Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
File: HcKeV0nukcWjOujjC33J__OV_-Y.mft (raw, json)
Hash identifier: yES3jhtKYUJd+LuPtvMKZr3fpHeJMy+duZD6EJBT2sA=
Subject key identifier: 88:9E:9A:DE:34:BB:D9:88:6C:DA:F1:34:B0:50:FD:DD:9A:78:74:79
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 0199FBEAE1C92C4DF8BE8144E75B9EA28D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:38 +0000
Manifest this update: Sun 19 Oct 2025 10:01:38 +0000
Manifest next update: Mon 20 Oct 2025 10:01:38 +0000
Files and hashes: 1: HcKeV0nukcWjOujjC33J__OV_-Y.crl (hash: tUOQSXz8XfDzxBNSbFowGY8pQ659q+1bRoLu/acpRgU=)
2: z6MmCrjG_M-ly3NSz9op9zn2Kp8.roa (hash: RhWaGG++pr/cOsZo3DpIE+m6eX6qqpoZxRcmwUA1c6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e1:c9:2c:4d:f8:be:81:44:e7:5b:9e:a2:8d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: Oct 19 10:01:38 2025 GMT
Not After : Oct 20 10:01:38 2025 GMT
Subject: CN=889e9ade34bbd9886cdaf134b050fddd9a787479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:78:4e:a1:a3:f5:e8:65:7e:d7:11:69:91:38:
46:6c:1a:c1:87:80:63:d4:ff:48:63:22:40:3a:29:
bd:8b:d0:d9:67:52:ba:38:00:10:fc:02:98:af:40:
4c:48:22:e7:7b:11:79:9b:1a:8d:b0:6f:2c:d4:f6:
2b:2d:ee:4b:df:02:8a:e1:00:cd:16:ce:4b:2c:ad:
81:f3:98:0d:fb:0a:1d:09:34:fb:ab:4e:32:5e:61:
1e:df:52:9f:f8:cf:82:f3:37:f3:8c:bf:b7:a9:84:
d3:9d:9e:cb:26:07:ab:d5:35:e4:65:47:da:0b:6f:
7c:14:da:bf:bf:a9:88:64:58:96:78:e6:5e:2d:9c:
95:00:7c:2e:15:9c:a3:60:17:b4:56:71:b1:ba:71:
d9:d8:9b:a9:21:10:4c:af:ac:80:77:7b:3c:c7:02:
9d:33:3e:6e:92:5b:23:9a:1b:c3:34:98:44:19:ae:
c9:1d:87:42:f1:f6:38:4c:a5:2c:2c:10:b3:3f:a1:
9d:9f:29:8c:23:14:41:29:6a:27:b8:0f:52:ff:0d:
89:ac:f4:d6:43:16:ca:17:52:16:c6:71:91:36:fc:
62:f0:8e:a7:6f:d6:b6:3a:2e:24:e6:f0:60:fa:9a:
97:04:52:8b:63:5c:4e:36:4f:b5:68:7b:07:89:0c:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9E:9A:DE:34:BB:D9:88:6C:DA:F1:34:B0:50:FD:DD:9A:78:74:79
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:17:62:d4:44:c2:08:18:d7:48:f7:ed:ad:b7:f5:a8:85:66:
14:15:02:f3:cb:05:ee:5e:5c:40:a1:1b:ca:99:bd:a2:f7:bc:
dd:ed:03:89:e4:09:c2:ca:9b:3f:80:63:f4:f9:34:d9:fe:b0:
64:a0:b8:a0:95:7d:3d:2a:61:1d:30:d8:a8:86:4a:a6:b3:14:
7b:ea:0a:a0:6c:7d:6e:88:b4:5f:2f:2a:a2:8a:96:5e:97:4a:
81:1e:87:89:d8:86:10:60:fa:15:a2:e1:2d:58:10:54:ff:7c:
db:c9:2f:a2:50:d3:2d:69:1a:bf:40:04:0d:af:d7:bd:74:49:
ce:ff:d3:4c:af:50:f4:5b:93:93:66:e7:a1:84:c9:ac:d8:bf:
39:5c:7c:dc:d9:31:12:e0:01:77:b3:7d:b6:07:a7:a5:4f:91:
f4:3f:75:d1:fb:99:35:fe:c6:69:3a:e7:e3:a6:ff:eb:a1:d3:
32:f8:33:77:3a:d8:9e:db:7a:16:43:dd:46:ae:9d:df:00:21:
69:8c:ac:04:21:06:1c:07:a0:55:21:97:3e:4b:75:52:d4:2f:
e9:fd:97:36:cb:c3:2e:ce:f0:8d:cc:1a:41:85:27:3b:78:63:
c0:73:0e:79:06:47:2e:c1:88:65:7c:dd:75:1e:65:54:11:8d:
5e:44:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:52:04 2025 by rpki-client