Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier: 1aRCRVHbLbPGUL0383crQ8ezYGMZVOQnqK2U2gtmsLk=
Subject key identifier: 32:28:62:26:53:0A:9D:1D:F7:11:6B:2E:AF:83:63:B9:96:E8:A7:F1
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 0199FCFD8627EC22E6B1DC368D4B652A4216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:37 +0000
Manifest this update: Sun 19 Oct 2025 15:01:37 +0000
Manifest next update: Mon 20 Oct 2025 15:01:37 +0000
Files and hashes: 1: BXSG7yvBfzfSNaMTJpttdMTmSwI.roa (hash: 1RyXuzT18l9m34jhodBKLjc26bjq4on+qltizIR39go=)
2: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: 5lLB1z+dUU9jzilSA98lLFJ7ErrqoGy3nvq9ZsjKZks=)
3: ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa (hash: SUXoNw7/XslPVf+LyLnG1Yvy88uBm5yyDGjaK5XKEjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:86:27:ec:22:e6:b1:dc:36:8d:4b:65:2a:42:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Oct 19 15:01:37 2025 GMT
Not After : Oct 20 15:01:37 2025 GMT
Subject: CN=32286226530a9d1df7116b2eaf8363b996e8a7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:88:a4:71:1b:d4:65:79:ba:7a:00:a2:4d:97:
36:4c:31:7a:ba:4d:44:fd:1b:e5:4b:c2:77:04:6b:
da:2b:ab:45:50:97:c9:03:c5:98:2d:da:fb:4d:04:
50:ae:81:1c:90:4c:d8:5b:b3:af:a7:5d:f8:dc:f9:
31:c3:82:43:ae:ae:49:37:5a:df:a8:ec:5a:a4:1b:
3c:52:8b:03:88:f2:81:23:56:34:08:b6:eb:b1:88:
c9:64:73:c9:6a:53:6b:07:72:3a:2f:b5:51:19:26:
b4:9d:23:9b:b8:4b:05:0a:12:a5:db:63:93:bc:06:
c6:b3:33:0e:9c:18:dc:32:9d:51:55:c1:db:64:6d:
3b:2c:98:53:e6:d7:08:3e:a6:dd:13:fa:98:69:75:
53:8a:ba:32:b1:db:06:7f:d6:15:6f:06:d4:0d:10:
b8:a8:1a:2e:b4:68:6b:66:e3:5d:e8:f0:1b:01:07:
ef:23:42:13:f1:f9:aa:4a:34:a2:87:ab:90:e6:ce:
c2:00:28:e2:9f:ce:74:29:49:24:c7:8c:9f:b8:54:
43:93:0e:96:cc:3e:d1:d3:97:72:ae:d6:0b:87:f0:
1d:9d:ec:3a:8a:96:e5:75:fa:10:09:c2:0b:7d:ee:
00:bf:4d:04:16:39:b9:f1:e9:8c:dd:2c:5d:cc:ba:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:62:26:53:0A:9D:1D:F7:11:6B:2E:AF:83:63:B9:96:E8:A7:F1
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f6:61:fb:66:51:17:83:0a:84:1d:2c:82:f7:2b:9b:2c:13:
9b:79:20:67:ab:fc:28:76:8e:2e:d0:69:43:ec:77:b5:1b:aa:
b1:0d:90:64:6d:2b:01:3e:4c:fb:79:ff:70:02:ee:19:07:a5:
0d:d4:0a:6c:12:e1:09:4d:6f:ec:17:2a:7b:11:58:09:96:1a:
35:de:9a:16:15:4f:d0:97:07:fd:d0:0e:bf:f8:d1:0a:ab:ab:
d6:45:14:ef:86:9e:b2:f0:bd:5a:13:45:11:1f:d6:e0:70:cd:
de:b6:5b:80:8d:d6:b4:e5:3f:f2:e4:8a:59:48:c6:fe:64:d3:
ff:ad:cb:e3:78:fe:bf:36:da:da:c2:c2:ae:83:af:32:c9:83:
4d:10:91:6a:89:16:1b:79:ae:15:59:e3:67:bf:9f:5c:e6:b3:
2c:69:38:18:ce:1f:af:b6:b4:6d:24:ed:84:5c:40:bd:8a:1d:
16:ba:e4:59:90:28:c3:26:3b:21:69:ef:16:8e:49:f1:e5:ff:
b7:c3:dc:6f:fd:c5:6b:c7:1d:06:74:b9:27:3f:80:f8:2c:a1:
b8:83:61:40:c4:3b:b7:5c:a9:30:56:32:34:4b:30:05:a3:d1:
18:ae:a8:8e:67:94:ca:b6:e1:a9:61:45:1a:a7:b8:a2:ae:f6:
5e:e3:c7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:59 2025 by rpki-client