Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier: nwx883p1H6jAnx+8DtZVb8j+tTzOiKGuzDE9/uhNcNM=
Subject key identifier: A9:D4:37:35:7C:1E:88:9C:92:B4:97:DD:4C:04:9D:AB:36:A4:45:AB
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 0199FBEC280104D497B8B88F4131B395F765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number: 1070
Signing time: Sun 19 Oct 2025 10:03:01 +0000
Manifest this update: Sun 19 Oct 2025 10:03:01 +0000
Manifest next update: Mon 20 Oct 2025 10:03:01 +0000
Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: SdI26XxFgxIsvnDUz7zxBvdDqqyW4+dHCjUdESOkrNM=)
2: kk1RvulsDSTUcsB-uonoLPTmX_c.roa (hash: 8TFkWIExCyZU8KrfnY1OXWc5V95rzbge2YPptcmVOsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:28:01:04:d4:97:b8:b8:8f:41:31:b3:95:f7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: Oct 19 10:03:01 2025 GMT
Not After : Oct 20 10:03:01 2025 GMT
Subject: CN=a9d437357c1e889c92b497dd4c049dab36a445ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:5e:b7:ca:43:04:85:a3:62:2f:1d:47:ab:
31:c2:92:ec:a0:d5:6a:27:c5:6e:91:6a:e7:ab:68:
c1:9c:4a:a6:55:02:55:c9:30:44:66:c1:68:94:8a:
df:5e:da:9f:8d:7e:70:93:f0:5e:bb:98:2b:34:d7:
f5:cb:86:c4:be:90:11:d5:b2:bc:c6:72:75:18:2c:
b2:70:b4:b0:83:20:02:fa:f5:5e:69:f4:90:67:6b:
bf:1c:21:b7:5a:c6:5d:c0:a8:b0:ce:95:8d:39:f7:
bd:c0:0d:6c:9e:42:e1:9d:a8:50:de:2a:e6:37:35:
78:4a:d3:41:5d:f8:57:eb:21:c4:ca:d2:04:68:e6:
ee:73:66:09:d4:b7:47:2e:9b:0e:0e:9a:19:56:eb:
bb:40:85:86:d0:30:6e:d1:99:8e:e9:38:3e:21:e9:
f9:8c:19:eb:d2:d2:46:9d:aa:d3:af:4e:51:2a:26:
5c:12:4d:52:96:2f:2f:99:37:08:0e:e8:a0:c8:79:
d6:e6:e4:63:e0:09:78:7f:0f:eb:23:2a:77:f2:85:
ff:83:18:75:42:e0:1d:d1:ac:38:cc:91:6a:2e:31:
17:96:a3:8a:25:59:84:5a:72:50:0d:c1:60:24:b1:
be:02:0d:a0:29:ff:ed:e2:e4:c5:04:0e:bd:86:0f:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D4:37:35:7C:1E:88:9C:92:B4:97:DD:4C:04:9D:AB:36:A4:45:AB
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:61:cf:a7:11:0f:81:04:20:fe:70:fc:71:05:ad:04:20:24:
86:76:34:a5:fd:4e:40:8a:c5:ce:15:7d:58:7e:0f:86:78:69:
31:7f:4b:c4:c3:6a:58:28:86:4e:66:c4:57:85:49:8c:47:c0:
fc:c4:9f:df:59:22:0d:6d:09:df:26:d2:70:4c:cb:b2:07:ec:
e2:4d:4a:21:d8:15:80:4e:e1:f9:db:70:6a:e0:b9:e7:14:75:
c2:f6:0b:45:f9:bd:3c:40:3f:e1:c2:5f:f0:36:d5:a1:1f:ce:
10:4e:46:25:45:27:3c:8a:6c:95:55:58:96:13:b1:68:b9:22:
89:db:3f:7c:71:bf:8e:f4:2b:3c:09:84:2d:dc:13:5b:8e:5b:
9f:83:ad:8a:b8:3f:14:62:d2:d1:c4:d6:17:42:f3:83:47:87:
60:aa:cd:23:30:00:97:f4:a0:f5:13:ac:1f:a6:5c:b1:20:35:
e6:0b:73:ce:d1:83:a7:13:12:4b:a9:4e:ff:a3:fe:cc:5f:b6:
dc:c0:66:af:51:ee:34:26:35:c6:10:f6:b3:f4:be:cd:0a:ea:
f8:37:e4:74:9b:dd:9b:92:a9:07:28:80:ff:2a:60:f7:2f:96:
a8:44:0a:6d:54:d1:bd:ef:81:43:1a:6a:ac:68:85:02:42:42:
70:40:44:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:19 2025 by rpki-client