Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
File: hugNGBwlPRTaHgupwdVmb1Ym1YE.mft (raw, json)
Hash identifier: yo+zmmA/MT19mm5e5R6XUlJaUB78XaGX8zJ9u1s2ccw=
Subject key identifier: FC:1B:6D:A1:7D:20:E8:2C:0A:6F:8A:DC:D9:7B:CA:CC:5A:E9:BB:E1
Authority key identifier: 86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
Certificate issuer: /CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Certificate serial: 0199FC8F9769B9B95EA2B9A02E821879EE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
Manifest number: 0107
Signing time: Sun 19 Oct 2025 13:01:32 +0000
Manifest this update: Sun 19 Oct 2025 13:01:32 +0000
Manifest next update: Mon 20 Oct 2025 13:01:32 +0000
Files and hashes: 1: GduTVoXL90rcY5IbBMohmd6Di4U.roa (hash: FpxhDiPtRQpdrB9mwbp5ACWnV465MFksntDsy9t3DCM=)
2: hugNGBwlPRTaHgupwdVmb1Ym1YE.crl (hash: 2fWnLPP/w4OlLZif+Gwd5l0ACDDbh0xksBvV77GmhfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:97:69:b9:b9:5e:a2:b9:a0:2e:82:18:79:ee:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Validity
Not Before: Oct 19 13:01:32 2025 GMT
Not After : Oct 20 13:01:32 2025 GMT
Subject: CN=fc1b6da17d20e82c0a6f8adcd97bcacc5ae9bbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:31:43:48:ac:fc:cf:b9:ec:93:a5:be:59:
c0:63:f6:5d:ce:3a:35:05:f2:01:2a:28:c9:82:11:
bf:cf:69:6f:22:91:b5:38:0a:00:df:d7:4e:51:a5:
6f:a7:1a:9f:3d:3b:e4:99:dc:9e:95:fa:bf:be:90:
51:f5:d7:3d:85:22:a6:53:2c:e8:e7:6a:70:50:65:
98:7a:58:d8:4b:82:16:2d:73:a8:c4:b2:a5:4a:07:
b0:c3:46:09:e5:b1:4b:38:b1:59:f0:f7:12:a0:0a:
54:5b:ae:c8:f0:f9:6f:d4:9e:c9:86:e3:54:e9:a8:
1c:1b:67:fc:2d:ef:f1:3c:0e:de:60:43:43:d5:ec:
cc:be:32:94:98:76:0f:94:13:11:b5:cc:d8:75:14:
78:16:c4:47:4b:b6:4c:ab:30:ee:c2:5c:cc:6c:f2:
64:33:96:b1:39:5a:ed:8c:5c:fa:60:d0:eb:d0:0e:
cf:97:28:43:aa:06:a8:0c:09:99:ce:8d:da:d7:8b:
bb:78:d3:1f:08:b1:c8:5b:a8:4a:c5:62:99:d8:99:
51:f4:ce:c3:9e:99:30:e4:2d:24:0b:a9:c5:eb:71:
cc:82:b6:dd:8c:69:8a:26:83:16:a5:36:74:60:3e:
60:9d:b7:6c:a6:94:46:b8:b7:7d:f4:bc:9f:d6:77:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1B:6D:A1:7D:20:E8:2C:0A:6F:8A:DC:D9:7B:CA:CC:5A:E9:BB:E1
X509v3 Authority Key Identifier:
keyid:86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:29:7a:6f:18:75:26:e9:37:01:7a:79:3d:78:04:17:f3:cf:
2d:55:32:6c:81:3c:de:ce:de:80:fc:90:26:68:69:b7:ca:37:
c6:75:97:d4:2a:2d:13:4d:f4:2b:31:24:86:1c:1e:cf:d5:32:
66:00:a8:2d:a8:4d:c7:53:11:55:44:c8:9e:d4:00:e0:fc:9e:
1b:34:9c:34:21:2a:1a:07:1b:0a:d5:d6:21:da:b2:38:ce:71:
4b:87:27:8d:33:1d:29:73:e0:7f:a2:35:35:2f:a6:df:51:be:
e6:60:c0:54:fe:b0:ec:75:46:ba:28:d9:9d:4f:1b:cd:85:00:
ea:28:f2:6c:d0:d9:47:7d:15:51:98:bb:ae:56:67:60:e2:e1:
2f:a6:26:bb:3f:3a:5b:35:1d:f0:f9:2a:eb:a1:c0:aa:ab:24:
72:47:18:8f:46:1e:26:14:d4:f5:2f:3d:f0:40:ef:df:44:10:
72:76:4a:b6:c5:38:e4:ef:d5:47:66:5a:ec:d7:dc:1d:ad:a9:
4b:9c:e1:40:6c:fb:8f:6e:93:1f:b6:8c:8e:ba:41:13:22:5d:
1c:29:61:56:cd:80:17:f5:cf:84:73:f7:fa:bd:f5:f3:7c:f2:
44:d5:e7:a4:08:2e:54:4b:05:60:68:42:0a:8a:0b:1d:50:da:
6e:f4:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:34 2025 by rpki-client