Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: EMr/hl7nEN7eFwWnG8uS5s4XA/jtjzkbBAm/mgwLGDg=
Subject key identifier: 7C:67:67:A6:14:B7:60:E5:03:2D:75:06:30:38:D4:C7:9A:BB:50:6F
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 019A02FE64D40D5994547F3BE2D9935CE40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 19:00:17 +0000
Manifest this update: Mon 20 Oct 2025 19:00:17 +0000
Manifest next update: Tue 21 Oct 2025 19:00:17 +0000
Files and hashes: 1: 8jvY6gdKf49fsHMa8JzUxLXy6Co.roa (hash: zq4v0B4wOz8tRoHJTPQ0OEhJqUOFXXY6z/cXiV3Bsic=)
2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: BMb0lzsYx/nirzF4/gVvrIQfatLlSaPvknaESL7gRYE=)
3: MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa (hash: 4xTLRWvAhNdFnC4rR2yT1xCAEdrH5/3kjyyJfVcTeSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:64:d4:0d:59:94:54:7f:3b:e2:d9:93:5c:e4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Oct 20 19:00:17 2025 GMT
Not After : Oct 21 19:00:17 2025 GMT
Subject: CN=7c6767a614b760e5032d75063038d4c79abb506f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4d:aa:cc:5b:93:73:b8:00:1d:41:5c:d5:de:
10:32:b0:1d:7f:75:a7:26:d3:fe:b8:04:2b:23:70:
40:f8:d0:b8:55:67:f8:85:85:cf:61:f1:f8:c8:ba:
69:b3:e2:32:4f:06:3c:29:e0:3c:85:53:47:c7:4c:
5f:13:b0:ca:fa:c0:04:21:8b:84:50:76:95:70:3d:
5f:b8:9c:0f:02:ca:98:60:5f:1b:32:95:2b:da:3d:
8a:b1:ae:97:e0:53:35:fc:5f:36:97:a0:ef:32:23:
63:64:2e:a2:fd:59:da:ff:99:c8:eb:e0:3b:ff:be:
e2:2f:41:94:10:d1:78:cc:96:bf:76:eb:c7:f1:a3:
28:04:c1:35:dd:c7:28:90:3f:c3:ba:be:8d:dc:d6:
ca:82:5e:37:13:73:55:cb:4d:4c:62:f3:97:f1:51:
77:b8:7d:c4:4e:e6:db:3e:a0:f9:b2:31:56:c1:11:
d0:ba:09:52:45:04:29:41:22:3a:28:f5:d0:e8:fb:
02:9b:32:8b:ef:0f:a1:32:f7:54:8d:77:2b:3a:89:
5b:59:cc:2c:16:19:17:ae:b0:a3:07:c4:49:c9:82:
23:4c:dd:7d:55:83:23:07:2e:b9:00:3d:7d:3e:a0:
24:9e:ec:19:77:97:ba:72:56:ee:70:8d:63:bb:7b:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:67:67:A6:14:B7:60:E5:03:2D:75:06:30:38:D4:C7:9A:BB:50:6F
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b1:f4:c5:c8:a8:0f:b1:38:3e:c0:2f:37:1c:5d:87:f2:f5:
63:72:b5:c6:43:3b:d6:38:ba:9a:2e:bf:ed:ac:bd:28:99:b3:
bb:03:3f:88:5a:ab:c3:58:bc:39:f1:72:ed:a6:01:ef:ae:ab:
ab:87:96:f3:bb:ad:3a:89:a6:16:07:b6:5d:ee:2a:51:b0:8f:
ca:f6:11:0d:f2:34:59:47:27:bc:93:13:60:ab:e0:e3:4c:44:
94:f6:26:2a:52:51:97:4e:d0:e2:20:ac:fa:a4:74:fe:45:38:
82:40:eb:a3:93:bd:08:f5:21:31:4f:7e:03:96:fd:76:f2:1a:
5d:bb:49:4b:46:19:d4:a5:38:31:3c:f2:35:8c:5b:f1:5b:78:
93:b2:9f:93:a7:4d:7c:32:b8:e0:c1:35:ea:f5:20:c0:a4:bd:
6a:f8:9b:39:ba:49:ff:7a:f3:7d:98:2d:cc:71:86:28:b1:d7:
b4:33:ef:9b:16:8f:b8:b7:30:11:00:3f:c2:06:94:df:ed:16:
6e:fe:24:f8:c0:da:be:84:5b:af:a1:74:ef:90:d0:d1:7d:40:
0c:ad:e3:cf:1c:c8:4d:42:d1:f6:ec:41:6e:7a:37:bc:6f:e5:
a4:83:7b:e8:c4:5a:2d:0b:12:9c:b7:f4:23:47:ea:fa:df:88:
a0:a0:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:00:47 2025 by rpki-client