Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: VaYP6B6biXFksfrHkqMtuzaqciFCvoAhR8RvmVUArJo=
Subject key identifier: FD:99:13:35:2D:68:49:46:E2:D7:99:63:C8:CA:A3:19:E3:27:7C:71
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 019A18058F00B90E47B4D14D7086611EFC7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 155A
Signing time: Fri 24 Oct 2025 21:00:08 +0000
Manifest this update: Fri 24 Oct 2025 21:00:08 +0000
Manifest next update: Sat 25 Oct 2025 21:00:08 +0000
Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: XIW11ccNWRJBBjvEV8lcLSKnEIoCFK+hKRfFbkaa81Y=)
2: XQt8-9bW0FfWOISPdA8ZaGblVY4.roa (hash: fmg6bIRtzaFenySqXfJpj+XCISOy4FuP2PiXszAHZw4=)
3: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (hash: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 21:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:05:8f:00:b9:0e:47:b4:d1:4d:70:86:61:1e:fc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Oct 24 21:00:08 2025 GMT
Not After : Oct 25 21:00:08 2025 GMT
Subject: CN=fd9913352d684946e2d79963c8caa319e3277c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:2e:95:9a:32:a7:59:7b:a5:f8:ff:3f:ba:
22:ed:d4:3f:b6:7c:a3:4c:5d:15:27:1f:58:f4:ef:
3a:d2:fc:a1:8a:35:ea:33:72:10:ee:70:1b:90:11:
2a:0c:8d:14:af:80:bb:19:15:7b:8f:6a:58:a3:c4:
63:0d:45:fd:37:ea:e0:69:ab:73:74:72:ae:0e:49:
13:df:25:b7:28:8b:64:a6:44:81:2a:09:9c:3b:37:
68:68:7d:1e:d2:ce:b7:85:53:08:81:b3:c3:28:af:
7b:07:e5:96:1b:b0:b5:6f:b2:b2:13:22:fa:89:c0:
be:5b:46:e1:52:9f:60:6f:db:a9:f5:fc:c8:14:2a:
3f:c3:f4:06:c8:04:14:ba:52:f8:51:a6:35:38:20:
87:2d:ae:45:66:27:d6:a4:6f:2a:19:3c:0f:a6:32:
7c:48:fe:79:b3:56:0a:17:91:33:7d:77:a9:0f:bd:
19:00:ff:c0:47:4c:24:53:48:05:70:38:c7:cd:43:
4a:dd:5d:b0:a7:a1:54:99:14:26:c1:12:3e:9d:c7:
f0:b2:7f:e2:b2:ea:a6:b0:05:18:fd:28:34:d7:e9:
ec:9d:6e:5b:5a:ca:5a:34:61:d2:b6:f2:57:fa:f2:
e2:08:49:f3:60:d5:f0:f9:90:d9:87:83:db:be:57:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:99:13:35:2D:68:49:46:E2:D7:99:63:C8:CA:A3:19:E3:27:7C:71
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a3:ed:6d:da:ad:45:0a:df:26:de:e6:29:40:46:dd:da:6c:
c2:5b:45:68:2b:a7:89:96:4c:74:67:28:87:37:81:28:db:6d:
fc:39:19:fe:ea:1e:d2:76:7d:0b:d8:28:e9:95:ae:fc:57:5b:
83:58:d4:0e:e5:05:a9:cc:92:57:b4:b0:f5:d4:17:5f:ac:b9:
5c:81:97:94:83:f1:22:39:2d:63:e0:98:a6:c2:45:1a:5f:96:
de:a0:b4:a9:df:d3:27:fc:9d:6b:e1:bb:c8:31:90:18:11:ff:
35:41:c9:e3:2b:df:80:f4:33:56:5d:c0:bb:ba:9a:2e:22:c2:
94:0e:04:6f:fd:fb:88:21:e0:e2:d6:f3:a3:2d:72:b8:af:b6:
e9:e7:7c:6d:26:69:b9:25:6a:0d:1f:68:a7:1f:50:89:91:d3:
ca:17:17:20:c0:76:6a:bc:fb:08:93:07:c1:9d:cb:88:b0:af:
2f:4a:44:62:58:d2:0c:70:05:a7:c7:c7:d9:aa:f7:68:1f:82:
ef:63:fd:86:f5:e0:15:91:25:3e:05:85:84:a6:db:c7:4f:d0:
9c:a5:db:27:31:01:c8:b3:9b:1c:55:cd:a6:fe:f6:28:ed:55:
11:2b:13:de:eb:26:e8:ff:6d:72:de:e1:f0:fb:f1:a0:16:7c:
3d:53:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:15:28 2025 by rpki-client