Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File: hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier: z0hcnFX6SeWLoW1bp+/0Jt/CekFGSkwEfrsj4QmuU6s=
Subject key identifier: CD:01:32:B5:31:BC:2C:D7:C3:67:94:2C:87:3E:62:BD:BD:99:01:54
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 0199FD345EC62496219A58ED1DD4148238D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number: 12FD
Signing time: Sun 19 Oct 2025 16:01:31 +0000
Manifest this update: Sun 19 Oct 2025 16:01:31 +0000
Manifest next update: Mon 20 Oct 2025 16:01:31 +0000
Files and hashes: 1: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: 6u8lAjK2h8Uqt9IuW9Ftq7J7UnhBnNO6mHdXnfrkZNs=)
2: sw4N2lxJHY4O1_YExcGjN1F8VGo.roa (hash: KXUZgZkZitwfC1Jk6g2FCiMl9s8x5hfwqmR4gq981VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5e:c6:24:96:21:9a:58:ed:1d:d4:14:82:38:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: Oct 19 16:01:31 2025 GMT
Not After : Oct 20 16:01:31 2025 GMT
Subject: CN=cd0132b531bc2cd7c367942c873e62bdbd990154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:8e:38:0d:c0:58:ac:8f:d3:61:11:4f:18:
47:ca:8e:39:d1:01:4f:27:1b:a0:85:d3:53:1c:dd:
38:2d:e1:ac:43:06:b0:ca:59:85:41:1c:b4:82:55:
03:c3:9b:a7:c0:63:c3:50:14:8a:50:3a:af:7b:74:
cc:3d:4a:3c:5a:bd:27:02:78:e0:df:36:8d:db:89:
91:93:60:d9:cc:7d:78:88:69:ed:9e:c7:3c:eb:44:
e7:84:1f:e2:e9:90:af:b9:d5:ce:49:20:97:af:e6:
dd:93:f5:6f:51:63:74:70:90:e6:bd:d9:37:59:5e:
41:7e:9f:74:d7:86:2c:b1:fa:ce:72:88:6d:8c:6a:
21:90:52:8d:2e:49:bc:5d:28:8a:c2:84:62:8e:25:
b7:4c:77:d7:ab:a1:cd:36:ac:3e:7d:6d:57:ec:25:
80:fd:04:8e:f8:7b:1e:13:b7:cf:f5:59:4f:70:ea:
ae:88:9e:eb:ea:8a:cf:f1:c6:93:62:25:a2:95:42:
f6:47:8a:62:0e:08:57:96:28:7c:0f:bc:94:50:9f:
90:d5:eb:bc:11:10:e0:e5:4d:5d:8d:ad:e0:a7:cd:
a7:69:42:2e:73:eb:d6:25:59:a9:4a:ec:b1:db:ea:
a1:30:38:01:51:00:5b:e7:22:58:42:8f:23:19:f8:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:01:32:B5:31:BC:2C:D7:C3:67:94:2C:87:3E:62:BD:BD:99:01:54
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e8:b7:c8:67:c0:29:d7:f5:d4:fd:b6:7c:f9:ca:d5:82:c2:
03:7b:59:47:2b:d2:e8:13:02:7c:fa:9d:0a:3b:14:dd:9a:82:
52:69:f4:45:1d:ea:c3:48:ca:24:43:83:0a:1b:a3:c4:e6:20:
02:ff:c5:26:2f:c8:74:0e:9e:3d:62:68:ec:d6:66:32:9d:65:
d3:73:f4:16:5c:1a:cd:c3:03:07:ac:16:56:6d:b2:c3:d9:39:
1a:51:6c:3f:43:8a:ee:21:ed:f1:0e:74:09:2c:5d:e1:05:47:
16:71:a1:de:b4:29:f6:40:b9:f7:50:56:02:65:3b:49:f5:dc:
93:48:07:fe:1d:8f:ff:ca:69:f0:06:32:76:0c:0e:60:55:7b:
8e:db:6a:03:6b:8a:2e:93:5f:e6:5e:21:6d:1a:b8:4e:ae:bb:
61:54:41:f6:4c:6c:e1:39:65:31:b9:b3:03:29:94:8b:1c:65:
87:ba:54:20:06:d8:c5:52:a6:7e:09:3d:6d:82:dc:1f:64:34:
64:dd:60:15:72:6d:d1:ae:95:d9:2c:bf:39:56:94:45:b0:6c:
f8:a4:f1:48:ba:95:90:9f:67:b7:a0:f8:61:0a:a0:d8:15:fd:
6c:cc:cf:fa:86:2d:fc:9d:a0:00:49:d1:74:e5:fc:5d:68:61:
51:08:4a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:28:02 2025 by rpki-client