Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: 2iXgqKwwQqVFYTM335MblcH/oQullArQy56ribv6dz4=
Subject key identifier: 96:E1:22:FB:A0:3A:A6:30:5A:93:BA:7D:6E:53:C9:DE:56:94:26:A2
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 0199FBEB4839E6178A70752E274778B81673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:04 +0000
Manifest this update: Sun 19 Oct 2025 10:02:04 +0000
Manifest next update: Mon 20 Oct 2025 10:02:04 +0000
Files and hashes: 1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: g7HuyvRsmmY2J7p+XoP6tKLg+N0TMRcROs/ThIiNsKw=)
3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:48:39:e6:17:8a:70:75:2e:27:47:78:b8:16:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Oct 19 10:02:04 2025 GMT
Not After : Oct 20 10:02:04 2025 GMT
Subject: CN=96e122fba03aa6305a93ba7d6e53c9de569426a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:de:03:a4:51:72:79:b1:04:b2:9b:8f:47:
de:c6:78:f9:25:c1:78:c8:42:ec:d0:74:5a:9e:14:
87:68:ea:49:4b:0c:89:97:1b:26:c1:0a:9c:48:7f:
32:05:ec:7f:e7:6f:66:1f:6a:25:07:e0:bb:d3:c1:
fe:d0:dc:21:f7:5a:d8:bd:75:5d:fc:57:42:90:13:
3e:86:4a:73:7f:7a:a4:b6:21:2b:97:08:c3:29:3a:
cc:88:44:4a:d1:60:44:85:09:40:82:5e:4a:55:b8:
c2:d0:28:9d:87:f0:37:23:24:28:ec:97:73:12:16:
f1:85:d7:00:08:25:45:7a:18:61:cd:f4:16:5e:95:
39:7a:c2:b8:94:95:7e:d5:ad:d6:67:0d:89:ce:6c:
f7:42:90:4c:86:b8:cf:e4:e1:bb:61:9e:57:4d:63:
88:92:98:60:22:6d:7e:2b:3f:22:51:c8:e7:ca:ca:
17:ba:f6:e0:29:13:a8:cd:01:d3:62:78:11:3b:e4:
2a:61:94:55:8a:38:63:58:01:48:f6:c9:f9:c1:7b:
fb:10:e6:be:3d:02:db:f6:0a:95:64:1b:43:32:12:
e8:14:87:3c:36:de:80:13:af:8a:9b:31:2b:ff:f8:
e6:a9:58:61:77:a5:16:ae:e6:52:8f:5c:ab:cb:94:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E1:22:FB:A0:3A:A6:30:5A:93:BA:7D:6E:53:C9:DE:56:94:26:A2
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:19:fd:9e:52:0d:c9:8f:f7:e7:9b:9a:e3:a7:20:fe:b4:ad:
4f:81:b3:9c:60:36:d0:a7:7a:9e:5b:05:41:51:a0:44:ec:75:
76:8e:92:e2:8e:6d:8b:9e:a7:61:d5:6c:d7:74:d4:29:c3:57:
5d:25:67:68:67:60:ff:03:3a:73:c0:2b:d5:ff:77:c4:73:90:
ef:d0:8d:2c:40:4c:3c:6d:39:6f:9b:78:0a:4a:55:a5:e9:e8:
93:34:e8:f2:f5:eb:bb:93:30:f6:6b:94:91:3b:41:79:f9:6b:
22:e8:b1:70:22:1e:bd:7a:a1:58:21:95:ce:e7:86:46:61:cb:
fa:1b:ba:54:1b:69:55:ac:e9:78:83:97:4c:25:4a:a4:d4:16:
de:90:7a:5e:f9:f2:96:9c:96:60:d0:e6:83:aa:01:6a:96:35:
1a:85:30:ad:41:bc:e9:be:f5:ba:52:a4:44:37:fd:14:ef:aa:
8b:1e:bf:53:b0:ed:40:f6:41:20:d4:62:f8:99:2e:1e:64:6d:
c3:54:e7:84:37:80:30:d5:e4:04:7e:76:f3:24:96:1f:f5:f8:
31:68:bc:a1:f2:1a:0a:09:3f:b6:43:eb:22:2b:5c:c8:1d:bf:
d9:90:72:1e:76:70:90:35:00:70:6c:09:ea:8f:06:5b:2b:66:
19:bc:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:37 2025 by rpki-client