Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: sNk/lEWH3jE8+AOlQMFI4D40waZWSuTAv1ypEi1hXUQ=
Subject key identifier: EF:2B:97:6E:8C:F7:E2:4E:CF:D1:46:B8:9F:C9:00:E3:20:6F:0F:BB
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 0199FC2157B30782BEFF561DB166CAA708DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0C19
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: HRq4Ql5SuTBI7STI081bSR17G60E1QOLbM45Nf92Jcs=)
2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:57:b3:07:82:be:ff:56:1d:b1:66:ca:a7:08:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=ef2b976e8cf7e24ecfd146b89fc900e3206f0fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:dd:a5:f7:95:04:9f:06:d9:ec:f9:7d:1d:
71:85:3a:75:26:23:65:62:0b:23:2f:60:ae:73:ab:
ef:b0:a7:10:61:f4:65:f3:c7:92:b0:e4:3c:7d:b0:
97:36:d0:7c:9f:da:20:11:16:cd:65:fd:a0:7c:f1:
b8:12:07:a0:57:7f:79:ad:aa:48:9a:0b:18:6c:4b:
c7:59:e1:da:f2:91:d7:f8:87:c7:71:07:1c:f4:91:
14:5e:89:d0:41:db:fb:ea:69:46:24:ed:12:e9:0c:
cc:51:f7:a4:28:8a:35:dd:04:53:e5:86:1d:aa:e9:
3f:f2:fb:10:45:b1:d2:32:33:15:9b:01:36:89:fe:
86:ee:02:fa:92:ac:e4:e6:f8:79:00:23:34:71:97:
19:dd:ea:24:39:c5:f4:d1:78:2d:69:ae:75:84:8a:
64:27:c8:b3:64:83:85:95:7a:bd:f6:68:4f:f1:ab:
5f:ad:41:c5:c9:b0:31:51:36:36:67:4b:b8:03:d9:
73:05:79:da:39:fb:30:d3:5d:b0:b9:e3:f2:c7:fa:
89:74:97:5f:c6:88:66:a9:78:ff:17:e3:10:5c:52:
ab:64:41:4e:6c:45:41:d9:2f:fc:92:84:d8:c5:39:
d3:1b:a5:68:57:c7:e7:79:12:36:e7:37:f2:17:f3:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2B:97:6E:8C:F7:E2:4E:CF:D1:46:B8:9F:C9:00:E3:20:6F:0F:BB
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d4:1b:99:d0:49:ec:4f:e9:63:94:8d:49:e2:31:a3:5b:d2:
82:eb:98:18:42:31:81:97:2f:2e:b6:04:f7:02:b4:e8:cd:56:
65:4d:1e:27:77:72:c9:bf:8c:cb:6a:94:60:ed:c7:c5:93:6e:
cc:95:fa:32:ef:3d:19:46:14:df:de:c5:c6:57:51:55:92:fa:
28:7b:fe:dd:83:8d:15:b9:54:c5:74:aa:f8:16:3c:e5:19:d4:
39:06:12:49:c7:30:d5:00:49:ef:39:78:79:18:90:25:2f:6c:
29:e9:31:1d:e4:01:e0:fc:a9:28:21:51:80:db:02:20:d3:e6:
73:1e:1c:43:ee:b5:35:4f:e4:44:e0:fc:20:57:37:bc:9a:1c:
7b:ba:0c:42:3d:85:db:c3:53:90:4a:3c:2e:04:5a:4f:a8:cf:
b1:43:ce:07:48:cf:81:f5:59:4b:b1:49:f4:96:03:a2:94:91:
31:a1:d0:a6:8f:76:72:99:ef:6f:55:0a:ce:eb:60:2e:c8:58:
e2:c6:aa:8f:d5:a2:c3:26:ae:7c:5e:a8:29:5a:4d:98:62:3f:
27:76:21:51:cf:03:f7:e9:b9:d1:74:de:9a:de:14:24:e7:a1:
93:f4:45:b7:73:2d:47:3a:45:d7:e3:68:9d:f5:64:0e:44:92:
67:26:f8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:20 2025 by rpki-client