Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: Qj34TcxGOzvXvwWd8nkfgikVXwHeususxVMOFvaMqsE=
Subject key identifier: FC:BD:A2:15:EF:17:7B:C7:41:1D:F5:D7:4C:06:C0:BC:A1:32:24:B7
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 0199DEF3426D8FECB614F4F0F25CFA7E68A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 1224
Signing time: Mon 13 Oct 2025 19:01:48 +0000
Manifest this update: Mon 13 Oct 2025 19:01:48 +0000
Manifest next update: Tue 14 Oct 2025 19:01:48 +0000
Files and hashes: 1: DLIEmy-lWsyrr-sd36twYuEevio.roa (hash: aUcurTUu0ie7YyEr+ll+2DTq3WZheC8vTveKU2r56C8=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: dANnk6N6zhLgDdEyuUNZnkkIPYIij9TT/vTFrZQySEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 17:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:f3:42:6d:8f:ec:b6:14:f4:f0:f2:5c:fa:7e:68:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Oct 13 19:01:48 2025 GMT
Not After : Oct 14 19:01:48 2025 GMT
Subject: CN=fcbda215ef177bc7411df5d74c06c0bca13224b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:11:b7:46:40:c4:0d:74:54:fb:a0:69:ad:
4b:db:6f:d1:6f:7a:0c:b6:01:64:8a:e3:76:7c:b5:
21:c4:72:d7:3e:e9:78:f0:78:a8:0e:fc:80:1d:2c:
2f:5a:1b:d7:bf:55:94:94:23:76:1a:c3:25:48:d1:
e4:3f:33:95:49:5d:34:b7:67:13:fe:fa:fa:63:b9:
c0:85:23:ac:40:49:02:26:2d:e9:bf:3b:9a:af:a6:
89:fe:b3:e6:43:91:65:92:85:88:bd:13:aa:b7:ad:
23:3a:ed:1f:3b:07:3d:c3:78:31:32:49:a6:b5:f8:
f3:00:c5:47:8f:6c:0c:b7:df:d5:25:f7:17:d3:62:
ed:86:2f:06:0a:1c:38:42:de:79:3c:54:0c:cc:8d:
c7:27:2c:d7:94:30:25:c3:cf:61:5a:f5:5e:3e:73:
b8:ed:27:32:c1:69:91:69:8d:69:95:7e:43:f8:07:
46:9a:90:e5:4f:a1:13:c5:a1:41:83:24:8b:03:1a:
b7:98:92:7e:7a:12:2f:57:f7:5f:8c:53:46:c3:46:
4c:15:82:a4:90:ea:c2:36:a9:14:29:42:5f:dc:1c:
29:96:33:b3:85:a7:78:8f:80:09:5e:80:eb:fa:ca:
da:4c:97:cb:b3:cc:eb:a7:8b:8f:b2:04:cf:d4:fe:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BD:A2:15:EF:17:7B:C7:41:1D:F5:D7:4C:06:C0:BC:A1:32:24:B7
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2a:47:8a:6f:3f:83:c3:20:bb:1f:13:8c:8d:e8:39:df:7b:
2b:9d:5e:3a:33:2b:d9:63:fc:c5:be:52:71:5b:c0:8a:46:19:
29:18:ee:46:58:b0:e5:1c:72:64:10:04:df:32:78:b7:39:33:
32:c7:43:d3:69:15:f0:d8:30:46:e2:ed:9b:86:f8:33:b5:4b:
4b:49:e4:01:e2:3a:82:32:f3:0e:9e:7d:2f:a0:9c:4a:70:5f:
a2:ee:c0:2d:56:03:04:25:fe:7c:18:97:3d:61:d1:d4:d9:df:
ee:f6:2c:c0:89:c4:b4:f5:65:99:81:a6:4e:d2:94:10:51:64:
c9:f7:91:7c:e0:53:65:4b:37:62:a6:f4:38:08:a2:27:51:30:
40:08:c0:20:c6:b6:31:c5:bb:86:13:ac:51:82:7f:f2:af:2b:
b7:49:ba:3d:33:cd:d7:ac:18:04:91:3c:75:1d:4b:96:79:10:
8b:75:71:99:80:4b:22:75:a4:32:76:d2:69:61:b2:f9:27:bc:
9a:73:d0:5e:91:c0:03:0d:07:19:6f:8f:94:4a:38:6d:68:4b:
b5:eb:05:97:28:95:ea:01:ec:91:b3:7e:87:47:db:93:b7:d3:
af:af:6f:e4:ab:4f:b5:2a:94:c9:62:8c:1d:ae:23:18:1a:5a:
54:01:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 00:57:57 2025 by rpki-client