Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
File: Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json)
Hash identifier: a4w/gW6E6t+hEZ58NLQx4YzjRJ3U4xnTm0KWW+ptRC8=
Subject key identifier: 21:16:98:63:EB:71:5D:A0:1E:DC:4A:95:75:5F:49:F1:6C:5B:04:B2
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial: 0199FD3435D4CA2AB3080FD1EEE7BAD7C113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
Manifest number: 0F2C
Signing time: Sun 19 Oct 2025 16:01:21 +0000
Manifest this update: Sun 19 Oct 2025 16:01:21 +0000
Manifest next update: Mon 20 Oct 2025 16:01:21 +0000
Files and hashes: 1: 1-veQxSzqgnwuwyzarzzUI6GU1Vo.roa (hash: bIWGmao73L88A9Mc0bEmGHNF/q2XxTrM/cwuMLwX1wg=)
2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: c3RUzwEidzsESnRw01KSypO9bIB6VgzPxvCUT07zTjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:35:d4:ca:2a:b3:08:0f:d1:ee:e7:ba:d7:c1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Validity
Not Before: Oct 19 16:01:21 2025 GMT
Not After : Oct 20 16:01:21 2025 GMT
Subject: CN=21169863eb715da01edc4a95755f49f16c5b04b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:c2:80:b5:52:27:ef:58:e4:60:4a:32:fd:
04:7a:bf:94:d6:a5:5d:35:fd:48:44:75:12:2a:d0:
f4:90:a7:6a:ed:78:c0:ed:53:1f:73:c9:f9:7f:63:
a2:80:aa:98:92:ba:15:ad:cf:0e:07:5e:e3:80:3e:
b0:d9:83:4e:a3:27:b6:26:69:1c:1b:64:22:d4:ba:
1b:fa:47:a9:d4:09:9c:ff:a1:dc:0b:98:22:fc:f2:
da:41:9f:31:47:de:ab:ca:70:4e:8f:92:8e:32:e7:
95:fb:54:2b:b6:f2:b1:57:f4:f6:8f:db:1e:d6:3a:
56:8d:78:03:56:c1:ad:35:22:fa:01:bb:95:e1:9b:
f0:7d:8f:ec:1c:9f:0b:a0:9e:6c:f0:20:4a:7f:bc:
e6:ff:01:17:93:97:d7:91:71:87:7c:22:68:33:af:
d6:58:52:46:3f:4d:33:44:e6:3d:a2:4a:ea:df:d7:
87:b1:e0:ee:97:60:95:12:eb:6d:f1:8a:ec:68:53:
b4:4a:f1:6d:00:72:85:3e:c7:f0:7f:ca:05:2e:1a:
e9:8a:06:6f:0c:e7:43:0c:d1:fb:60:6c:1e:3d:a5:
d3:e9:9c:ca:98:f7:86:35:35:17:b2:3b:bf:d8:f0:
e1:67:a2:8c:79:ac:92:c9:1c:0e:55:e0:c3:8d:bd:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:16:98:63:EB:71:5D:A0:1E:DC:4A:95:75:5F:49:F1:6C:5B:04:B2
X509v3 Authority Key Identifier:
keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:90:48:ed:f1:00:44:93:bc:cd:1e:e0:fe:3c:ca:ba:cd:b9:
19:2c:4d:da:09:5b:e8:a1:53:92:4e:4a:c9:7b:5f:aa:e5:0c:
51:6b:6a:7a:5c:e2:0a:49:aa:a8:ac:b7:5c:d2:eb:42:f0:bb:
47:7c:74:36:87:ed:a0:44:11:5c:5a:11:34:ec:03:74:95:46:
1f:53:50:bf:96:74:bf:18:96:af:5a:5f:31:36:61:20:5d:89:
58:fc:46:aa:18:52:4c:9b:5e:be:fc:77:ca:98:d3:d3:a0:ea:
8f:05:20:a3:0b:56:d4:f3:c0:1d:37:bb:65:16:d2:8f:4c:1a:
33:52:2b:3e:d8:ce:dd:d3:24:1b:fe:cc:95:4b:60:3b:77:31:
70:27:d7:68:ae:73:94:7a:6b:82:c4:5f:5f:39:b4:fe:0c:f1:
72:5e:df:67:7d:4b:fa:f7:e7:7c:e7:b7:ca:16:92:b3:17:72:
54:e8:fb:4e:43:a4:27:92:c8:9e:77:59:c9:35:99:43:94:4b:
31:21:d1:fd:08:cf:3b:c9:e1:42:51:46:c3:2b:71:3f:e4:f7:
36:88:5c:fd:c8:00:f7:22:d3:61:91:68:31:1a:98:c7:7f:04:
bb:c7:0a:70:01:95:cd:54:84:23:eb:4d:7b:d4:24:45:29:eb:
e7:bc:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:24 2025 by rpki-client