
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: Zf+Ys3tsChECvM8UNqM13K9U3UcMkuDeSeinm6+UFEg=
Subject key identifier: 62:09:ED:37:C0:37:0A:0D:AE:1B:E9:05:65:EB:A7:0B:BE:B0:03:C9
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 0199FBEADB82378F83EFA5C6C750CB358BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 10:01:36 +0000
Manifest this update: Sun 19 Oct 2025 10:01:36 +0000
Manifest next update: Mon 20 Oct 2025 10:01:36 +0000
Files and hashes: 1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: jeXSLRzHQrr7gtjhqurQS+SqguTS7oB0tE69cMfA0R0=)
2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=)
3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:db:82:37:8f:83:ef:a5:c6:c7:50:cb:35:8b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Oct 19 10:01:36 2025 GMT
Not After : Oct 20 10:01:36 2025 GMT
Subject: CN=6209ed37c0370a0dae1be90565eba70bbeb003c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:11:8e:ab:9d:26:8b:f3:8d:8f:82:28:f4:
e7:b9:ac:a1:e7:5b:d5:f2:bb:73:6d:95:e8:50:d5:
8f:1f:a3:e1:47:5e:5c:20:be:77:f5:14:2a:cc:08:
3f:59:3f:b5:25:b2:35:85:82:29:56:2d:17:ee:47:
c0:7b:2a:47:8f:24:d9:62:1f:b5:0e:a3:96:b5:50:
16:e7:8d:ac:e4:c2:80:70:1e:fc:57:d8:10:f1:4a:
5f:18:02:72:f8:ed:71:95:d8:03:92:82:78:0a:12:
82:2c:32:12:51:68:2d:ea:7e:43:ae:cd:8e:53:8a:
06:1f:dc:9d:63:e4:f5:c9:ab:27:dd:a9:1c:a1:d6:
17:a8:f1:f8:2a:fb:ad:d2:ed:d1:00:2d:4f:c3:23:
87:ac:b6:74:43:4a:7f:4a:47:a9:2a:2b:b7:88:6b:
6f:57:74:67:9c:f1:39:63:88:39:80:c6:d1:1c:cb:
97:01:e1:b1:e5:1e:2c:56:36:d8:db:20:46:73:39:
e5:57:e2:45:61:e1:85:c2:0a:75:c7:b4:09:a8:81:
7a:d4:cf:8e:99:e8:a0:58:d9:e5:3b:8e:8c:cb:7e:
a4:51:b1:4b:b7:a8:91:55:a9:54:1e:50:a7:09:2b:
c6:99:6a:cd:28:03:da:a6:81:d2:d7:2f:2a:13:09:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:09:ED:37:C0:37:0A:0D:AE:1B:E9:05:65:EB:A7:0B:BE:B0:03:C9
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ca:96:61:b2:e2:27:ac:3b:52:9e:b4:2f:50:1e:bc:37:23:
1e:b7:de:6b:96:62:5a:ae:30:97:86:46:d4:e7:5f:b5:5a:28:
e5:37:dd:51:ae:f2:5a:a1:a0:cc:7b:f9:b4:fd:ad:c5:c7:28:
64:00:04:e4:83:e1:8e:11:2f:83:05:e0:33:40:3b:41:fb:1f:
b0:ea:52:8e:18:fc:66:4e:3b:b7:68:03:ae:5c:61:6b:17:24:
de:32:a6:bb:c4:95:16:a7:b3:89:7e:7e:59:76:03:c1:21:ca:
7a:1a:38:69:11:33:ca:37:dc:03:d8:f3:cb:e9:d2:ed:f9:eb:
54:ec:87:29:f7:76:c7:aa:d9:4c:08:df:1d:b9:67:55:25:40:
1b:eb:b2:3b:de:b7:fb:6e:87:77:e7:0f:f6:5c:a4:48:53:90:
88:27:d1:05:d2:37:03:1d:ae:b5:8e:a5:55:9a:e9:cb:4c:2c:
1a:2e:b1:0b:14:9a:e7:9c:1b:01:47:9c:c6:a1:c0:e6:fb:79:
b6:28:ac:9b:2e:5c:c4:aa:5c:3d:c6:e3:56:53:1d:7e:cb:dd:
2f:32:3f:9c:dc:58:c6:13:2f:49:b1:d6:f2:6c:86:1e:c1:8e:
1c:4b:42:8f:38:db:33:02:95:b5:43:e8:24:57:81:73:55:c7:
33:ab:c8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:51 2025 by rpki-client