Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: oAPxvE5T8pdxPBuNkXby6G1W6UnUzADjn8ywKLMMxTA=
Subject key identifier: 79:DA:40:C9:5D:9E:D8:AA:16:27:63:7D:6B:93:21:1B:13:2F:2E:D0
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 0199FD6B2F22AFFFEFBCE80C5F24874C65D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 1368
Signing time: Sun 19 Oct 2025 17:01:24 +0000
Manifest this update: Sun 19 Oct 2025 17:01:24 +0000
Manifest next update: Mon 20 Oct 2025 17:01:24 +0000
Files and hashes: 1: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: dbIxkJkMZkA6zXBIUcCHLhW9YFiga1PwuwTHu5BsjlM=)
2: UYoraKeZIaoa2wVuoomivtXbxRQ.roa (hash: 64MFcCCoNK8y5TAb4sImtBVWhOrUKow/FlcIn/ABu34=)
3: bce9mz0b3BUGOMHAJWY8rMCRxek.roa (hash: IEeWzdb92Rel/sak0WfNMG3iDCwAJHBVrKmaRSr9eNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:2f:22:af:ff:ef:bc:e8:0c:5f:24:87:4c:65:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Oct 19 17:01:24 2025 GMT
Not After : Oct 20 17:01:24 2025 GMT
Subject: CN=79da40c95d9ed8aa1627637d6b93211b132f2ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:6c:fb:94:bb:f6:ae:1f:9f:90:d1:19:ca:
ac:31:de:6b:7e:93:02:c5:3b:b0:70:28:b4:bc:d4:
6e:f7:f7:a3:73:f4:6d:99:c2:58:df:2e:6e:c2:40:
a6:0a:d1:9c:d8:7d:47:5d:d1:e2:cf:c7:f1:53:44:
f8:76:ab:8e:25:2c:8a:3a:5c:03:a6:60:70:d0:50:
e3:4e:ad:58:19:b7:ca:06:77:8c:ee:37:2c:8b:77:
80:4d:f7:03:5a:57:21:06:27:7d:db:19:ac:fa:23:
1e:3b:8a:23:95:b1:e2:57:e3:d8:57:23:3b:30:26:
00:ba:f3:ab:44:64:2a:64:fe:92:ad:ff:10:62:25:
ff:fb:15:8d:f9:3b:88:42:65:db:1b:1a:69:77:99:
25:14:e0:aa:6c:f1:4f:f7:97:57:dd:de:8f:34:28:
b3:26:1b:02:8e:a7:65:d6:d9:28:47:fc:65:16:26:
de:29:3b:53:21:9b:11:f2:ec:69:b5:4c:91:39:45:
10:a1:ff:cd:40:d2:a8:a7:40:c3:52:d4:58:0a:2c:
d1:b6:bd:fc:a0:3d:ec:d0:7f:ed:fc:57:fd:6a:58:
f5:78:92:0f:d3:ad:38:d0:05:0d:c1:49:32:24:64:
6c:f0:81:bf:92:22:ff:af:58:d4:ff:27:c8:f9:eb:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DA:40:C9:5D:9E:D8:AA:16:27:63:7D:6B:93:21:1B:13:2F:2E:D0
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ee:13:9b:cb:cf:47:28:37:91:c1:b7:c2:1b:72:f9:cc:a5:
db:ea:b4:4f:e7:a4:2b:bd:51:e1:ee:bd:6b:f8:13:c6:be:29:
a4:13:16:cc:a5:75:82:72:2c:44:e5:06:09:cf:fa:bc:15:44:
13:c5:0a:24:4a:2f:cd:9e:18:ee:94:43:24:f5:a2:27:fb:36:
aa:f8:9f:20:03:2a:a4:f0:b1:6a:c4:2a:d1:98:96:76:77:b2:
ec:41:e5:e9:3a:6c:b5:6e:48:63:b4:ca:d5:0d:8e:3d:d3:d2:
af:f4:88:0d:41:48:92:9a:7f:78:32:9c:bc:1e:0f:00:0e:6a:
8a:da:83:16:13:da:ad:ec:86:f4:60:13:c7:61:8b:99:af:42:
ad:e6:34:cd:16:63:da:e3:32:70:33:65:e1:02:69:a4:dc:99:
6a:80:fa:4d:c9:63:9e:9c:b7:63:a2:71:95:8b:d3:94:e6:d8:
24:44:12:47:fa:e2:0c:a6:5a:4f:04:eb:2c:79:85:f7:cb:78:
b1:f3:5a:db:13:1d:b1:80:f0:2c:b1:f2:94:14:eb:00:17:7a:
7d:1b:c6:41:8f:2d:39:7d:0f:a8:dd:00:09:69:6a:6f:4c:4a:
db:af:d1:dc:a9:c8:7a:79:a5:a1:17:c3:d8:81:dc:40:3e:87:
b5:c2:a0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:15 2025 by rpki-client