Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
File: HkQmt06M9v_e23sGBBgIMqhiXzI.mft (raw, json)
Hash identifier: KXuo14LYM/wL2TpsmKHkGozynDS1XEBU35NossZaWrE=
Subject key identifier: DB:B1:63:98:4C:FE:14:44:ED:78:2C:0C:67:1D:16:51:48:E1:74:50
Authority key identifier: 1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
Certificate issuer: /CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Certificate serial: 0199FDD96B614397F45233E7964DCF11F10F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
Manifest number: 07F4
Signing time: Sun 19 Oct 2025 19:01:48 +0000
Manifest this update: Sun 19 Oct 2025 19:01:48 +0000
Manifest next update: Mon 20 Oct 2025 19:01:48 +0000
Files and hashes: 1: HkQmt06M9v_e23sGBBgIMqhiXzI.crl (hash: 8E0IJSg1bABWhjZm29LexWblmc10UqDe81YndsnSXY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:6b:61:43:97:f4:52:33:e7:96:4d:cf:11:f1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Validity
Not Before: Oct 19 19:01:48 2025 GMT
Not After : Oct 20 19:01:48 2025 GMT
Subject: CN=dbb163984cfe1444ed782c0c671d165148e17450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:ce:43:ae:af:7e:d4:4b:d6:a1:1b:66:b6:
93:af:a2:94:d8:59:40:fd:4a:0a:c1:9d:ab:6f:48:
5e:df:14:3d:63:4e:e1:f6:c8:cf:f4:5e:4b:ae:2d:
12:10:66:58:93:7e:48:83:53:d1:cf:c6:ce:ea:34:
f8:92:90:92:c4:9a:04:3f:66:7b:3e:8a:b5:18:0a:
17:23:6d:05:50:7d:3c:a2:9e:b5:d1:73:16:10:c4:
e0:5f:68:a1:5f:d8:31:11:9a:cb:f2:50:50:69:32:
db:39:ec:f4:8b:6a:fd:4e:2f:ab:7c:28:f0:b0:ff:
f4:0c:a7:ba:c7:a3:fd:8f:1b:71:39:f8:37:d8:54:
7f:f1:ce:fc:3f:5d:fa:ff:59:40:23:a3:4d:d6:f5:
a4:59:25:4c:5f:a6:e3:a4:8c:bc:e5:3d:e7:e3:80:
03:fd:6d:a8:b5:5c:57:7a:d2:a9:84:d6:74:80:f9:
c9:e0:62:ab:87:45:f0:bc:d3:a0:c3:a0:81:02:ef:
5d:6e:f6:21:3f:5e:30:88:cb:c1:4f:22:74:11:ae:
67:0a:60:c3:ec:d2:fc:08:de:d2:b9:77:92:e5:1e:
95:54:c8:99:3d:13:b1:20:e2:b1:b7:66:b4:42:32:
26:b6:3e:d9:c4:be:16:fc:2c:61:a2:5c:96:fd:ef:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B1:63:98:4C:FE:14:44:ED:78:2C:0C:67:1D:16:51:48:E1:74:50
X509v3 Authority Key Identifier:
keyid:1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ed:dc:bf:2b:04:e7:4d:dd:8b:1b:82:78:b3:7b:80:e0:5f:
e7:26:62:34:3f:98:33:56:96:bc:bb:e5:bb:ed:83:55:5d:81:
a9:9e:8a:ec:12:a7:a0:c9:0f:80:b8:18:95:31:8f:f7:a0:1a:
ae:fb:7a:2b:a5:38:0d:bc:5d:03:2d:47:95:6f:53:4e:e4:d7:
a5:79:a7:96:81:8a:7f:39:a6:62:f8:25:09:80:7b:83:dd:8a:
ff:0d:ab:92:57:45:0a:28:a0:76:be:1b:a6:26:37:a1:9c:29:
2a:fa:4b:69:99:19:02:99:50:09:0e:2d:e3:8d:58:d5:5c:10:
09:22:1a:eb:d0:72:97:14:df:47:40:93:17:e1:88:98:10:e9:
1a:67:44:ba:5f:ea:08:c1:dc:cf:40:08:69:90:59:6f:14:a5:
7c:59:c1:11:1c:37:57:70:0b:af:53:dd:64:dd:94:53:ab:66:
db:fb:b8:68:19:6d:42:f1:f5:27:5c:9d:81:f8:74:0a:52:9c:
e0:1c:18:90:89:62:5f:04:0a:a6:a6:2a:2f:b0:34:20:c3:51:
40:0b:1c:13:0f:c8:67:1d:36:99:86:f8:65:d8:1d:5c:33:fe:
9f:be:5c:90:94:a8:54:4e:c6:38:01:1f:71:1c:33:5a:2d:eb:
26:c9:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:21 2025 by rpki-client