Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: SE91WQLpfUohRzyZIUZR6zsP03pp8WFx+IVLTOcOU5w=
Subject key identifier: 07:34:84:76:54:91:F1:1A:16:CF:B0:BC:BF:6D:BE:C6:9A:AD:7E:EF
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 0199FBEC4BAD7F221251C5D7E79DA5CB1ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0CEA
Signing time: Sun 19 Oct 2025 10:03:11 +0000
Manifest this update: Sun 19 Oct 2025 10:03:11 +0000
Manifest next update: Mon 20 Oct 2025 10:03:11 +0000
Files and hashes: 1: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: kehqsMl9kvXtYlcwVy9rH5bgScnI8yaOJkRYH5qw2OY=)
2: JnfPzURw0o3uQEVpLXDzJLYPYKM.roa (hash: vCq1v3b4A28A6WJQ+8UTZcjdnixh0uM58yrXzgu7llI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:4b:ad:7f:22:12:51:c5:d7:e7:9d:a5:cb:1e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Oct 19 10:03:11 2025 GMT
Not After : Oct 20 10:03:11 2025 GMT
Subject: CN=073484765491f11a16cfb0bcbf6dbec69aad7eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:db:29:ea:ee:cc:f9:63:65:04:e3:11:be:
48:52:e6:cc:e2:b0:d1:fd:62:f3:96:27:5f:1e:8b:
24:71:41:7d:57:28:d0:0e:71:15:f3:66:ec:a9:ea:
42:fd:43:95:d3:59:37:8d:f5:0f:2f:c5:53:4c:67:
ac:27:08:cb:d8:47:4c:f4:fa:f0:fa:da:59:b0:8f:
d5:40:ed:f7:1c:c9:c9:88:4a:4d:13:da:dd:e3:6d:
df:b9:57:50:f4:69:7c:b4:7c:cb:1d:80:42:bd:94:
ce:e2:36:c6:d2:87:eb:1f:d7:d1:5b:83:7d:a4:96:
19:30:39:c3:95:5e:91:4c:a3:fa:f3:80:84:93:26:
87:d0:4a:8e:4b:99:01:d1:bb:ec:5a:1d:fa:ae:c1:
49:63:ea:f8:a0:4a:91:b7:01:a5:c6:b6:87:83:d5:
b2:f6:ae:ad:9e:81:3b:f1:13:3c:ff:a2:90:72:7e:
4c:e4:e4:51:56:e5:80:19:af:11:5b:92:a4:2c:80:
94:61:89:5d:9b:18:53:f2:10:2e:47:f1:15:1f:62:
39:fe:a2:af:1f:1d:f3:83:8a:23:a6:3c:e5:30:e4:
bd:f6:5d:76:82:18:40:71:fe:3a:6c:8b:e3:18:dc:
8c:ca:70:d5:cf:94:9d:9e:df:55:69:f2:93:56:da:
7e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:34:84:76:54:91:F1:1A:16:CF:B0:BC:BF:6D:BE:C6:9A:AD:7E:EF
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:32:41:2c:a1:e5:05:8f:ac:9d:51:e5:7d:63:b5:9a:9a:d2:
16:f5:85:3d:c6:a1:48:ed:18:57:e4:33:55:00:78:ac:e3:18:
79:8d:13:95:04:7c:97:4d:45:2c:89:0e:4f:03:e3:7b:16:05:
a3:ee:80:3e:b5:da:84:63:79:f0:2d:d7:b8:c4:b4:e0:a7:76:
ac:db:eb:ce:0a:76:18:3c:92:bf:3a:46:32:43:cf:ed:0d:74:
64:92:9d:91:87:91:a4:ed:20:07:c0:f1:ea:cb:8e:c7:90:eb:
48:35:ff:c7:fb:12:2c:04:5d:3d:62:4d:8c:2c:4f:d2:3e:db:
6b:b0:35:37:99:ad:be:43:4b:ce:1e:cd:80:55:4f:01:b8:c4:
b7:38:c7:bf:78:e2:fa:6f:7a:96:9a:e8:9e:9b:ae:c9:1b:61:
c1:46:fb:1b:db:52:31:93:ef:e0:2a:7b:cf:18:90:cd:4d:e5:
4a:f0:d1:1f:a8:e5:bc:ca:b5:03:9e:f2:9d:1c:e1:70:23:45:
ab:97:36:b3:c7:09:eb:a4:ed:9e:7b:b7:1b:e2:1b:d8:fe:56:
da:c0:f0:5a:91:aa:a7:76:cb:0e:99:dd:aa:f9:76:57:d1:58:
87:1b:a8:fe:8b:ac:08:0a:d2:47:f0:af:bc:f4:9b:e6:04:42:
f2:88:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:23 2025 by rpki-client