Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier: eYABjYoXdyRpyR5ZME5AHOyY/DNyMYmig+I7fPTqq7Y=
Subject key identifier: A4:1B:3D:F0:7C:70:B9:79:AC:E6:8E:6E:9A:D5:38:11:95:E4:D0:4C
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 019A006C62277201DC833D0BD099B613398C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number: 151A
Signing time: Mon 20 Oct 2025 07:01:34 +0000
Manifest this update: Mon 20 Oct 2025 07:01:34 +0000
Manifest next update: Tue 21 Oct 2025 07:01:34 +0000
Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: wV0g3IRoW2eDlTHVqF6nJcupsHihFpnLftBQeqEEzMI=)
2: IfJsnDvBjhqNyvQwy7Sj6pVTE48.roa (hash: 72JQ+BiVOGXtzrf0r97edI+poiwfkKBvn0dEoFn6Vjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:62:27:72:01:dc:83:3d:0b:d0:99:b6:13:39:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Oct 20 07:01:34 2025 GMT
Not After : Oct 21 07:01:34 2025 GMT
Subject: CN=a41b3df07c70b979ace68e6e9ad5381195e4d04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:15:8b:b8:79:ac:07:34:e6:79:dd:5f:0e:
3c:db:84:df:ad:73:e0:78:a3:2f:cc:17:4b:0c:64:
67:a1:ea:f8:b7:4e:11:85:d3:78:02:ef:ad:cd:79:
af:d8:bc:e2:11:07:e2:11:08:2c:10:20:a2:47:b0:
72:01:97:fd:c1:81:39:5f:16:fb:bf:aa:00:03:3e:
c8:d0:9e:4c:b7:2b:8d:97:cc:c4:b4:13:20:49:fc:
0e:4e:27:b5:64:97:83:f4:fa:36:2a:44:40:b2:9b:
b4:b8:75:88:f3:74:91:97:83:dd:2f:b6:70:17:74:
2c:44:18:47:75:6a:22:b4:eb:b4:24:2d:94:a7:0b:
e1:9f:68:ab:50:09:4b:1a:26:5b:56:0b:cd:39:ab:
f7:6f:d7:37:4a:cf:9f:5e:f7:18:a6:2b:5b:8a:24:
ef:b0:88:fe:be:63:58:7d:6f:08:a3:d2:da:80:a2:
d5:06:16:d9:7b:54:66:b9:93:09:bc:50:94:f5:80:
3d:df:fe:4c:60:bf:2d:e2:bd:c9:2d:ff:93:b8:f8:
e5:16:8d:19:70:be:19:ab:1c:b8:91:f0:3a:69:92:
64:39:58:91:44:9f:1d:56:5b:b1:07:f2:29:2e:35:
b6:72:b3:7b:c8:49:a1:82:b7:a3:9a:10:9e:1a:ef:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1B:3D:F0:7C:70:B9:79:AC:E6:8E:6E:9A:D5:38:11:95:E4:D0:4C
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:47:18:0f:19:e9:1f:5b:48:05:f7:ed:f0:5c:55:55:a3:65:
98:34:d0:79:e5:d1:1c:67:0c:f6:03:78:b3:9b:3f:43:9f:cc:
11:66:27:f2:c7:a1:3b:71:9e:1a:1d:49:f1:12:6c:ca:e1:9b:
cf:f6:41:86:b1:11:f5:76:a7:c4:ed:6a:1e:10:31:2a:28:13:
d1:53:2b:fc:9d:d3:ae:d9:77:fe:70:68:fc:15:bd:e7:9f:d5:
67:02:b0:66:7a:1d:2b:81:3d:ea:4d:db:ea:e3:7a:b2:d5:22:
1b:84:dc:4a:83:3e:00:4b:85:5f:0e:88:4d:2c:ef:7a:10:82:
2e:4b:e7:bd:b7:07:27:5f:83:09:94:a0:e0:ae:13:ee:dd:31:
2b:a2:b8:23:52:7c:5a:dc:ef:12:01:33:a8:33:f2:cb:59:78:
c1:ad:34:42:4b:f1:f4:e9:84:dd:d4:6e:d4:d9:e2:ed:f1:43:
72:9d:89:08:2f:c0:07:4f:8a:70:d4:bc:73:0b:4a:b2:27:57:
73:7a:e9:ae:33:f6:08:85:40:de:62:30:ae:69:10:85:b4:48:
07:8e:47:b5:d7:10:95:6f:a6:17:5c:fe:0d:e0:98:46:b9:54:
48:06:fe:5c:8d:bb:d4:0d:ff:c9:5c:63:3e:1b:cd:7a:4d:a1:
5d:e1:40:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:08 2025 by rpki-client