Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: HCuBcaCMKT4GvCSBuzEGYgiEm1R02/QBYjjpXRkcvfo=
Subject key identifier: AE:CC:68:0A:05:0D:25:98:E0:96:9D:33:99:2F:88:76:31:34:1C:2D
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 019A0E5DA8084FA9989FF8810E6877ABDEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 1378
Signing time: Thu 23 Oct 2025 00:00:10 +0000
Manifest this update: Thu 23 Oct 2025 00:00:10 +0000
Manifest next update: Fri 24 Oct 2025 00:00:10 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: 56L7gILQfMmfa57HjwN+/ZFfNepcA7/0MFiv6x1FdTU=)
2: vOY7PB5NDzFxhVih037o9jJ1bUc.roa (hash: 8OCsn1+9HWmViC4NQ7DEHa7bN4pK4rZb0B/Nsp5g6gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:5d:a8:08:4f:a9:98:9f:f8:81:0e:68:77:ab:de:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Oct 23 00:00:10 2025 GMT
Not After : Oct 24 00:00:10 2025 GMT
Subject: CN=aecc680a050d2598e0969d33992f887631341c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:23:47:c9:80:dd:c8:4b:4f:40:7c:93:20:a8:
13:a7:e5:8a:4e:0a:49:e7:5d:43:94:af:4d:61:1d:
ed:87:22:e9:1c:ee:3e:35:a5:fc:d6:ce:f5:ad:09:
d7:bc:f6:e5:f3:3c:70:13:64:60:38:fc:1d:b8:cb:
12:9f:6c:29:fd:57:db:7c:67:86:77:9a:f6:31:3e:
29:c3:a1:a5:64:a1:a8:a6:a3:4c:ab:13:1f:f6:4f:
95:0f:32:5f:b0:a5:15:2c:df:01:26:34:a4:19:01:
f2:38:3c:04:78:3c:f6:e9:78:6e:2f:b2:f2:3d:87:
52:75:02:b0:53:84:1d:40:26:6d:a0:b8:d5:1a:d9:
21:89:c8:8a:f6:4a:67:9c:18:07:3c:ac:0c:87:75:
5b:72:73:86:9e:7c:77:22:bc:e9:c5:af:50:f7:53:
b2:86:8a:07:89:4c:b2:f7:08:6c:38:39:59:9b:0a:
53:84:6b:4d:cf:d2:f9:fe:b4:2d:12:3b:d4:66:d1:
5a:2d:ed:25:6b:7d:4a:cd:e9:7a:27:ad:92:49:cf:
7b:97:1e:10:be:13:5c:d8:80:34:83:f8:12:55:bf:
02:33:85:16:af:73:6c:c6:5c:4f:82:11:46:63:e6:
69:91:74:15:c7:68:77:12:6a:57:1a:fd:8f:09:9c:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CC:68:0A:05:0D:25:98:E0:96:9D:33:99:2F:88:76:31:34:1C:2D
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bd:67:3b:f7:2d:bc:6a:9b:eb:7b:69:37:2d:a1:58:52:6b:
34:4a:a2:5c:fd:5c:de:00:1e:15:b5:a2:83:64:aa:2c:cd:68:
b2:5d:13:39:94:63:97:74:ef:ca:80:e3:e4:e0:23:47:67:c8:
c3:e9:2b:e4:d0:01:9d:75:b2:3b:09:44:c9:5c:90:c5:d6:0d:
5e:47:48:bd:63:79:48:f0:92:f2:78:d5:d6:02:9f:e9:19:3c:
9f:1f:e5:87:49:af:00:77:f4:52:38:68:77:e9:57:0c:22:8a:
b1:ec:6e:79:8e:4e:05:56:8e:1a:ab:31:22:fe:19:cc:ac:07:
11:fb:fe:35:4b:b4:70:3c:83:69:be:29:92:1a:25:77:67:de:
9e:4f:6c:96:f8:3b:cf:55:97:3a:72:8c:44:20:a1:0d:6d:5a:
a3:5d:90:b7:14:9f:ae:de:94:5d:0b:a4:da:58:f2:0f:52:c7:
a4:03:ef:ad:d9:24:c4:1b:66:83:85:3d:93:c8:c5:61:20:c4:
09:fd:81:20:cc:61:8c:e4:eb:21:df:df:25:45:86:65:41:e2:
fc:3d:fd:77:f0:54:c8:df:ab:97:a1:e3:ea:7d:2b:0d:e0:c8:
0d:d7:7a:f1:b7:0f:a2:bb:cb:ea:a0:db:cd:90:60:bf:a8:a3:
ed:bf:74:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 07:19:28 2025 by rpki-client