Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
File: HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft (raw, json)
Hash identifier: UZsOrS18Ixag54ijrYz6C+tEdOwdap7SGfYu9WGCapc=
Subject key identifier: 8F:36:9B:47:E0:88:9F:F3:46:9C:D4:98:B1:48:26:80:2A:D9:A6:EE
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 0199C532FE332169F36231C23879D529727D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
Manifest number: 16CB
Signing time: Wed 08 Oct 2025 19:01:17 +0000
Manifest this update: Wed 08 Oct 2025 19:01:17 +0000
Manifest next update: Thu 09 Oct 2025 19:01:17 +0000
Files and hashes: 1: HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl (hash: 1y/IcL1Grn20mS338Mu8ghXC7IFUGRIhCt05TcJjF0I=)
2: JrMu8Fv-EJ0gYHcDKiU_A3eevzc.roa (hash: 6s6fSOnj2fawBTt5pakrIRbKDkLV0dgDjLyUP/ka7Zs=)
3: Yv3OBlam3VOOyrqHnKRvnmbQqTE.roa (hash: c4F3qlWubFRDD6IUHkMCGZaiuQoE5JPsyXqZuaXssXk=)
4: sZOw6ZmAV-eW5usk1RjXBfJwu3k.roa (hash: xYRWDuxjHSuoMKKmk6k/DnQlZPxerY0wU1cLVyqv9fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:32:fe:33:21:69:f3:62:31:c2:38:79:d5:29:72:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: Oct 8 19:01:17 2025 GMT
Not After : Oct 9 19:01:17 2025 GMT
Subject: CN=8f369b47e0889ff3469cd498b14826802ad9a6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:12:f0:32:73:e0:d5:41:d5:f9:aa:cc:80:
ef:1c:91:94:ff:ff:01:4a:0c:f9:28:22:85:3c:57:
f3:b9:82:07:64:ae:1b:13:c6:63:55:51:c8:fa:28:
77:d7:44:79:81:70:f3:77:76:de:ca:a9:c5:11:30:
24:ac:0e:5f:f7:8a:f1:60:79:ad:a9:6c:f6:45:ed:
10:22:cb:96:97:f2:3a:11:23:87:fa:23:37:ea:a3:
d2:09:5d:a2:f3:92:e2:36:5c:0a:ca:2d:60:4b:63:
ed:74:49:91:12:2d:71:1d:1b:dd:69:96:a9:a2:a2:
ed:8e:3a:7b:ac:1a:1f:4a:5a:8b:5f:3f:37:e5:d5:
c9:15:c8:b9:e0:a2:13:3e:bd:f3:5b:79:69:26:4f:
63:3a:9f:1c:3c:aa:25:29:a9:a4:a6:2b:90:97:93:
c8:ab:ba:2b:69:2d:c7:c9:d8:94:6f:8b:b3:94:bf:
45:4d:6d:e9:e7:5f:ea:05:e4:d6:6e:c6:8f:0c:fb:
2c:bc:5b:ae:87:d4:04:67:4c:85:bb:b3:af:32:eb:
21:f2:31:96:d2:ad:e6:f1:86:f1:e2:24:3d:c6:ca:
92:6a:f0:a2:52:fb:b2:90:90:5f:de:2b:b9:85:ed:
98:b2:7b:34:d1:3a:52:b5:4d:c9:88:c5:49:8e:6c:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:36:9B:47:E0:88:9F:F3:46:9C:D4:98:B1:48:26:80:2A:D9:A6:EE
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:40:1c:7f:4f:a4:8d:1d:59:14:05:08:9c:2c:1d:30:8f:51:
41:30:43:78:81:d8:0b:07:12:40:bf:c4:50:17:4e:37:5f:1e:
65:4d:1e:70:65:7b:4e:2b:0d:9b:00:f2:2b:b5:f1:cf:03:c8:
d6:f3:68:4c:42:ec:f6:a8:f9:46:4d:d0:07:c1:49:ac:bc:ba:
78:45:43:f4:54:18:d1:93:16:41:4a:ad:9a:a3:35:1c:06:1b:
d7:00:41:e2:94:85:c1:04:1c:a2:b1:01:de:80:d3:80:81:76:
a3:17:89:c6:bd:45:a3:42:27:02:6f:9d:3d:f8:6e:ae:88:d4:
f7:2b:e2:ad:a3:e6:60:12:85:70:e1:9d:0c:46:b6:d0:41:9f:
3b:c8:b9:9a:0d:84:91:ac:e8:85:6c:f5:eb:fd:d1:1e:9f:c0:
4a:95:e1:5c:5a:06:ff:ce:3d:f6:96:58:1f:ec:37:37:47:2f:
b9:d9:08:aa:c1:bc:21:12:5a:aa:e7:65:d7:15:99:8a:30:2b:
ff:28:e9:be:09:f6:68:e2:19:f9:62:52:ec:93:7f:fe:a9:a9:
bc:9d:9a:66:bb:36:a0:a5:a8:7f:42:ee:07:40:a2:fa:e5:a6:
85:fb:ce:e7:f0:ad:0b:e5:47:fc:86:fa:e3:c8:fb:7b:1a:f2:
85:e3:fd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:15:45 2025 by rpki-client