Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: SN0PAOnZqL4inQj+5E6FOFTxwRZUv1aONnKnzLs+ISU=
Subject key identifier: B6:AB:FE:7F:1E:00:CD:8D:B4:78:68:45:BA:AB:9E:8A:13:A1:CB:1F
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 0199FBEA9094E22DED4DD5BD17D518E2CD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 0FEF
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: GtM4pSsiK5eSfyxXfFff62QmvIQ.roa (hash: d17WNX33kwLBGAgNh9bS/nIhg2dh/WqffpjSyAJ5+FM=)
2: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: vMEnKQlYbocpSmUgWincZulx7i8OERPKgmwlev5MOQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:90:94:e2:2d:ed:4d:d5:bd:17:d5:18:e2:cd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=b6abfe7f1e00cd8db4786845baab9e8a13a1cb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:59:98:1c:d4:ba:9e:88:0d:4a:f8:e4:4c:
21:a6:78:46:06:8b:d2:91:04:c2:b9:d6:9f:e5:21:
7e:cc:1f:e9:ff:79:69:ca:a7:23:07:8c:cd:f4:24:
2c:fb:00:9f:6b:b0:63:5e:ba:a7:8a:26:91:cf:a2:
c8:2a:e6:e2:d0:ce:4e:13:a0:a9:6b:f9:44:d3:6c:
6b:2d:60:08:bb:04:94:72:f4:47:e5:af:5a:7f:33:
5b:1d:03:81:66:36:5e:4a:18:f7:8a:90:e7:fb:1d:
4c:f2:98:d8:54:10:69:ae:16:27:f7:08:b8:01:04:
fe:69:2a:7c:63:8c:58:c3:e2:20:92:63:b3:da:40:
e3:53:21:9e:b2:8c:17:06:d0:53:c4:42:89:2e:47:
93:46:c1:fe:cc:48:38:c2:64:e2:82:f2:99:87:c9:
df:7c:42:ff:78:5a:41:ca:ed:89:25:8a:c0:47:8a:
70:cb:61:71:72:f1:a3:bc:7f:0e:dd:ba:bb:c8:f4:
cf:e3:5a:94:af:9d:8a:e6:ab:1b:13:6c:99:39:a7:
62:f0:89:6f:51:55:50:f7:c1:26:8b:a7:a0:7b:94:
1f:39:f0:39:d9:07:5c:e5:ab:e3:36:49:4e:9c:8b:
5d:bc:41:ad:e7:1a:64:5e:6b:7c:e0:2d:83:93:87:
0d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AB:FE:7F:1E:00:CD:8D:B4:78:68:45:BA:AB:9E:8A:13:A1:CB:1F
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:46:c4:bc:30:d3:03:49:1d:b2:6f:e3:98:e3:04:b8:c6:fb:
08:f5:2f:15:65:99:b3:54:0b:ec:cf:7a:5e:38:9d:0f:a6:7c:
1a:58:3f:40:7c:48:8b:e6:81:07:5b:db:3d:8b:fe:4f:16:e1:
38:10:a0:f8:2f:63:88:e7:e6:b2:ae:ba:09:b0:89:0a:7f:c2:
71:65:7f:f9:62:3e:fa:80:a1:43:5a:f1:b4:39:2f:4c:1a:f8:
f8:36:90:76:95:41:22:99:64:0d:12:47:c6:da:58:78:3d:22:
78:0e:70:5e:4c:67:88:e3:76:44:43:c5:f7:74:8e:b1:75:d2:
b5:e6:dc:98:fe:69:64:1f:a1:47:50:b3:81:b5:bd:e1:8a:86:
35:69:65:86:0b:23:15:3b:e2:85:23:4d:ac:58:82:22:85:bf:
fd:9a:e7:e0:3c:f6:c5:40:4d:c8:09:18:fa:ee:72:80:4c:93:
2b:d5:0b:26:61:58:56:19:a9:cc:68:fe:62:41:dc:c7:cf:f9:
1e:7d:6b:41:d7:1c:aa:af:bd:f2:65:bc:8f:ac:d2:5a:6b:e1:
61:ef:87:6a:f0:41:42:68:a9:33:15:9b:6c:a0:e4:6e:6f:37:
f0:9e:f2:42:74:a8:fa:a2:93:f9:99:63:36:6a:0a:8c:a1:00:
58:95:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:12 2025 by rpki-client