
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
File: Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json)
Hash identifier: R5KWuSzGIaB8M0VfBa4pbRraFl6aIxXMVpum5NB2fjQ=
Subject key identifier: E4:FE:DF:24:82:1D:FE:4E:CC:E5:53:C0:FF:B3:B4:34:49:1F:B0:2A
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial: 019A232DEE604FEA5B5C414F07D0EC8B78E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
Manifest number: 0A8E
Signing time: Mon 27 Oct 2025 01:00:03 +0000
Manifest this update: Mon 27 Oct 2025 01:00:03 +0000
Manifest next update: Tue 28 Oct 2025 01:00:03 +0000
Files and hashes: 1: 1qUuzp1BSb73YBxt2G1-L71RBo0.roa (hash: RsoVHiN4hMhxH5nMDIM8Pr6yKP0XCEu41kBjnTbcTNQ=)
2: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: kSetPXxHVPvpVh5pQ8bpbSomxSwIqVzdUIq+fmoMn9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2d:ee:60:4f:ea:5b:5c:41:4f:07:d0:ec:8b:78:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Validity
Not Before: Oct 27 01:00:03 2025 GMT
Not After : Oct 28 01:00:03 2025 GMT
Subject: CN=e4fedf24821dfe4ecce553c0ffb3b434491fb02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:19:35:91:49:6a:6d:ce:93:41:62:e2:7e:
1b:e6:83:65:6e:e5:f5:17:6f:0c:b8:b5:a3:36:dc:
0a:6d:d8:e2:0e:fa:90:2f:d9:36:b8:ab:1e:bd:72:
d8:65:c8:c4:bc:0d:c7:8e:bc:98:3f:a5:01:1d:c2:
d1:60:43:1e:57:7d:c1:31:01:dc:b8:b7:f6:44:44:
cd:66:c5:db:10:e8:cd:8e:4e:0e:a0:8e:f0:cd:13:
db:b8:04:26:12:23:f4:bd:6b:71:34:20:07:4e:59:
87:2c:c4:c2:90:c7:e4:f5:2a:fd:94:fd:4b:28:7b:
60:f7:dd:cd:89:0d:0a:5f:94:5a:d1:24:77:37:ab:
7b:9d:60:9c:36:78:e5:bc:74:24:cf:f8:e2:f5:de:
81:49:e8:3a:9a:3a:1d:16:25:fb:d1:c8:3f:36:12:
44:73:8c:f4:35:24:74:33:c2:00:0a:00:88:31:d0:
12:ba:98:be:2f:6b:11:6f:80:e8:3c:26:d8:89:f3:
a9:81:ab:a7:d8:49:ea:94:e5:71:63:19:56:ba:a0:
fe:f3:9b:aa:21:46:5b:43:5c:ba:14:7e:88:3d:de:
b3:a9:1c:60:30:93:9c:bc:b9:3a:3c:ba:b2:67:81:
e5:52:b3:77:03:40:6a:e2:09:6b:8c:c9:56:8f:3b:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FE:DF:24:82:1D:FE:4E:CC:E5:53:C0:FF:B3:B4:34:49:1F:B0:2A
X509v3 Authority Key Identifier:
keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3d:c9:f4:11:92:13:d7:c0:51:de:d2:b3:49:cc:db:e2:f2:
68:34:3e:4b:01:c0:ee:01:3b:2d:c5:ed:01:99:bd:d3:2e:f7:
d0:0b:9a:ca:e9:ba:40:9a:e3:73:d7:c3:40:81:68:34:15:56:
a1:bf:2d:b2:9c:39:86:59:9d:1a:e8:ff:6a:5e:0e:49:ff:64:
59:f7:fa:64:c3:db:40:8d:bb:e0:25:10:84:2d:ff:17:c9:50:
68:0e:f2:00:2c:91:dc:e5:ed:45:6e:59:4c:ff:8c:22:2d:bd:
46:50:3a:3b:ae:e3:97:80:5e:3b:ff:f1:3a:33:ef:67:76:14:
4a:36:52:a7:3d:95:1a:1f:83:59:e5:fa:0f:0d:4b:df:62:cc:
dd:46:aa:b9:6d:97:25:32:cb:2c:45:b9:51:64:6a:aa:3a:ab:
1f:f8:9c:bd:f1:b9:38:f8:99:f3:45:d3:7d:f1:63:28:2b:ee:
fd:66:b9:60:04:5f:d4:37:93:43:cc:09:cc:7d:ab:bc:e2:a9:
b4:e0:0d:7a:88:ed:88:ce:66:a2:2d:7c:4a:40:1a:79:b3:a6:
bd:1a:71:9d:79:03:77:76:c6:33:ae:88:35:7b:33:b1:14:04:
bb:f1:63:7f:83:b0:e8:45:9e:a4:79:ae:8d:57:31:ae:5a:d9:
66:0a:0f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 05:01:58 2025 by rpki-client