Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
File: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json)
Hash identifier: 6DqBgWf7VtABU3mOggFGduDcQ8JV0H4aJ4VCzCeB1gM=
Subject key identifier: 06:84:FC:51:FA:D6:2A:C8:CB:75:48:9E:00:34:48:58:08:1B:3D:21
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 0199FF59CA7030E31DC9E25FB787AD511026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
Manifest number: 0D8C
Signing time: Mon 20 Oct 2025 02:01:38 +0000
Manifest this update: Mon 20 Oct 2025 02:01:38 +0000
Manifest next update: Tue 21 Oct 2025 02:01:38 +0000
Files and hashes: 1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: KPrlZohI20g0sQ0nlasRQqSyZ3UyLAgFmiklvNNScVQ=)
2: Z51tk-_RA8tS0qKG579XKDThD1k.roa (hash: jrw3DdxxDeKhPMS6oVcqpTg9EmGuyht4s1KNeKcKW/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:ca:70:30:e3:1d:c9:e2:5f:b7:87:ad:51:10:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Oct 20 02:01:38 2025 GMT
Not After : Oct 21 02:01:38 2025 GMT
Subject: CN=0684fc51fad62ac8cb75489e00344858081b3d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:b7:8e:27:7b:2f:14:87:e8:33:c8:2a:2e:
b3:00:c8:33:6a:b9:b5:c5:7a:87:87:f8:22:b9:71:
bc:4b:08:c8:49:6d:b5:8d:56:db:72:64:02:94:26:
9a:5c:0e:fc:41:a9:fc:d0:04:ac:2d:3b:30:9c:a1:
a4:0e:03:2a:34:c0:87:9e:6b:0e:93:12:c8:d2:5f:
f3:51:82:0c:8a:50:60:96:15:09:22:b9:fd:ec:92:
1d:f8:2d:1c:43:42:34:f1:e4:d7:ab:f9:57:d9:9f:
a6:70:08:d1:0b:7d:45:1a:08:67:5e:ef:79:6e:82:
9b:c0:e9:38:60:36:83:92:0f:05:66:f9:b1:76:6c:
39:3a:54:8d:d7:12:a5:90:93:31:56:5a:4f:44:e6:
20:c1:1d:92:61:77:c3:f1:a3:04:77:f6:7e:ef:ef:
b8:36:17:95:14:3c:a3:44:0b:81:4a:68:d1:90:f2:
ec:0a:53:52:16:23:b9:05:b7:a8:bd:1a:13:fa:9a:
b4:d9:06:91:29:87:f6:e2:ec:45:30:28:fa:b5:5e:
36:cf:64:25:ff:e0:62:a8:84:28:64:11:5b:38:0f:
c3:07:58:54:fb:70:1f:b0:b5:9d:56:d7:49:f6:c7:
c8:af:1f:78:55:d1:28:d2:41:14:1f:4b:0a:f7:1e:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:84:FC:51:FA:D6:2A:C8:CB:75:48:9E:00:34:48:58:08:1B:3D:21
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:61:a4:2a:2a:0f:4a:54:77:80:7d:6b:ef:ec:a7:8e:c6:24:
94:b9:85:08:36:ba:df:c8:2d:26:c2:16:9e:7d:32:4f:f7:42:
f7:c8:a9:8e:96:e8:27:41:46:24:e0:37:72:36:b0:9e:47:3c:
50:44:9a:0a:a8:f7:b8:43:6f:72:eb:6b:2e:08:c4:06:42:61:
a2:3e:3a:e5:95:ad:15:4b:09:ee:9c:a7:58:8c:9b:84:ba:54:
8b:e8:21:4b:38:54:b2:cc:ba:ae:79:42:50:63:72:01:6e:e4:
83:3f:28:40:2a:9d:13:07:65:0d:0e:df:3f:ec:85:c3:89:e5:
64:30:91:b4:60:cd:71:c7:21:34:a1:41:e1:d6:63:c9:1f:5b:
6b:68:f2:1a:73:3b:5f:73:53:f1:32:bf:5d:76:61:42:46:36:
db:9c:ff:e8:90:aa:8a:0b:4f:6a:62:37:ff:f9:6c:b7:14:87:
df:18:1c:2d:50:96:b1:57:d4:51:d4:6f:38:de:9b:fd:45:24:
a0:f0:7c:45:31:89:2a:a4:de:6b:2b:f5:ea:1e:74:8c:ae:a1:
65:a1:53:4b:70:d7:a7:be:46:4a:6c:76:a4:e6:d9:0d:71:db:
a0:fb:c2:45:d1:80:87:c0:ce:a3:32:99:ab:4a:a9:62:a0:33:
ff:da:d1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:17:36 2025 by rpki-client