Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
File: HMRR-9-qEu_DUqWbAHsKiCO45l0.mft (raw, json)
Hash identifier: Fpb2ITFLtSBaNHtvpu3CnWNpUgZp9AibBt1wg5PnlO8=
Subject key identifier: F3:2E:E2:45:2E:1F:CA:33:CC:B8:8B:DD:C2:96:16:5F:0A:58:25:98
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Certificate issuer: /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial: 019A2D0D226940CD3CDC94562D475BB46F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 23:00:26 +0000
Manifest this update: Tue 28 Oct 2025 23:00:26 +0000
Manifest next update: Wed 29 Oct 2025 23:00:26 +0000
Files and hashes: 1: BM8cXCST8GFLqm-S7JFg89XPJRI.roa (hash: y5HCuHLCc9q2A55wIAeiNZNpqVBjYSYL4TD8A7x1320=)
2: HMRR-9-qEu_DUqWbAHsKiCO45l0.crl (hash: JWaWMI/x4FzGwIEI5uBs1oygrOMlxti6MjLhRQZp+SU=)
3: cgvwzEGEwvIm6BLp57QUUWZnOgc.roa (hash: vCJFSFQ95kdVcUfRmZQUyshrPebtrGGD4KfGIuEo6nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:0d:22:69:40:cd:3c:dc:94:56:2d:47:5b:b4:6f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Validity
Not Before: Oct 28 23:00:26 2025 GMT
Not After : Oct 29 23:00:26 2025 GMT
Subject: CN=f32ee2452e1fca33ccb88bddc296165f0a582598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:a8:3e:76:08:01:d5:80:20:02:29:78:84:
74:3e:d7:5d:1e:d3:59:32:83:de:d8:2b:cc:83:a8:
5c:d5:f8:f4:73:28:86:fa:d0:94:ba:31:cb:5f:3a:
25:f9:87:7b:f7:72:24:1d:8a:24:dd:56:db:53:1c:
10:48:64:b7:5e:28:a6:e4:b9:49:31:ed:05:14:4a:
06:c1:61:a0:b5:3c:de:6e:b2:66:c1:be:6c:2d:9e:
7f:a8:d2:9d:be:30:34:2b:d4:24:43:49:ba:7a:02:
bf:9f:67:0c:3d:c2:04:fa:83:ba:62:71:7b:2a:87:
bf:14:f5:8d:96:fe:1b:b0:e4:f2:ac:72:1f:40:2b:
8d:22:90:a8:bf:15:08:e8:c3:df:5d:bc:c9:33:21:
e2:25:5e:92:dc:e5:ca:55:b2:ef:f3:bd:80:52:cd:
83:f8:ea:77:31:55:19:d7:95:85:84:8c:a8:fb:26:
49:12:19:a1:29:90:25:d6:73:2c:86:5d:0e:f1:b8:
cc:ca:fc:64:aa:48:2a:5f:56:e6:30:76:1f:69:83:
df:69:24:b3:79:09:a5:39:f4:ab:0a:45:96:c5:d2:
7f:2f:c8:1f:51:51:de:f1:8b:df:a4:4f:da:9c:fa:
b3:26:4a:36:3e:af:14:12:cf:6c:06:82:c2:43:ca:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2E:E2:45:2E:1F:CA:33:CC:B8:8B:DD:C2:96:16:5F:0A:58:25:98
X509v3 Authority Key Identifier:
keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d0:a8:5c:47:dd:5c:87:c9:fd:ea:4c:66:cc:4e:f1:6e:c0:
08:00:f6:d7:a6:4b:56:ae:42:97:b0:29:2e:6f:2a:2f:f6:32:
ac:03:4e:0d:b9:72:09:9c:a2:66:12:d1:47:74:47:82:b8:aa:
39:6f:06:f1:3d:38:1a:60:1e:d3:e8:47:4c:d0:b6:76:ac:86:
a7:c0:72:87:74:10:c1:5a:31:67:85:8b:ed:c7:de:5b:9a:34:
97:46:74:de:03:e8:eb:88:31:1e:42:e8:2b:f8:1b:43:d1:b7:
3b:08:75:50:36:2a:07:32:70:5a:84:4d:aa:1c:95:33:e7:96:
38:93:fb:a6:47:8c:b8:3b:9a:42:34:8c:5d:0b:e1:93:aa:76:
85:5e:52:e2:c1:1b:84:11:cc:f7:0b:85:7c:5e:0e:82:32:bd:
17:d8:14:3e:c0:df:0c:c6:59:3d:6c:17:4f:a9:13:af:66:47:
a1:55:d7:11:6a:b6:1a:24:30:bb:f5:ec:57:0a:48:7e:57:c9:
00:73:ab:51:e8:10:ca:58:c4:ce:ea:77:88:90:eb:fd:89:46:
b4:ec:66:e4:c6:18:79:24:7b:35:1a:10:66:41:41:c3:95:7c:
cd:83:86:4d:31:a9:be:93:2b:07:ec:50:3d:74:50:a0:86:79:
f6:1d:8a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 01:28:39 2025 by rpki-client