
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
File: HjXAaowG1d1k_nawkKPh4qSZbcg.mft (raw, json)
Hash identifier: bQtw63heYuSFVG2fql2m02l48jqWa9Saawxti9HAwng=
Subject key identifier: A4:61:0E:85:2D:7B:4A:18:23:E9:00:BE:EF:69:3E:42:FA:60:7F:55
Authority key identifier: 1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8
Certificate issuer: /CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
Certificate serial: 0199FB0F24323B96F7FB66F2F39260F92BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 06:01:37 +0000
Manifest this update: Sun 19 Oct 2025 06:01:37 +0000
Manifest next update: Mon 20 Oct 2025 06:01:37 +0000
Files and hashes: 1: HjXAaowG1d1k_nawkKPh4qSZbcg.crl (hash: 9UlaXKRxs3vvMHjhz8VBeWoRXNZrzFTAz3a36648Dmc=)
2: R12AgdneGd4IinauuD2IQCzaNdo.roa (hash: 0Vf4DfoprRpqIbS3viTk0elhBi8JnCMTTU8OHnzZBdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:24:32:3b:96:f7:fb:66:f2:f3:92:60:f9:2b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
Validity
Not Before: Oct 19 06:01:37 2025 GMT
Not After : Oct 20 06:01:37 2025 GMT
Subject: CN=a4610e852d7b4a1823e900beef693e42fa607f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f6:f8:e1:d1:d3:33:ea:ab:98:b3:15:b3:85:
b2:28:90:3d:7d:f3:a2:92:a5:34:8e:31:04:dd:4a:
20:81:00:10:3a:a2:1d:e3:9b:0c:15:51:20:c8:d3:
a5:1f:1f:40:5a:97:3b:e9:b6:bd:67:3f:71:26:2a:
47:a3:53:b9:9a:ed:a0:11:89:78:06:34:c2:4e:cf:
3c:8a:36:e7:fe:15:0b:02:3d:0a:5d:48:26:57:08:
ad:f8:d5:9c:01:a0:73:d6:e2:5f:2b:d1:66:f8:5c:
ed:db:3e:66:62:15:33:06:e2:a4:5d:58:87:02:b6:
96:fb:1e:28:8d:7e:37:be:03:ce:eb:96:0c:4b:23:
f5:9b:d4:db:87:12:20:bd:36:17:6c:84:bb:a5:47:
4b:0d:6b:a0:02:5a:a7:5d:67:fd:5d:4b:4a:1f:f8:
25:7c:3d:56:c7:be:2b:a0:c7:35:1f:d2:6b:32:5f:
9b:ce:45:68:33:7c:aa:63:b5:97:3d:91:77:92:b7:
a1:d0:9a:13:47:d0:47:9e:b9:86:26:6e:32:d2:f6:
36:bc:11:4b:57:0a:9c:5a:4c:cb:9b:d5:54:e2:e2:
64:2a:02:86:7e:bc:02:8c:a8:42:3b:82:ad:81:0b:
6a:05:5d:9e:65:dd:41:35:f1:53:4c:67:82:19:76:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:0E:85:2D:7B:4A:18:23:E9:00:BE:EF:69:3E:42:FA:60:7F:55
X509v3 Authority Key Identifier:
keyid:1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e3:c7:d6:c2:a9:db:29:e7:cb:2f:c0:47:70:ac:be:8f:26:
72:72:8f:7a:d0:a9:b2:44:59:3e:d0:40:92:be:b3:0b:ed:4a:
bd:cf:d5:c7:10:b9:a7:a6:39:8f:b8:c6:73:aa:ae:a4:c1:92:
f5:74:ed:2d:4d:9b:53:a9:ef:a1:e4:e9:5c:2f:0a:d0:c9:0f:
51:2f:a2:53:98:e0:7f:bd:7d:49:20:ef:3c:c5:5a:4c:ff:87:
44:17:09:8e:73:ae:b6:04:4b:ae:eb:b2:02:ee:e9:c3:80:74:
cf:7c:c1:99:31:b5:cc:87:39:48:07:0b:7e:f7:fa:32:c3:65:
0d:0c:05:84:3e:8f:c7:ab:7f:f5:c1:01:b0:32:4e:b6:a5:ac:
a1:37:25:96:37:97:e1:52:89:74:ca:17:33:4c:ad:43:6b:91:
42:68:3f:44:94:62:76:18:0c:55:03:4e:54:08:76:a5:24:73:
5b:71:fb:39:40:2d:89:6b:b9:a9:36:f6:0f:ab:2d:52:8d:96:
20:98:6f:db:83:47:d1:3e:dd:f9:e1:63:24:34:68:b5:d7:d6:
24:72:d6:8a:ab:64:ec:7d:f4:8e:fd:33:a2:74:ac:1f:b7:43:
ef:32:e8:02:b3:d7:0a:c5:c6:e1:b6:7b:a5:87:ab:26:71:ac:
07:f2:02:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:21 2025 by rpki-client