Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: g5cKP/HqU437Gl8gLBmXPs+HkioHwBNqrxMBdRZz9K0=
Subject key identifier: D5:77:55:31:B2:4E:4C:50:0D:B0:79:5B:4C:56:7C:35:79:84:17:1A
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 0199FC8F68AF253B979A7B623872C36B0F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 13:01:20 +0000
Manifest this update: Sun 19 Oct 2025 13:01:20 +0000
Manifest next update: Mon 20 Oct 2025 13:01:20 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: yYapM25SA7rRcFua82/ffbeuTTqxdztPEWF7RUvJvzU=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:68:af:25:3b:97:9a:7b:62:38:72:c3:6b:0f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Oct 19 13:01:20 2025 GMT
Not After : Oct 20 13:01:20 2025 GMT
Subject: CN=d5775531b24e4c500db0795b4c567c357984171a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:44:59:48:35:58:72:c6:93:82:b7:a5:e5:
20:44:db:6e:4b:88:c2:e5:ea:3f:c9:f3:17:7e:af:
8c:26:62:34:c5:dd:90:2a:12:f6:25:20:74:a8:24:
4b:ff:98:4a:db:8e:31:53:ad:ad:44:98:26:8d:0e:
2a:f5:c3:74:ee:f7:35:9e:f3:fa:42:e8:94:87:17:
3b:3e:73:a6:66:a5:bf:c8:e4:82:6f:68:20:c6:9c:
0c:e6:d4:8d:08:c9:31:f1:af:67:ea:a7:47:e6:62:
42:22:de:a9:27:45:82:ae:ce:2a:d2:9b:16:dc:34:
cd:7a:78:43:fb:e6:8e:00:d0:65:d1:29:e5:1f:e1:
91:34:b1:11:ba:df:b0:a4:68:57:25:f9:c6:34:31:
91:4d:cb:83:75:ad:79:fa:5a:5f:05:42:27:a7:c5:
90:9e:a6:72:ab:e6:99:24:ff:50:d5:fe:74:63:2a:
1e:89:1d:db:44:53:bf:6e:ac:52:e5:ad:22:45:35:
97:3e:58:0d:f4:7c:ed:5c:fe:bf:ac:36:49:d9:dd:
04:89:d8:63:4c:e3:b7:0a:c0:10:9d:5e:00:e1:47:
15:fe:5a:89:99:91:eb:19:8f:64:bf:c6:27:ee:18:
7e:1b:d6:c1:5b:d3:2c:ed:a4:a5:b0:eb:0a:26:e9:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:77:55:31:B2:4E:4C:50:0D:B0:79:5B:4C:56:7C:35:79:84:17:1A
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cf:49:b3:c5:ef:32:5d:42:84:e8:0e:e6:aa:0d:56:a0:bf:
35:67:95:37:47:b7:6d:13:c6:cd:53:43:36:d0:48:9e:38:91:
92:84:96:5d:7b:10:90:65:78:5b:88:6c:53:9c:b6:8a:cb:1a:
00:63:41:ef:6f:b6:f3:f6:10:31:28:59:ab:0c:d9:3a:8e:c6:
08:20:35:11:87:68:41:e8:71:9f:06:21:62:85:2f:c5:97:58:
3f:b9:22:20:63:3d:fb:55:77:ea:1f:f3:80:34:7a:a6:07:a7:
96:2e:37:96:be:e0:85:ad:aa:41:21:79:38:a9:d4:fd:1a:9c:
48:3d:74:60:c8:44:43:b3:58:4a:79:96:8f:11:ae:f8:0d:db:
1e:98:3b:22:12:7a:e9:aa:6b:40:4f:d0:91:0d:e0:0c:d5:18:
b7:fa:31:af:76:f3:82:89:8f:f2:5f:87:15:c2:b7:f9:08:5e:
f2:3f:f8:8e:fd:2e:1c:5a:4d:09:b7:78:cf:aa:71:ba:eb:ad:
8f:24:23:c5:ed:21:53:93:19:0e:af:eb:a3:0c:8f:4e:f0:50:
84:c1:e1:cc:8f:1e:8b:ab:77:e4:65:90:97:8e:d0:e2:5c:f8:
47:79:f4:72:3c:ac:b6:06:6b:ba:69:cc:17:46:25:1c:e6:18:
a5:ad:f2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:41 2025 by rpki-client