Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
File: HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft (raw, json)
Hash identifier: IDT5e9Kh4Rz44j1FRt0NQG869Ucf9n5Zyxx3qt8470c=
Subject key identifier: EE:2B:27:44:D3:71:47:FC:4F:FA:6B:58:59:61:90:AB:15:59:75:D2
Authority key identifier: 1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
Certificate issuer: /CN=1c8fba993650348a135152eec348a119430e6340
Certificate serial: 0199FDD95FDB1C3C6ED6B327A04A421DB76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
Manifest number: 01A8
Signing time: Sun 19 Oct 2025 19:01:45 +0000
Manifest this update: Sun 19 Oct 2025 19:01:45 +0000
Manifest next update: Mon 20 Oct 2025 19:01:45 +0000
Files and hashes: 1: GuJV6tWvMc7hiklHxH5EzaRwm8k.roa (hash: SFtJeLYX3k0Bqhlczs2KFJUiSZerZ8nM1VQXRCJtLKQ=)
2: HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl (hash: 1UzpmT3eAX/v4VCjrIeRTpyv0wEf4+zVbyGdMqxC4yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5f:db:1c:3c:6e:d6:b3:27:a0:4a:42:1d:b7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8fba993650348a135152eec348a119430e6340
Validity
Not Before: Oct 19 19:01:45 2025 GMT
Not After : Oct 20 19:01:45 2025 GMT
Subject: CN=ee2b2744d37147fc4ffa6b58596190ab155975d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f7:aa:61:a5:0c:a5:c3:82:d1:48:d6:3d:87:
4f:de:25:3e:e3:f2:f1:27:c5:18:e6:f5:40:e9:37:
58:14:f0:cd:9d:78:c9:9a:63:4c:31:d0:b8:19:e1:
46:00:ac:20:f5:c4:e2:cb:52:56:42:2d:c8:74:70:
c8:82:95:1d:4a:dc:3a:a1:53:d2:ea:71:b3:98:e0:
b4:53:52:70:40:3f:c3:be:f4:a3:21:84:5a:26:5c:
b2:98:72:08:cb:f2:3d:39:44:37:9e:dc:e5:b0:e7:
27:80:ca:df:9d:2c:22:5e:89:dc:fa:26:88:1c:43:
d4:36:f5:f0:0e:5e:57:ee:ee:03:46:89:31:ac:71:
d0:77:74:ab:fe:d4:41:79:49:f2:b1:82:df:cb:10:
b0:de:81:7f:e9:9e:9f:0e:5d:95:53:aa:3c:62:f7:
5e:f5:4d:c1:73:8a:f4:17:a8:f1:01:3e:74:7d:ce:
ba:59:c6:58:9c:e7:e9:e9:fa:5e:b6:1d:5e:3f:24:
73:7c:78:03:65:29:35:72:bf:a3:9e:61:02:9c:09:
b0:02:62:92:57:be:f8:c5:14:2e:42:8b:ff:af:89:
28:0f:c9:ae:36:fd:5b:6e:80:4e:cc:a2:97:6d:ec:
dd:d7:b1:6d:75:96:2e:57:c3:4c:45:7c:35:17:99:
9b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2B:27:44:D3:71:47:FC:4F:FA:6B:58:59:61:90:AB:15:59:75:D2
X509v3 Authority Key Identifier:
keyid:1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:21:d8:cd:85:ec:c3:54:30:2a:d4:f1:97:05:d0:ab:ae:31:
49:1c:92:5b:fc:bf:db:f9:bd:32:a9:7c:57:1d:63:af:0b:a9:
39:67:91:c0:ff:75:36:64:51:52:fc:9b:7f:9f:54:1b:69:de:
bb:6d:e5:25:79:6b:d7:95:d5:a5:f9:04:a4:80:57:21:6f:95:
20:59:57:e6:b9:52:c1:76:31:75:03:e7:d4:76:44:72:96:2b:
cb:09:1e:c2:7d:0a:99:3b:e4:41:84:6a:aa:e4:63:85:f5:e9:
c8:c8:f0:7d:ce:f5:90:3f:bd:a2:60:f2:bf:4e:b3:24:05:db:
88:10:6b:28:a0:1e:bf:88:17:5d:04:19:52:3e:62:ca:f6:5d:
9f:56:1b:9d:3d:51:6c:5d:2d:49:ce:e5:b2:4b:49:a5:a2:04:
46:44:84:a2:f8:2a:da:ad:99:3b:18:e8:15:6a:bf:68:5c:d4:
eb:c1:da:27:2e:4b:8b:7d:b1:8e:4d:b2:d4:80:bb:76:b7:92:
58:0e:2d:5f:b1:cc:28:10:95:3e:14:e0:42:ec:9d:83:5e:cd:
57:e3:8f:a1:6a:9b:6f:b4:d7:c3:67:10:2d:cf:4c:16:38:a5:
83:7b:3f:86:da:bd:4c:11:a5:8d:67:05:0d:cb:d8:12:31:4c:
b7:4a:71:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:35 2025 by rpki-client