
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
File: HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft (raw, json)
Hash identifier: pEGZUOZoAQWBW33mTUPv+mWgfM/tDbBzeRah/CdyzsY=
Subject key identifier: 64:0D:F2:64:10:45:F3:52:82:15:C5:E1:4A:16:1E:29:FC:3B:C1:5A
Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
Certificate issuer: /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Certificate serial: 0199FBEBD27A2B9BEB528418C886A7610166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
Manifest number: 075C
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl (hash: DkdBSY43AptHANcANLJkPzDaWIoEmUVW3W7wRZ7ThXA=)
2: bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa (hash: F54YraMKL44U0jhJwgmaruTpnrxsP2uQrqeXw7OujLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d2:7a:2b:9b:eb:52:84:18:c8:86:a7:61:01:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=640df2641045f3528215c5e14a161e29fc3bc15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:81:18:ee:a6:91:96:df:4f:75:dd:39:cc:
90:bd:d8:33:3b:48:1b:a4:87:00:a7:05:f7:4d:c8:
fd:7b:cf:73:1f:eb:93:2e:06:e9:b2:8b:f8:27:ab:
d8:f6:ca:94:d3:ec:1d:4b:b1:e7:16:80:a0:12:c0:
a5:2f:05:fc:a3:5d:da:bd:45:58:ef:ef:0d:43:e9:
1f:af:15:a0:dc:aa:ac:be:1b:c8:af:7a:3a:e6:4f:
27:a1:6f:85:d2:7c:d7:4f:0e:80:61:d6:01:4e:6e:
52:99:95:c1:d3:1b:f7:01:2b:43:08:6a:77:9e:32:
0d:12:5f:31:0f:c5:62:4b:8a:61:c3:77:00:00:3f:
a8:2f:af:73:cc:f7:59:cb:01:11:72:ce:44:a1:a1:
e2:0f:9a:07:b3:dc:79:04:e6:06:7f:a4:f0:9b:37:
92:a3:50:e8:32:74:b7:8f:70:6f:c0:0b:18:d2:c7:
f7:e1:1e:22:f8:88:12:80:c6:ef:6f:2e:1f:49:f2:
92:25:f7:a7:31:76:50:14:a8:e5:6a:54:f6:8a:2c:
a3:01:08:af:a2:39:dc:fd:08:b7:ac:0e:05:a1:80:
13:be:36:93:cf:bd:ca:0f:be:f7:87:10:1a:8d:e4:
7f:f0:39:97:ba:35:28:0c:e9:91:7c:3f:68:cc:c3:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0D:F2:64:10:45:F3:52:82:15:C5:E1:4A:16:1E:29:FC:3B:C1:5A
X509v3 Authority Key Identifier:
keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:31:97:7c:79:bf:b8:49:e9:ab:37:d7:4f:a8:c3:0a:cb:d3:
75:78:37:03:a8:03:e7:22:6e:1d:d5:28:90:25:c1:92:e4:3d:
e9:c2:ca:ef:d1:53:0a:30:e6:66:3a:93:f2:65:9c:67:7e:44:
73:80:2b:9f:88:df:a3:09:15:6a:0a:11:e0:77:ac:62:58:d1:
c4:60:8f:af:83:a1:3f:99:fb:cd:22:41:ab:fd:33:f5:5a:4b:
90:1d:75:d4:b0:e5:a8:80:5c:ce:7f:d9:af:dd:a1:3c:16:3c:
fa:67:e3:11:04:55:3a:58:16:ab:3b:3b:94:4c:af:1b:c9:c1:
53:5c:fd:38:72:75:5c:4b:f5:58:f9:e3:ac:dd:c3:c9:1e:ff:
a6:10:f7:f4:a7:9b:ad:ee:52:53:23:8d:2f:64:58:a9:ae:0e:
a2:1b:c1:c7:02:5d:d6:a0:2b:84:38:37:a7:0e:31:b8:05:87:
76:9f:76:e3:b0:09:1a:6f:57:01:bb:49:1f:f1:7e:fa:2c:cd:
5c:a3:26:c2:da:6d:2b:ba:bf:93:22:9b:35:48:76:50:41:11:
6a:15:5c:96:af:6d:c7:90:ec:f5:96:b6:7b:33:46:19:3c:d0:
69:ac:18:ed:d0:79:14:04:55:4e:01:ea:ab:e0:5d:85:a1:87:
9a:5c:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:12 2025 by rpki-client