Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
File: HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json)
Hash identifier: wrlGuO2LyHiPajEvvBWQmrM61lyXn9SWqXoCwcc07u0=
Subject key identifier: 11:C9:B8:9F:D4:FE:38:C2:1C:00:BD:AE:64:7C:A3:5C:7E:95:C0:1E
Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
Certificate issuer: /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Certificate serial: 0199FC8FBC3C2B3CBAC9E7AE488EEC95CC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
Manifest number: 0E56
Signing time: Sun 19 Oct 2025 13:01:42 +0000
Manifest this update: Sun 19 Oct 2025 13:01:42 +0000
Manifest next update: Mon 20 Oct 2025 13:01:42 +0000
Files and hashes: 1: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: BtpAnuNl9WTGO7PIi1mnPndWnfxV2XM1A5nS2jw9XzQ=)
2: avz1C0F6AMtca4Jk8pkbgzEJLN8.roa (hash: ADspRghw06xkDcKSrVQ1jSLJvsNT1skZ/kqfKOoRUM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bc:3c:2b:3c:ba:c9:e7:ae:48:8e:ec:95:cc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Validity
Not Before: Oct 19 13:01:42 2025 GMT
Not After : Oct 20 13:01:42 2025 GMT
Subject: CN=11c9b89fd4fe38c21c00bdae647ca35c7e95c01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:79:0b:87:9c:31:53:88:6e:cc:f1:e0:2c:f1:
32:2e:20:94:7b:34:73:34:8d:70:2d:9f:df:94:60:
d1:9d:75:72:b4:6a:b5:05:c1:d5:fb:88:01:af:db:
d6:dc:56:05:25:4f:b4:16:1b:f7:b8:e2:c1:9a:f2:
0c:14:3e:49:41:83:4f:2a:f0:b2:5c:d2:69:79:30:
36:90:26:e7:e4:29:81:7e:66:3d:35:52:e4:75:29:
a0:05:a4:9f:81:3c:68:e3:dc:46:44:4f:85:1d:1a:
43:85:83:86:a0:d6:06:cb:dc:52:a0:8f:21:33:7f:
de:19:a7:32:bc:b1:66:98:b5:9c:d5:79:98:0a:6a:
12:95:a4:88:d7:8b:6f:b1:45:b6:c6:c8:db:4b:fd:
69:ad:60:54:22:d1:56:80:ef:37:28:24:d0:02:59:
a8:4b:5e:57:b0:fb:a1:9a:91:36:68:be:bd:84:cd:
a8:dd:8f:19:d9:37:f5:ad:b4:07:19:da:8a:78:3e:
e7:50:63:44:7d:15:76:97:d5:2f:b3:0d:07:1d:30:
42:69:34:20:14:dc:03:f5:ca:97:31:88:f4:c0:3b:
ac:22:a7:fe:20:26:db:8a:99:2e:25:a7:69:70:82:
d6:48:5c:dc:51:ab:65:f0:21:16:8a:4c:2e:d9:d9:
0e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C9:B8:9F:D4:FE:38:C2:1C:00:BD:AE:64:7C:A3:5C:7E:95:C0:1E
X509v3 Authority Key Identifier:
keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a6:80:22:e3:f9:66:ab:8c:5f:5b:b0:af:4d:b1:b3:b3:ba:
88:5e:d1:b4:e2:68:e5:52:33:30:43:8b:99:42:42:12:ac:d9:
4c:04:5c:ff:10:94:0d:a6:7e:f0:21:64:93:a1:a4:95:a4:64:
07:62:22:2b:7c:77:6b:42:cb:92:36:11:57:4c:39:01:e5:c2:
df:35:07:72:41:43:15:7d:f3:7d:30:e1:f1:4d:81:d9:1f:fc:
ea:a7:3d:31:bb:dd:7e:c6:67:53:5b:c2:33:2a:b1:86:aa:21:
50:1e:9a:01:66:e5:89:09:c3:05:f8:b9:a9:ae:50:8e:75:2a:
9d:33:a3:91:99:e2:50:3c:0c:bb:0e:a6:5b:22:93:55:7b:9e:
bb:20:7d:3a:4a:29:c9:7c:6f:a2:0c:08:78:de:96:1c:ea:94:
f2:39:c2:36:66:66:d7:e4:0b:01:72:6a:e8:6b:4b:fa:8b:13:
db:d5:7f:1e:49:c9:57:61:df:09:86:7d:c3:f2:70:91:05:dc:
da:6f:20:48:a2:23:ae:cd:9b:b5:61:91:15:95:c3:ab:17:49:
74:c8:f1:20:12:a1:be:e1:9f:99:14:ca:18:1a:53:7f:86:5c:
7f:89:4c:ff:d9:3a:9c:8b:00:78:b7:fc:38:15:65:62:57:2d:
32:ea:1f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:36 2025 by rpki-client