1:cd:75:9e:ce:3a:8d:
38:db:b7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:05 2025 by rpki-client