Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
File: HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json)
Hash identifier: y/s0EN4NZeQGD6FkI4GPKagdti/6hNqTB5J3s9rOQ94=
Subject key identifier: 2C:32:43:96:3D:C1:1C:57:18:D7:5A:78:48:F1:13:79:CE:20:30:CA
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Certificate issuer: /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial: 0199FC8F173CBD099E51D23D18D6A5823A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
Manifest number: 1649
Signing time: Sun 19 Oct 2025 13:00:59 +0000
Manifest this update: Sun 19 Oct 2025 13:00:59 +0000
Manifest next update: Mon 20 Oct 2025 13:00:59 +0000
Files and hashes: 1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: q7bxRhhNN3003ONhrICcR1Qd+xOYqebixjOwKB1DCzs=)
2: L5mBnSY0HeEAnUmT_xC_Qui2__o.roa (hash: pEnOPp9OXxAyhAm8z7JMf69YUoQujcTxw5JmYxCTmcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:17:3c:bd:09:9e:51:d2:3d:18:d6:a5:82:3a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Validity
Not Before: Oct 19 13:00:59 2025 GMT
Not After : Oct 20 13:00:59 2025 GMT
Subject: CN=2c3243963dc11c5718d75a7848f11379ce2030ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:4b:b2:ae:5c:8a:95:ab:2f:1b:74:48:4b:
45:84:9d:63:9a:62:10:19:ec:a1:70:70:40:26:af:
fc:c0:c1:99:87:71:e0:ff:63:fb:9b:05:4f:f2:9e:
ee:24:08:59:28:7f:6d:c5:73:61:33:82:1e:55:f3:
9e:73:a6:08:f8:93:3f:46:27:35:8b:e4:28:b7:f2:
69:a2:02:a2:9e:ea:72:20:0a:2b:b3:63:17:7a:b1:
4e:a8:ec:df:40:99:5e:57:ee:f6:a4:68:de:dd:66:
b1:9d:e3:68:22:06:b9:60:8e:c4:ab:c5:6d:90:aa:
0b:ab:ec:9b:e7:d2:97:82:fe:de:f9:74:90:ac:70:
05:55:4b:0c:4c:c0:60:ef:41:20:50:04:4a:66:b8:
b9:d2:2c:fb:35:5b:cf:d4:c3:05:80:92:b1:94:59:
2a:c5:ee:2f:67:c0:71:3d:e7:3f:76:aa:06:8d:93:
75:15:dd:26:7e:a9:00:2b:5d:af:35:84:2e:87:1c:
07:60:80:35:46:81:d8:f2:5d:a7:bc:f5:a3:bd:c5:
d6:75:45:75:0a:dd:b2:5b:90:4f:15:e7:8a:26:e0:
0c:bb:65:7f:63:f5:da:0a:30:e6:1e:7d:d8:bc:18:
3d:d5:9c:1b:6a:75:80:a4:18:d8:07:46:a5:4b:2a:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:32:43:96:3D:C1:1C:57:18:D7:5A:78:48:F1:13:79:CE:20:30:CA
X509v3 Authority Key Identifier:
keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0f:12:6e:c8:e2:c6:ad:ca:95:ed:46:f4:3a:a9:bc:c9:3a:
9d:2f:69:dc:45:ef:52:06:51:f8:9d:6d:77:41:d2:80:f5:93:
3c:44:93:18:1a:16:27:1e:0d:5b:cd:53:0b:af:10:fd:20:76:
ca:f9:43:9a:73:2a:38:45:5b:52:f5:15:c0:22:8f:aa:23:d8:
ac:79:86:4b:9b:13:b4:b1:87:46:0b:5b:8f:49:24:8b:96:8e:
7b:24:96:d9:ab:db:03:4c:99:1a:08:d8:2c:5e:34:ba:f1:aa:
d4:47:60:e9:0c:47:96:2f:98:55:f4:94:7d:bb:58:9a:ee:4e:
3f:5f:31:2a:b6:dc:19:d9:75:bf:7f:a2:d3:dd:af:f5:4a:8f:
fa:4d:31:d8:d4:37:9a:de:83:21:c2:89:1b:08:86:ea:0b:4a:
06:14:b8:5b:30:0a:53:24:da:e4:30:67:c3:95:c1:fc:5c:d8:
d9:a0:9f:17:1e:83:f5:1f:75:ec:11:f3:f5:00:db:55:91:27:
4b:cd:b3:c3:8f:48:29:0f:13:2d:7f:5d:39:36:ab:22:62:61:
f4:8e:d8:a0:3f:66:b0:e0:93:f3:43:c6:37:b0:b8:64:9e:3f:
c2:ec:0e:5e:16:12:49:a5:e1:3c:84:31:1d:8b:46:16:a5:dc:
29:5d:44:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:42 2025 by rpki-client