Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier: DjwX3iHsJ8L7K0zulFDPjgHpeCzTPIvvWIltAU6HPvw=
Subject key identifier: 88:84:91:5B:42:46:06:78:ED:96:08:B7:95:0D:C5:12:8B:D3:4F:DA
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 0199FAD83F7F87AA53A0BD03502DD64CC8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number: B6
Signing time: Sun 19 Oct 2025 05:01:39 +0000
Manifest this update: Sun 19 Oct 2025 05:01:39 +0000
Manifest next update: Mon 20 Oct 2025 05:01:39 +0000
Files and hashes: 1: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: 0j8QPDb0wvX+Q2GN9kKrMHnD7Gi2VrpPSaZxzaq99qw=)
2: oVPiQMn-UegBx2J-TQORMG9g6K0.roa (hash: 4SSzKPc2mgWhQk6lB1aOXRB/10H0pRazL5v2Txj6Wns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:3f:7f:87:aa:53:a0:bd:03:50:2d:d6:4c:c8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Oct 19 05:01:39 2025 GMT
Not After : Oct 20 05:01:39 2025 GMT
Subject: CN=8884915b42460678ed9608b7950dc5128bd34fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:3c:c7:e4:7b:ed:c0:c5:8b:d8:1b:ba:cb:
a8:2a:49:2f:2d:be:fb:47:04:72:fc:7b:f9:b8:2e:
e0:32:60:44:59:98:3f:e0:ea:83:9a:08:dc:e3:c0:
44:a6:77:62:d1:1c:0d:86:56:01:0f:ec:b5:1d:01:
78:2e:68:23:e9:14:4a:3c:58:27:14:e9:93:7f:ae:
e1:e8:bb:ec:62:61:ef:39:76:1e:b4:93:c0:13:b5:
d5:bd:80:73:ae:24:c2:73:ab:d3:1a:75:ca:01:b1:
37:22:02:1f:02:19:ce:ab:b5:7e:da:51:f2:48:14:
a5:b2:00:fd:42:22:2f:c0:35:c0:ef:cc:87:e3:ef:
c7:64:93:a0:79:b3:ca:d2:dd:01:a7:8a:27:97:43:
a2:7f:6d:10:ca:9d:e1:9e:43:bf:ab:5e:fb:45:5f:
e2:e6:1f:fa:a3:05:99:16:10:55:3e:bf:96:f2:1d:
3c:cb:39:de:98:eb:c5:79:8c:e2:01:54:46:6f:2e:
65:1c:63:be:7c:0d:71:a6:64:8a:c9:da:dc:27:2f:
80:61:83:4e:e2:b5:2b:fe:db:f7:e3:56:ed:5f:aa:
3e:36:a8:3e:a3:c3:87:a8:45:90:d0:1d:2c:cf:94:
a9:2e:4a:90:fe:85:51:20:34:3f:3b:27:6f:ef:0c:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:84:91:5B:42:46:06:78:ED:96:08:B7:95:0D:C5:12:8B:D3:4F:DA
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ee:51:eb:9b:78:c0:38:ee:db:05:d7:00:43:5f:b8:17:67:
f2:9b:7e:ab:5a:f9:bc:00:ee:a0:8b:ba:45:bc:34:45:0f:82:
f1:c1:d2:98:a2:f8:5f:fa:9d:c9:99:48:51:65:82:66:81:a3:
77:1d:85:e0:31:78:02:ec:6c:ea:2f:a8:0c:03:64:b3:82:d1:
9a:2a:40:a0:02:e4:07:cb:5a:67:36:13:7e:ff:24:0d:f8:c0:
48:cd:d6:eb:27:a9:d4:05:50:5c:50:48:18:a6:1d:ff:79:d1:
3b:df:c0:fb:9a:67:90:14:2a:50:17:48:99:8c:e4:9c:91:11:
1f:65:98:f0:83:96:b8:96:31:fe:ec:11:c6:bb:3e:9a:19:cd:
d2:f9:28:2a:ec:e3:af:84:3f:dd:82:16:44:14:a9:99:d4:cd:
24:8d:c7:2c:79:cd:21:f4:db:08:bb:1d:da:99:2a:89:11:72:
97:07:22:44:0f:d9:88:fe:ef:05:a1:e7:bf:74:08:4e:fc:f5:
21:17:73:9d:03:0d:27:2e:69:a1:c1:39:50:ac:c0:29:1a:af:
3c:6f:a4:0e:49:ef:9a:d5:1b:78:0b:5f:72:16:67:11:fe:84:
4b:25:57:4a:0f:ef:f5:73:b5:df:6f:a5:f6:52:15:b7:5e:3e:
2e:e5:4a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:11 2025 by rpki-client