
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: Q1tCkqaTdOmiuRPWrdsXKpxbCvp9PG1hsaCDJmAZQ/c=
Subject key identifier: FB:02:B1:94:EE:13:9C:1C:8B:5C:BE:F3:95:81:32:66:DB:21:A3:DC
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 0199FC8F31DFBC92657AE6E6566DFFCC838A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 03B6
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: 8-kkwcK7J3DxZVf5MGzOJYHQ7BI.roa (hash: rhq0p1ekXajroUDi/6gbWVszGGw1Hl0Cw7VvrAiAjNE=)
2: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: vGN+LXsCoqnaFsHQDCCgl1hny0gafKf+J5nE6rqkcMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:31:df:bc:92:65:7a:e6:e6:56:6d:ff:cc:83:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=fb02b194ee139c1c8b5cbef395813266db21a3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:75:b1:ff:33:f3:eb:ad:ec:4e:b4:9d:05:
c5:76:0f:86:52:f5:92:ee:a5:76:c1:4f:4a:65:80:
15:36:7c:5a:ae:33:83:6a:89:f7:c4:f0:cc:96:7b:
17:ba:67:f9:b3:80:dc:7d:f3:f4:61:69:c4:56:a5:
e7:81:18:73:50:a3:51:d2:46:91:0e:1c:e6:6d:e5:
cd:1e:2f:b8:26:cb:1d:27:f5:d0:f7:64:4b:a6:17:
20:ba:08:42:ac:72:c4:08:40:6d:6e:fc:75:a6:dd:
4c:ea:46:5d:c2:ad:88:32:e8:55:f0:8a:ea:42:f3:
5f:12:1a:f0:97:cf:dc:b5:a5:ee:ed:65:26:1c:97:
6e:04:13:4b:f6:e0:d1:a7:49:e6:b3:08:8d:29:3e:
3b:64:9a:e6:9f:3c:6e:ee:a4:8c:aa:73:2c:f7:84:
a3:29:7f:60:e1:33:62:0b:55:f0:da:da:0f:ad:09:
33:fd:ca:51:35:13:4b:87:29:62:56:93:d9:ee:f1:
f6:28:6e:56:50:3c:d0:3c:85:ed:e3:a5:65:b6:d7:
5b:1c:56:24:2b:16:66:0a:95:31:f6:cd:39:9a:e6:
ed:b8:e7:48:d9:90:3c:8f:e2:e9:01:b5:bc:1b:7c:
ff:0b:a2:6b:3d:9f:25:38:44:13:3e:1a:fb:88:71:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:02:B1:94:EE:13:9C:1C:8B:5C:BE:F3:95:81:32:66:DB:21:A3:DC
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c1:7f:93:3d:e5:7d:8e:d7:af:85:50:ef:8d:cb:53:50:13:
17:75:85:67:92:a0:2b:52:be:e6:ed:92:6b:31:2e:4a:e4:5c:
cc:4d:f7:83:7c:cc:ac:21:27:c4:8b:f1:e5:b3:70:3e:95:c3:
6a:26:a5:45:d3:b0:a2:02:02:aa:e5:43:95:94:a8:85:60:4e:
6e:6b:bc:4a:00:a3:52:90:6d:14:75:22:39:84:5a:b8:d1:45:
fe:7f:55:b9:b3:43:8a:3e:15:3e:e7:b0:1b:17:46:b1:46:0a:
1e:52:81:f8:67:fd:0e:f0:e7:40:f4:d8:0c:d5:d4:e3:65:39:
3d:b3:47:3d:08:bc:de:24:8b:36:52:2c:b8:db:95:cf:96:14:
fd:6a:f0:17:0a:50:75:99:db:3a:9f:91:2c:c3:45:f7:a1:62:
ed:57:d9:e5:11:3a:b1:be:fb:a5:45:46:2a:dc:c0:9f:c2:01:
89:6c:cd:7f:e6:51:a0:2b:6b:ec:c7:25:c8:71:41:c6:20:38:
90:88:6a:37:10:7c:67:c7:2f:c5:5c:46:14:0c:c3:7a:3b:08:
99:52:d1:af:6e:d5:3f:91:9c:3e:69:9f:0c:b9:51:e0:b9:04:
d6:6c:95:b7:b8:4f:1e:3b:94:ec:52:ee:fc:90:f9:b3:10:ed:
59:48:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:49 2025 by rpki-client