Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
File: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft (raw, json)
Hash identifier: 9adA/z2yWSd/IZW8mmvngQNEgt3j8zqh6m23PwUjNXU=
Subject key identifier: D0:FC:4E:71:6F:D1:70:CB:E0:47:D3:63:08:30:3E:40:22:77:96:9F
Authority key identifier: F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
Certificate issuer: /CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Certificate serial: 0199FD34585A861BCABE79AFBFA0E1A010F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
Manifest number: 1498
Signing time: Sun 19 Oct 2025 16:01:30 +0000
Manifest this update: Sun 19 Oct 2025 16:01:30 +0000
Manifest next update: Mon 20 Oct 2025 16:01:30 +0000
Files and hashes: 1: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl (hash: P5BBjhWOGwMX0oEZi4LMDqkePNC7qNgyzpr99co09f0=)
2: IPJ2H-DbyJS39-MqiGd6rorhNdk.roa (hash: s/YiZX5EGRobWwsqigpJwSULaBic38Nv8k8vwPxeO3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:58:5a:86:1b:ca:be:79:af:bf:a0:e1:a0:10:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Validity
Not Before: Oct 19 16:01:30 2025 GMT
Not After : Oct 20 16:01:30 2025 GMT
Subject: CN=d0fc4e716fd170cbe047d36308303e402277969f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:3f:7e:21:a3:ba:c9:39:91:3f:65:ed:68:
b8:62:ea:27:38:ca:6e:e1:96:e3:73:0b:18:0f:cf:
e1:5e:d7:5f:dc:ab:d9:13:79:45:28:c3:ec:a1:2e:
4f:f1:1f:56:d4:a3:10:11:f6:e4:2d:90:7a:ae:16:
7d:56:ea:2b:69:94:59:74:09:41:d6:86:c0:8f:6a:
03:00:90:4a:28:80:4f:2b:86:7c:45:5e:47:2b:b1:
09:75:9a:49:e4:6c:0a:c1:16:f9:61:9d:85:d0:4c:
64:3d:2a:8e:b0:92:2b:5b:ee:5d:7e:19:8b:e4:4b:
cf:e0:59:c6:d5:31:3b:11:be:08:44:99:c1:71:a5:
66:cc:b3:a0:33:10:df:3b:6a:de:33:c7:87:01:bf:
99:55:63:cb:7f:94:02:b6:ae:60:aa:f1:b9:4e:16:
48:56:f6:85:38:1e:38:f7:69:a1:a8:b6:65:c1:ee:
cb:f7:98:a6:3b:e1:a7:6c:0c:00:a5:2d:ad:bb:c1:
b9:6c:c9:fe:dc:c8:4e:0e:34:d3:5e:b6:3b:1b:73:
be:49:2b:91:c3:0a:b2:69:50:81:56:cb:78:a0:c8:
9c:6b:15:fa:3a:76:ed:38:a5:03:aa:56:ba:06:3b:
10:a4:01:2d:ce:e2:1a:e4:82:7c:0c:e1:5a:af:33:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FC:4E:71:6F:D1:70:CB:E0:47:D3:63:08:30:3E:40:22:77:96:9F
X509v3 Authority Key Identifier:
keyid:F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a2:b4:4b:89:9a:e7:88:8c:94:d7:02:39:63:b0:e9:cd:46:
2f:fa:30:87:6a:c5:e4:f2:91:a1:11:0e:8d:e2:5d:ab:0a:fa:
8b:90:f6:f7:13:9e:9b:41:28:f8:35:f1:46:89:41:b5:07:d8:
6c:9b:0d:04:cc:2c:4a:7a:e7:a7:c9:4e:70:fb:45:40:9b:00:
f5:1a:93:39:9e:5a:7c:7f:85:05:22:cd:cf:4d:34:49:83:53:
5b:c2:29:5e:6b:b5:cc:51:b2:3a:5f:f0:a6:73:a0:b7:e7:ab:
d1:52:85:15:16:f4:36:1b:ed:6d:0f:17:e0:2b:06:92:40:33:
42:20:34:7b:0a:d2:59:0a:0c:be:6d:cd:f6:78:4c:e0:9b:12:
7e:ff:d3:c9:bc:b1:55:16:be:d5:5b:e3:f2:9a:8e:ca:aa:be:
89:cb:5d:b6:c4:02:ee:74:20:87:42:b9:5b:ae:e9:cc:5e:a9:
dc:d1:7c:f3:9e:36:2a:75:d3:55:71:53:f3:d9:05:b5:be:8d:
80:20:2c:19:a5:6a:42:67:69:a4:f4:67:d8:35:56:a3:40:da:
49:21:b7:bd:72:39:91:5e:90:3e:72:83:c1:47:2f:3a:e0:2c:
de:a9:e8:b8:32:92:5a:6c:b5:db:30:08:7c:0c:c3:c7:6c:d1:
43:b4:2e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:22 2025 by rpki-client