Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: dkTjQLp8BL17aEoih7hDU29e4SItu5YqcIpkQnCfJtY=
Subject key identifier: CC:A0:42:12:61:0B:C5:06:AB:0A:CF:36:15:B7:D9:4F:11:53:5D:CA
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 0199FDDA1761184B7830F43A90F49AC779DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:02:32 +0000
Manifest this update: Sun 19 Oct 2025 19:02:32 +0000
Manifest next update: Mon 20 Oct 2025 19:02:32 +0000
Files and hashes: 1: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: IWQJnVuX5vyjabHcHEhh8jWSxku19WSH3RQKzOSKhi4=)
2: oaiKe9BUmU6ux91XLaQvZC7XqN0.roa (hash: uC3IsodMVYaUiVMHtDRZahUGbsjXFHZTUvnA/e2zbi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:17:61:18:4b:78:30:f4:3a:90:f4:9a:c7:79:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Oct 19 19:02:32 2025 GMT
Not After : Oct 20 19:02:32 2025 GMT
Subject: CN=cca04212610bc506ab0acf3615b7d94f11535dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:9c:d3:b7:46:03:f3:8d:39:66:77:b1:bd:
02:35:48:53:cf:80:ff:e6:cf:9c:e5:c3:96:fa:05:
87:87:9d:cd:0a:ca:84:43:cd:af:2e:6c:a3:ae:19:
98:62:59:78:e9:29:0d:03:eb:27:21:9b:79:6b:7c:
cc:9c:5e:6f:8c:d3:be:ff:81:03:1f:22:98:4c:69:
8f:e1:fc:66:13:f7:6b:73:0c:e7:5e:23:4e:99:35:
ff:ec:35:42:2f:54:1f:27:7e:46:59:f7:58:c6:e0:
66:b2:a7:bd:63:e5:94:4e:62:40:2f:75:8e:c0:23:
fa:fe:2e:3b:9f:a9:80:21:c7:5c:40:9c:e7:f7:6c:
b6:e2:04:42:eb:f1:64:71:33:b7:c9:d6:68:32:31:
36:0a:1e:01:c8:8f:62:1f:b6:83:e6:5c:30:83:ce:
82:d1:87:37:ea:3e:14:5e:6d:d7:d5:16:d0:6a:ef:
82:a9:ea:ca:1c:2a:c1:62:78:37:7d:31:93:e4:58:
ba:0f:5c:7a:6d:9b:c1:4f:18:55:58:07:6b:79:c7:
e8:c9:e4:2a:28:18:9a:56:e2:fc:7e:b0:20:2e:2d:
f1:59:e4:e6:9b:cb:dc:7b:73:d8:62:c1:21:02:9d:
e5:97:6e:66:a4:92:9b:db:7e:92:99:fc:29:45:df:
1c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A0:42:12:61:0B:C5:06:AB:0A:CF:36:15:B7:D9:4F:11:53:5D:CA
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e8:df:3d:64:e5:37:31:c2:32:de:ff:9b:55:95:91:cf:bc:
67:d6:e5:3f:0c:3c:41:cc:35:da:0d:85:55:f6:91:68:52:d4:
e6:ac:3a:aa:11:d0:d5:bf:38:f0:d4:c3:3b:f5:64:94:90:40:
31:f6:d2:16:e9:4f:78:aa:36:49:e9:8d:a0:f8:d2:3d:5e:ba:
29:64:cc:4c:14:25:6d:fe:5f:d8:8b:a9:54:47:7a:2d:f6:fe:
16:5e:30:7d:8e:5d:38:23:57:ad:8c:09:7f:88:d7:1e:fc:74:
57:92:17:c9:d0:23:89:13:1d:08:c6:77:5f:ef:3c:28:db:3d:
f3:7e:93:ed:18:bf:08:7b:48:89:6c:a0:21:13:1e:96:9e:92:
b1:6c:f5:9d:ad:e9:b9:88:65:68:d9:1b:5b:b1:9b:87:db:c7:
17:62:15:ee:e1:85:5f:bd:5b:fe:21:cd:e9:3d:a1:05:97:9d:
8b:3f:d8:d1:6b:bc:82:c0:2e:8f:6b:9d:15:96:48:21:5f:de:
22:08:80:12:5c:3c:0b:82:56:3a:70:55:55:7e:cc:78:32:c8:
26:9a:06:20:12:75:52:11:a7:8d:b9:56:36:03:b4:cc:1b:9a:
ad:8a:d7:a1:6e:bf:dd:f0:0a:8d:db:f9:8d:ac:f0:f7:4c:20:
73:e6:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:27 2025 by rpki-client