Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier: wKFMo7uV1itv7/gTmJV7TUjp0MAYP0kgUrynbAmdIdw=
Subject key identifier: D8:84:5D:F9:4C:8A:5E:15:79:16:62:24:1A:4A:89:A4:C0:C8:AA:9B
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 0199FAD8536FCE96762E834F5680CBF6547C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:45 +0000
Manifest this update: Sun 19 Oct 2025 05:01:45 +0000
Manifest next update: Mon 20 Oct 2025 05:01:45 +0000
Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: b17NFckvnnNLUtuT4NOt0I6lLQbWI2nInCXVkftfY/A=)
2: UhsTPDlkEVTfjN0gtgklGlfn_mQ.roa (hash: gvwxeqU03k4MQD3WdF59OWVu6wgm7kgHM+ORIWuetR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:53:6f:ce:96:76:2e:83:4f:56:80:cb:f6:54:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Oct 19 05:01:45 2025 GMT
Not After : Oct 20 05:01:45 2025 GMT
Subject: CN=d8845df94c8a5e15791662241a4a89a4c0c8aa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:ca:1b:45:0f:e8:6e:bb:9e:ad:f8:64:2e:
53:f5:cf:50:ca:b2:8c:92:5a:0c:d1:d0:ac:a3:b4:
b5:b3:86:b0:f1:fb:e1:b9:32:ca:c7:10:56:4b:e1:
f8:68:81:d0:f3:68:e8:10:50:34:71:74:b0:66:fc:
e4:f7:c8:d0:e2:4f:e7:e7:ce:a3:ba:ad:a9:fb:da:
3e:3c:f5:57:91:44:8c:83:39:51:90:2c:95:2b:27:
05:25:43:a6:29:df:ba:2c:ca:8d:8a:5e:04:9b:5d:
7f:2b:79:39:2d:e6:53:a7:0b:2a:2e:1f:d9:00:86:
42:a2:7a:56:37:ef:56:33:ea:ea:31:b2:02:59:26:
7d:a8:9d:78:74:47:84:e0:20:17:56:b8:79:44:78:
b1:c8:48:ad:b3:c2:0a:2a:e5:0c:1d:45:43:ff:8f:
aa:11:4c:ce:43:5b:e9:27:6a:ba:3e:8e:97:84:62:
e5:b8:24:77:21:45:2f:97:3a:9f:16:66:0b:16:f1:
87:d4:ca:cc:14:13:9d:6a:ed:7f:3a:5c:1a:27:70:
f2:16:b5:53:45:a8:3e:35:34:cb:9e:f8:c2:04:39:
25:84:98:ec:6e:88:ef:f7:22:4f:7d:42:e0:fc:41:
34:a6:06:89:7d:0e:66:d4:50:3c:4d:18:8c:f9:e2:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:84:5D:F9:4C:8A:5E:15:79:16:62:24:1A:4A:89:A4:C0:C8:AA:9B
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d3:a6:8f:38:a2:08:7b:fe:7d:48:dc:84:90:b0:b9:b6:86:
3d:30:0d:d0:c9:c9:3a:b4:77:89:56:5a:e7:69:cf:67:5c:74:
4d:e2:57:dd:14:c0:87:72:a8:d1:37:c6:be:70:87:ba:ce:49:
df:cb:72:89:30:f3:20:6f:7e:f7:3d:fd:d4:83:13:38:9d:aa:
f0:2e:70:de:54:8a:bd:40:1a:b3:ef:55:ce:96:6a:83:6b:67:
f9:db:44:24:be:d6:ce:4e:97:fc:54:75:92:bc:52:ab:df:51:
be:f1:aa:d0:92:9c:ea:22:08:08:e7:ec:97:01:29:19:c4:dd:
9b:23:e9:1e:df:1e:dd:2a:ae:71:a7:5a:5d:d1:0a:9c:ba:fd:
e9:8f:9c:4c:4b:e7:45:15:b5:02:ad:33:58:c8:0d:6d:32:21:
62:57:13:1a:ae:85:05:f0:4c:98:2c:c9:6b:ab:87:65:16:4d:
1d:ac:10:81:f7:3d:df:47:22:31:ae:78:1a:a4:5d:63:2f:00:
bb:83:3c:98:c3:13:2e:3d:f3:53:b7:8d:5d:a1:47:c8:d0:4c:
19:e5:77:a3:7a:c4:06:15:52:4c:19:cd:da:90:d3:32:64:c7:
97:ac:e3:d6:db:1b:91:b9:fd:ef:c5:fa:71:af:60:06:41:f8:
e5:63:ec:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:12 2025 by rpki-client