Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: E7mjM2lJkj0ieDEwQ2gdgb5UMY35KhGTUT6+DJ81b0s=
Subject key identifier: 18:41:30:DA:42:5C:63:BA:DA:4F:98:E8:82:88:8D:A1:C4:7A:B3:59
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 0199FB45C90FE5B5359DC5F29F2220767BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 07:01:18 +0000
Manifest this update: Sun 19 Oct 2025 07:01:18 +0000
Manifest next update: Mon 20 Oct 2025 07:01:18 +0000
Files and hashes: 1: 5MK1ewnt7LozxEmddZiWa3omfKc.roa (hash: 7+tCKj1f1iwSFAN/o1/yY8fVwb73KSasEYzwGjDKXO0=)
2: DeHazeP3A9wAumTO_Rmx5RqWaqs.roa (hash: 0hOPuiiQ+UKk5lNFYgiHmEshvjQhpp/6FLqfnT4DM3I=)
3: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: X2UJgJ3yYw1NMY80wtqoiZjuI58XRog55pO4x2kfe4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c9:0f:e5:b5:35:9d:c5:f2:9f:22:20:76:7b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Oct 19 07:01:18 2025 GMT
Not After : Oct 20 07:01:18 2025 GMT
Subject: CN=184130da425c63bada4f98e882888da1c47ab359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:83:ce:f7:20:f7:0d:0b:94:15:cc:52:57:
ae:cc:83:be:76:b2:39:df:bf:24:f8:ec:05:56:8d:
9a:ba:4e:94:f3:a0:cb:3c:4a:b2:f1:6c:a9:ec:9d:
74:19:62:a0:13:77:6d:f0:0e:fc:97:60:b1:ef:75:
d1:5a:eb:3b:81:0b:67:a9:81:f4:86:02:cd:f7:5d:
7c:f6:0a:3f:d1:08:c4:b7:bf:dc:67:95:26:66:be:
3d:b2:db:ac:ac:3a:bf:cb:07:a0:3e:7b:e5:20:d3:
84:30:31:f5:7f:6c:63:2c:cf:95:eb:c5:ab:f6:9a:
83:e4:2c:97:14:da:f2:34:de:3f:94:bb:aa:92:98:
bf:9a:a3:53:94:df:3a:67:96:69:80:f9:ab:e7:23:
39:8d:e4:47:4f:e5:26:2f:f6:58:00:f0:32:9e:de:
e4:51:d5:6b:7d:7f:2e:a0:4e:fb:fb:18:1e:db:23:
40:0f:10:44:8f:de:61:28:f6:ca:5c:47:cc:7a:6b:
77:9c:1f:52:2a:fb:ca:8b:98:4f:ef:8f:41:df:4b:
a1:e8:e5:a5:57:1f:6a:f1:20:e1:34:14:0d:bb:28:
cf:63:0d:7d:56:0b:92:27:43:b6:fa:fc:38:32:e5:
0d:fc:d9:f9:38:a8:62:dd:33:c9:90:01:ab:1a:23:
7f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:41:30:DA:42:5C:63:BA:DA:4F:98:E8:82:88:8D:A1:C4:7A:B3:59
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0f:43:71:9c:40:6f:14:44:eb:fc:b7:e1:93:a1:77:0f:0c:
d5:84:a3:73:aa:18:5e:11:8b:cd:2b:0f:3b:6a:ed:9b:b6:35:
b1:f9:4d:c1:30:ea:78:08:bf:c2:24:3b:6a:8a:de:26:bc:7e:
be:e5:14:c7:4b:0b:70:7b:62:cb:cc:91:49:84:bb:71:9b:1c:
de:6e:1e:30:91:f1:dd:d0:b3:c3:ca:90:a1:5d:ab:c7:4f:cc:
06:07:16:00:40:c9:1a:54:bd:28:09:3b:06:f1:64:76:12:c0:
8b:18:57:c3:72:df:66:69:05:aa:e7:17:87:7c:b6:1d:da:98:
a4:90:85:cb:11:5f:33:72:73:a3:8b:5c:b4:ea:bc:81:44:bd:
b9:2f:2c:95:54:20:83:46:a0:08:48:cb:76:7e:98:a7:04:fa:
8d:7e:88:35:79:b9:9b:c2:02:cc:a4:d2:5c:f7:8c:f4:e7:ce:
2b:77:bb:b4:55:62:0b:b6:9e:54:f8:cf:6e:01:c4:f6:68:80:
5c:bf:c4:36:ba:49:4c:19:de:c0:a8:fa:c2:b7:b4:89:74:ee:
8d:4f:cb:79:1d:af:b9:6a:b4:0b:30:6a:89:ee:49:28:db:0b:
03:49:61:ee:18:1f:37:19:89:e9:8e:b8:67:c3:31:df:2d:8c:
86:9e:f9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:02 2025 by rpki-client