Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json)
Hash identifier: b0iASuUvceX4SqB+Wf5cua+90hk6uk87JZ1pU+3TZ/o=
Subject key identifier: 55:54:25:FC:96:9A:26:7A:AB:88:62:D4:2B:9D:03:C0:66:E0:C0:B8
Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Certificate serial: 0199FB45E5B02902970290C53CB3CACAEF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
Manifest number: 1647
Signing time: Sun 19 Oct 2025 07:01:25 +0000
Manifest this update: Sun 19 Oct 2025 07:01:25 +0000
Manifest next update: Mon 20 Oct 2025 07:01:25 +0000
Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: aDZnJ04tZEBD6gPNS2e07moACYyC0xcX+RVLkOplPpI=)
2: fPSZP8slBnM3nSGAFaRQqfblguQ.roa (hash: blLgu2v1K5L5bFcrSgTETqeQaxD8GwJMq27CaonXujI=)
3: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e5:b0:29:02:97:02:90:c5:3c:b3:ca:ca:ef:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Validity
Not Before: Oct 19 07:01:25 2025 GMT
Not After : Oct 20 07:01:25 2025 GMT
Subject: CN=555425fc969a267aab8862d42b9d03c066e0c0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:af:23:a0:18:4f:91:50:8c:88:53:45:74:
43:a4:1d:aa:58:29:08:61:cb:0a:9f:d1:98:42:39:
3f:2d:7a:5d:05:1d:cf:ce:75:12:ae:0d:58:1b:e3:
2c:60:2c:02:8f:50:dd:ce:0f:97:f7:c4:5b:25:4a:
d5:77:47:97:0c:72:e1:b7:7b:b2:fa:70:7e:0b:88:
c4:14:78:e7:86:ca:b1:db:d0:db:4f:4e:14:da:5f:
cb:a3:e9:fd:5b:88:db:d0:4a:19:01:9d:00:76:dd:
07:3f:64:58:fb:ca:2a:82:4b:82:25:a4:bf:9d:c2:
f4:9f:56:ff:c6:b6:1c:d7:64:11:cc:cd:e1:28:f4:
21:67:a0:6f:d6:74:ee:7d:23:3c:b5:f7:67:b7:e8:
d7:4f:76:3c:36:fa:05:37:ad:43:52:c9:c7:8e:da:
cc:f2:29:b2:da:86:42:c1:73:25:35:82:b2:67:f1:
9f:47:53:08:89:2d:02:79:a5:d6:3a:d8:00:64:a3:
68:40:7e:69:76:8c:3c:5e:44:6e:52:eb:64:f3:0b:
c4:60:a1:da:ec:bf:89:90:3b:3f:0b:eb:5f:3d:90:
20:3c:4a:30:11:6c:d7:68:9f:c6:c8:b7:c7:ed:b2:
38:bd:21:8d:14:72:54:a2:3a:6d:fe:d0:40:93:42:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:54:25:FC:96:9A:26:7A:AB:88:62:D4:2B:9D:03:C0:66:E0:C0:B8
X509v3 Authority Key Identifier:
keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0b:9a:fe:96:f0:c2:78:44:ec:0a:69:74:8f:99:00:c2:4f:
d4:df:0c:3d:15:09:0c:82:18:98:92:be:d0:2c:81:34:fb:8f:
9d:d7:43:13:fc:ec:07:07:4d:57:41:02:32:50:ba:fa:61:56:
18:c7:8a:b2:fd:2e:ca:fa:25:bb:8d:62:ef:e9:93:b5:38:a4:
c5:ec:c2:7e:cb:dd:db:06:48:a7:54:2a:6f:31:e4:26:1c:9e:
6c:a2:d2:01:1b:cc:b1:ee:b5:02:d0:7e:d9:67:a6:86:66:9b:
99:55:66:e5:45:54:93:98:56:4d:3e:f9:39:da:e4:85:93:33:
c4:e2:87:2f:f4:54:31:ac:e9:32:ca:16:be:7a:2d:c6:e6:ae:
34:a8:f0:49:5e:4e:17:fd:89:5b:ab:44:20:12:48:f9:dd:5d:
12:64:b4:de:0a:89:3e:06:df:3a:9e:67:e2:65:e1:0a:58:18:
3a:71:bd:0e:31:2a:38:64:a1:12:d7:43:cc:17:58:51:de:53:
e8:65:cf:44:41:00:93:e3:21:7e:9e:c8:8b:bd:b5:c7:19:bc:
01:77:2b:ee:8b:74:d1:2f:ee:5b:d1:07:40:c3:da:bc:70:95:
a1:43:a8:a5:ec:94:61:4e:f5:21:71:ce:27:bf:9e:08:f4:1b:
90:06:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:13 2025 by rpki-client