Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
File: HpKJoBWvREH4-d9MjFXpiykogc8.mft (raw, json)
Hash identifier: 7VoDVIbY0v2mIqXEdNkwRUehINKX3nUQLPi2toVv2qg=
Subject key identifier: 53:35:88:6E:BF:AA:C9:9C:27:E6:61:7E:B1:D8:4D:B7:AB:05:F6:87
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Certificate issuer: /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial: 0199FBEBD0075FDC33C334FEF2A3DDFFD1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: HpKJoBWvREH4-d9MjFXpiykogc8.crl (hash: ljE9APcIf/6IJZyh5xycQ2g6r9iEjWZwwE5Nunp9FJk=)
2: NgTdB5AEPD4DAHaTIZRq0754ZYU.roa (hash: X0ljVmj2cD5On812FnYT4pXdeEcEXod3j6IYZXkhhSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d0:07:5f:dc:33:c3:34:fe:f2:a3:dd:ff:d1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=5335886ebfaac99c27e6617eb1d84db7ab05f687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ac:a4:3c:5c:fc:3b:cf:07:cb:f6:24:f2:3d:
66:53:f8:24:9c:49:98:ef:70:95:5c:6e:3c:90:f9:
b6:68:04:36:59:42:5c:a1:03:25:95:17:25:e9:a8:
38:b9:56:92:83:ab:34:f2:14:3b:9c:7c:05:a0:a2:
8d:f4:56:e8:a4:a9:49:ca:04:25:0e:4e:25:03:a4:
fe:ac:c6:fe:d1:97:35:25:79:17:a7:23:3b:44:51:
92:2b:ca:06:4b:eb:2d:a8:34:79:fe:62:62:49:12:
f9:07:79:ad:b9:82:11:d0:0b:6e:62:1a:8d:f1:60:
7d:14:4c:95:74:3c:a2:51:71:e1:8a:b7:07:6b:e8:
95:7e:5e:29:d2:b4:23:59:17:b1:f1:27:b1:44:26:
86:a4:61:df:f9:cd:06:90:4b:58:97:01:7a:c7:74:
7f:36:72:1c:f7:b7:27:06:19:a2:e5:c9:92:36:a3:
95:c0:57:0c:a9:1c:23:c7:c7:b1:0f:ce:c4:6e:da:
45:b0:94:84:ce:85:5f:91:05:16:f0:d3:90:02:4d:
ec:85:b5:67:b5:5b:68:9f:bd:1f:a2:1d:b4:12:6a:
2c:8e:d7:34:e3:e5:64:b4:c7:e7:f5:64:0e:85:31:
fc:c4:3a:c8:89:71:bb:32:2c:3c:ed:7c:07:53:4e:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:35:88:6E:BF:AA:C9:9C:27:E6:61:7E:B1:D8:4D:B7:AB:05:F6:87
X509v3 Authority Key Identifier:
keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:18:b3:91:3c:76:61:5a:d4:25:82:1f:a9:8c:a7:9c:e8:9d:
83:3b:27:c7:52:6c:88:bb:48:50:d2:e4:c7:d1:59:ad:a8:d4:
91:7c:af:c3:fd:83:03:a2:f1:02:98:07:84:08:cf:ce:dd:cc:
de:48:f0:af:a8:64:53:02:c7:59:e1:df:7b:5c:3c:40:7f:e3:
47:70:f7:0f:bc:f8:d7:19:88:4f:9c:a6:0f:32:3c:e4:df:82:
46:fa:db:ec:c3:ac:c9:de:69:59:9e:3a:d3:9c:6d:9e:0c:69:
e2:47:03:48:8f:ea:00:41:35:84:ff:8f:26:27:d6:97:24:24:
89:53:8c:b3:86:2c:33:17:73:18:c9:d5:b9:b5:51:45:86:0c:
0b:93:54:67:b4:a7:aa:d8:67:3d:bd:e3:4c:68:aa:b1:21:71:
28:00:2a:db:70:f3:fe:0f:04:b3:3b:11:e5:57:08:25:97:7f:
85:22:cf:bf:92:41:74:3d:15:31:26:06:29:f0:e4:db:eb:4d:
a2:b4:84:ab:33:16:9c:13:36:09:ca:03:7f:90:83:63:f4:7d:
44:1b:31:80:a5:d8:87:99:f8:cd:c9:7b:21:9e:f5:03:9b:c4:
70:ab:dc:b5:f1:fb:cf:e5:ee:ca:a4:fd:ff:0a:2b:fb:fc:14:
23:a7:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:54 2025 by rpki-client