Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: +cbYRSgedgV3aRfBtXUqYxVhpsoNtO+KhSXwlXw4cG0=
Subject key identifier: 4F:C3:8F:CB:CB:A7:24:C4:AA:2E:76:F3:F2:BC:21:3D:9F:E5:E0:91
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 0199FC58A33F4AF23C4EA60E0991E9AC423B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 02D8
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: 3412M_EtpZn6LWYcU4f3oIK6xWg.roa (hash: 0CHNt2RVOJ0fr7rsHxwpKCupnQAvdSeftNGlZDlJ/Ag=)
2: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: yOjouRQzQMzxIUvjxnLgDYlMlqRGmeXgJgRUutQ2+P0=)
3: S1nE70948dC5DoQ6HvBbscWKaKw.roa (hash: rrKy+sC3QNlyr1Y5CMFJM8t+NCjq84nz7sTi50q+o50=)
4: g6q7q2HLmrL68PDSTTyRIYBNcJY.roa (hash: eTY6Q+eiIrBv9YE0+f1h1CVgS/oOAfzZcA42kSmU6+0=)
5: tVe9NnJO2Z95ZTZ1L61RChKUAa0.roa (hash: f4jqfRGm53uIrMSNBpcr7YiVL+9kyYDEvd948D1JBYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a3:3f:4a:f2:3c:4e:a6:0e:09:91:e9:ac:42:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=4fc38fcbcba724c4aa2e76f3f2bc213d9fe5e091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:9c:3d:a4:80:c7:da:91:d3:20:75:a6:47:
45:f9:39:e6:c3:23:c8:d4:6f:98:6e:14:cc:c3:b1:
2e:d0:9b:3c:e0:5e:34:54:04:63:2c:86:d3:2b:36:
7c:d0:c1:57:a2:06:99:92:70:a8:0c:7c:80:88:06:
36:d7:0f:5c:84:bf:04:26:02:d5:32:9a:97:5a:fa:
b1:6a:63:7f:a7:82:6c:80:61:df:20:3e:8d:59:c2:
e7:71:d1:ae:6f:9f:74:27:e6:a7:39:27:a0:94:76:
fe:13:49:18:a0:11:20:b5:13:4d:15:d1:e4:e5:19:
2b:03:91:72:79:44:77:a2:14:79:0c:74:db:8b:7d:
07:bc:3d:bf:6b:5c:23:6a:0b:dd:f2:15:ea:45:c6:
7f:d3:f9:4a:5e:e5:2f:46:e5:4c:0b:c8:c0:bb:82:
31:19:4e:50:54:bf:0a:92:d0:55:cb:d3:3a:40:87:
3e:31:49:6a:62:5e:29:d0:da:4a:2a:24:ac:e0:d8:
4d:4a:b9:5a:29:72:43:9d:fe:92:8c:b8:69:1b:de:
4c:b4:43:06:a8:c1:4f:99:cc:cb:1a:b9:40:29:90:
52:80:9b:b3:89:56:d5:9c:98:42:4c:14:99:21:54:
1b:06:39:47:2a:40:55:5f:eb:b5:40:1a:00:bf:e1:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C3:8F:CB:CB:A7:24:C4:AA:2E:76:F3:F2:BC:21:3D:9F:E5:E0:91
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:12:b6:15:a0:57:76:fe:70:b5:3e:db:33:9c:c8:59:46:fc:
03:d6:e0:ad:49:c1:fe:b4:ae:7b:9f:94:24:54:dc:ba:ad:63:
96:f9:db:cf:7e:98:fb:16:14:ce:36:50:c5:fa:f5:72:76:5c:
c4:d8:3e:ba:1d:2d:67:da:26:6b:08:07:22:30:55:c9:58:3b:
7f:35:2e:6e:51:33:07:8c:9d:08:58:77:a0:f6:b5:4c:e5:d4:
e8:ca:39:f8:88:2b:bb:29:38:3b:16:08:d7:a3:7f:6e:cd:01:
2e:3f:f8:6f:0d:15:97:25:e3:f7:85:ce:27:4b:5c:c3:f9:75:
ba:0c:49:01:a8:16:68:23:a1:df:53:12:4b:aa:8b:e9:3d:ce:
05:71:b1:f9:92:c8:f0:da:83:17:b1:a3:9d:0f:f7:63:32:cd:
ee:96:57:82:03:8e:2f:1c:77:91:34:57:ff:da:67:3d:04:95:
00:e9:6f:4e:4a:ea:d2:d7:c2:45:0a:22:62:14:c6:5b:9b:c6:
d7:0b:34:da:ce:43:0d:e6:ae:1c:bc:64:5a:b6:d6:a8:a0:c2:
f0:37:4f:9e:14:32:a3:b7:13:dd:5c:07:55:57:77:03:f3:58:
13:ac:62:ff:38:fc:7e:16:9c:27:63:91:41:ea:76:e4:54:a1:
6d:96:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:18 2025 by rpki-client