Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: vabt2L65//VFzuRSLgssd3olLtbPnIggY7BsqlwZUB8=
Subject key identifier: 5A:AD:41:A8:00:74:55:44:2F:C0:AE:1A:C3:83:8B:93:ED:81:06:3E
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 019A2E8DC2E888B57F3DCFDA40B672EDFE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 035D
Signing time: Wed 29 Oct 2025 06:00:33 +0000
Manifest this update: Wed 29 Oct 2025 06:00:33 +0000
Manifest next update: Thu 30 Oct 2025 06:00:33 +0000
Files and hashes: 1: 0tHvPtdsZRMSdECFrWywHEFzjJY.roa (hash: wDxCLikDUetb91mXxU1f33qmz0PqiuAAUobRz5+KIoE=)
2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: YiRd6et70rrm5o4TgtHySP4fhia97+/ilZuCDQ335QA=)
3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:8d:c2:e8:88:b5:7f:3d:cf:da:40:b6:72:ed:fe:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Oct 29 06:00:33 2025 GMT
Not After : Oct 30 06:00:33 2025 GMT
Subject: CN=5aad41a8007455442fc0ae1ac3838b93ed81063e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:64:1d:f8:dd:98:56:d1:14:0b:b0:3b:a5:
87:ee:eb:ff:a0:66:0b:cc:b8:5a:38:8a:cf:cd:dc:
5c:31:60:39:98:1f:bf:69:54:aa:cd:4f:e0:ec:7f:
d2:92:30:c4:89:87:50:41:ac:00:7b:4f:ff:5b:e5:
35:01:15:2e:49:3e:23:f9:38:49:28:fd:18:d0:e2:
c5:76:2b:59:b0:d8:b9:e3:5c:6f:80:06:f0:25:07:
27:10:6d:74:ab:1d:6e:02:98:36:03:8b:e3:9f:37:
ea:19:e2:30:3d:65:92:fd:79:a3:87:df:7e:ce:ab:
bb:c1:5e:ca:80:1c:1b:3b:66:ad:89:aa:03:e6:17:
a6:b0:e3:06:29:bc:aa:8a:fc:04:2b:a3:d4:aa:59:
31:64:bb:14:f8:c1:0f:6c:c6:30:3b:b4:83:0f:02:
ee:f7:62:20:ed:2b:7c:03:10:65:27:4a:32:46:a7:
21:5f:5b:2b:f2:24:f1:84:08:6b:43:8e:ba:44:dc:
dd:44:e4:0a:f7:28:f9:b9:a4:70:09:7b:6e:71:f0:
3f:a6:22:f1:bf:a1:21:93:97:c8:ec:ba:05:62:ca:
a9:2a:03:ed:31:77:3b:4b:3f:6d:df:7c:55:a0:28:
b6:cb:3a:47:3c:c2:71:f3:f0:a0:ab:93:e2:21:9c:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:41:A8:00:74:55:44:2F:C0:AE:1A:C3:83:8B:93:ED:81:06:3E
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a7:1d:47:86:bc:43:a2:5d:05:58:7a:1c:99:dc:4a:9a:53:
91:8a:95:e9:81:d8:f0:c7:54:37:97:a2:87:b7:46:00:aa:56:
ac:2f:32:ea:9b:26:d9:ca:9e:8b:4d:1a:51:7b:53:a2:b1:54:
1c:66:31:a4:f5:14:a4:04:37:bc:0a:58:aa:5f:fd:f0:c5:20:
c6:84:8c:7a:c7:e6:76:fa:e3:c3:ab:99:00:0b:02:ae:ca:a6:
aa:96:12:7c:04:1d:d5:e4:1d:f4:b0:0d:2f:b0:1a:ed:f0:d0:
21:71:a5:a9:94:7c:15:ea:a9:ac:8f:f9:c2:2b:b4:39:0a:75:
c0:89:a5:24:99:5f:b3:f2:8d:15:26:1e:6c:e4:c5:14:69:86:
5e:f2:71:42:72:98:4e:e0:e1:a1:67:05:05:06:b9:a5:0a:12:
a5:bb:14:0d:de:5f:ab:74:23:82:5e:63:2c:0a:e7:b7:a3:23:
3d:11:76:29:d3:a5:4f:9f:5f:0f:1a:c0:c2:45:4e:8a:0b:2c:
16:25:fd:d2:27:a6:74:2c:6e:d2:26:de:19:56:14:36:5a:b5:
00:bb:57:62:cf:62:02:99:61:56:c1:67:19:93:6b:b6:d5:80:
bb:cf:a4:21:21:14:11:34:17:96:8a:b7:3e:96:3f:42:07:5b:
ae:f2:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 12:29:28 2025 by rpki-client