Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
File: HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json)
Hash identifier: yKqsfw7mxApRQbwcgwqIm1dyLcadGKugg+KMy6rMEu8=
Subject key identifier: 42:09:14:03:8F:2C:95:0A:3B:41:9B:17:2A:78:08:A4:5B:DE:A1:9C
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial: 0199FC8F5527D5041B59C8550B67C2936A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
Manifest number: 12B0
Signing time: Sun 19 Oct 2025 13:01:15 +0000
Manifest this update: Sun 19 Oct 2025 13:01:15 +0000
Manifest next update: Mon 20 Oct 2025 13:01:15 +0000
Files and hashes: 1: ACKW9RfobgNxFmGLo0q9xAh_d6k.roa (hash: sd4MSbt7R4RMvGdT2hp/M6b7EN9LmdrjGUMed4jtMaw=)
2: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: qMCqeHNUbyFm+I7vUZz1eqQr2cZonX8eokO2inq4p78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:55:27:d5:04:1b:59:c8:55:0b:67:c2:93:6a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Validity
Not Before: Oct 19 13:01:15 2025 GMT
Not After : Oct 20 13:01:15 2025 GMT
Subject: CN=420914038f2c950a3b419b172a7808a45bdea19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:a9:23:16:46:95:da:00:17:00:5e:93:7c:
c7:e8:f2:2c:dd:ed:c2:03:2f:27:2a:1f:0a:57:94:
40:71:3b:18:83:b9:97:83:80:cf:11:d8:42:3b:e1:
a2:9b:4c:ac:28:48:0f:f4:77:8c:ae:f4:ca:04:0e:
00:81:a7:b6:ac:83:03:f8:ad:9d:14:55:b8:00:20:
83:02:f1:3d:2d:bb:e7:01:4c:07:7f:75:10:b6:30:
25:c7:e2:9e:81:ab:dc:4f:12:57:97:bb:b0:52:72:
06:06:db:a5:06:8a:2d:74:39:de:11:05:76:3f:07:
c1:a8:fa:3e:c1:50:ab:99:d7:c9:78:ba:f3:4f:af:
c7:c8:19:d1:62:16:2c:85:2a:c8:e3:e2:36:6a:d1:
0a:8e:bf:34:a0:0e:3f:d8:38:64:60:8f:ff:62:c9:
8e:34:b2:7a:89:09:8b:14:c8:63:d1:75:5f:48:27:
19:1a:f8:11:82:bc:73:f5:d2:69:30:d4:62:75:c6:
0b:7c:08:bd:1d:b2:bc:0c:f5:bc:c9:66:be:80:94:
2e:69:7e:2f:ef:68:c8:2d:f5:a8:b3:b2:f4:51:14:
a7:6c:97:fb:2f:ce:20:3b:71:c2:2f:6f:d8:3d:e8:
b4:ce:8b:ac:d8:6f:f4:ea:0a:f1:9f:38:ea:55:3e:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:09:14:03:8F:2C:95:0A:3B:41:9B:17:2A:78:08:A4:5B:DE:A1:9C
X509v3 Authority Key Identifier:
keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:65:de:79:8d:6d:a4:49:0f:c5:69:5d:b9:c1:b2:71:04:11:
4e:02:bc:82:48:b1:9a:ba:b9:00:cf:61:13:c5:7b:83:01:bb:
af:cc:80:7e:14:6e:20:ec:16:08:45:05:aa:4b:ef:50:af:8b:
7c:49:52:60:08:84:7c:0b:91:0d:96:92:c2:78:f6:09:77:d2:
5c:36:6c:fc:13:d9:7e:ae:10:25:e6:ff:d1:16:3e:2b:54:e6:
da:e0:cc:f0:24:0e:b0:f5:d3:b7:8c:17:00:2d:08:10:e9:73:
8d:a3:b9:27:37:01:b9:7c:28:02:5c:fb:3e:ca:da:cc:a4:63:
82:0a:61:d8:87:9c:16:0f:a2:97:04:e3:c4:ec:da:fc:72:07:
56:6c:55:1d:3f:11:f3:e9:ef:7c:b4:5f:49:ce:a8:73:50:d1:
26:fa:80:93:43:bc:a6:34:0d:64:be:60:1b:ac:af:45:f1:c2:
74:7b:31:fc:79:11:1b:23:55:a5:26:2b:7e:62:08:a3:a4:6d:
0a:6a:2e:cc:13:f3:8f:d5:ec:21:4b:c5:f5:26:9d:25:31:93:
f1:b5:a0:ad:cc:a9:26:75:e4:3b:e6:83:cc:b1:e2:b2:25:28:
14:64:cb:a3:f7:71:97:20:86:e2:b2:fb:47:99:83:f0:69:7b:
fb:db:d8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:00 2025 by rpki-client