Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
File: HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft (raw, json)
Hash identifier: 94AQgMtYDi9l3Hs50ZzqCqGgHihsJ9psEdVDEcsCAiw=
Subject key identifier: A1:C3:16:AC:F8:5D:C3:FF:51:99:8F:3A:10:A6:D5:FB:D3:E4:C2:27
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 019A251D0462F71A7CC483576A4DFC402872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
Manifest number: 1243
Signing time: Mon 27 Oct 2025 10:00:49 +0000
Manifest this update: Mon 27 Oct 2025 10:00:49 +0000
Manifest next update: Tue 28 Oct 2025 10:00:49 +0000
Files and hashes: 1: HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl (hash: j6TlYjf5IbJjnWMxF5XffdIXwcPhQ2NBNjY2/XTkUC4=)
2: I2Um-BptLNwnopUXCKyaHVD-kHY.roa (hash: oaTE3K1HG85ox8sjIAMWSASmDZ12fR3RjImb2V3uqGk=)
3: V64dlNuRxsB4pj8KUNyI80O85tg.roa (hash: 2nVKvx4azH+bxWy0PRhnAkeITVbTxn6s3MeHunV69tk=)
4: edFVYVioPZTorF9uuac8djTSV64.roa (hash: Sqg7k+1F+ZM0n3f+ttHkMFPzbVfUdm2GmmTGOixgY9A=)
5: zldR7t2bu_wertKzQ3TJznNKjCE.roa (hash: Yg9qWkGrkBhdxY/Lab0rn600w8RlUBzjFYaLiDvl9fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1d:04:62:f7:1a:7c:c4:83:57:6a:4d:fc:40:28:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Oct 27 10:00:49 2025 GMT
Not After : Oct 28 10:00:49 2025 GMT
Subject: CN=a1c316acf85dc3ff51998f3a10a6d5fbd3e4c227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:12:44:16:68:45:2f:5c:ad:31:d7:4b:cc:
36:ac:2f:a5:8c:e3:b8:58:5e:92:c2:0e:e0:1d:d4:
84:69:81:2e:74:dd:11:a2:7d:9b:a1:48:80:cd:14:
be:4c:bb:2b:3b:b2:2c:f1:37:58:5f:4d:e3:bd:ff:
78:22:cb:81:95:cb:90:2f:ea:63:5e:66:b9:e1:d1:
60:c4:4e:bd:b6:f1:99:fb:3a:7d:a2:7c:8f:a1:37:
59:7f:b0:47:2e:5d:ad:1e:5b:76:4e:da:01:73:c5:
13:2e:7d:51:86:92:0b:7e:79:8f:e4:15:1f:6a:b7:
14:b8:f4:01:6c:b8:d3:3e:38:32:54:ae:93:ce:e7:
e5:8c:7c:bc:d1:15:e0:9c:38:e0:e4:ad:b5:73:4e:
2d:1d:5d:38:15:08:bb:f5:56:d0:51:cc:83:fc:77:
e7:4b:7b:b5:87:92:99:06:14:7e:ed:28:d4:00:09:
ec:24:47:53:bf:5b:17:85:3c:7e:a0:55:c5:8b:dd:
0e:65:2a:fe:3f:72:f2:c7:da:be:95:3b:6b:b4:45:
25:a4:65:4d:cf:8b:62:db:8a:ed:8e:5f:a2:9c:ac:
cb:0e:f7:c5:8f:40:4b:80:97:ed:6f:fb:58:1c:08:
02:43:7d:4f:bb:65:c4:88:7d:59:c2:8a:d0:9a:41:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C3:16:AC:F8:5D:C3:FF:51:99:8F:3A:10:A6:D5:FB:D3:E4:C2:27
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:91:69:ff:1f:99:0a:0f:03:14:86:05:5d:5d:cc:90:80:85:
d0:a7:13:f8:c3:97:8a:fb:fb:c5:f1:ba:95:b9:62:ba:8a:55:
d3:1d:19:52:f8:23:e2:38:4e:4e:87:42:be:91:7e:ae:48:7f:
35:c3:f2:b9:c6:b7:ec:65:2d:17:05:e9:1c:6f:db:fc:e9:40:
75:52:59:dd:28:3b:23:53:2c:05:3c:b8:80:26:77:cc:64:cb:
c7:a7:ec:cb:0c:d7:83:6a:7e:78:ca:dc:40:49:42:f2:61:8a:
f6:27:9e:6a:9a:1d:98:72:46:5e:50:d5:4f:50:d5:5f:12:cf:
e5:de:70:71:55:2e:01:18:90:0b:fa:32:5e:b6:dd:44:2c:69:
3f:5a:0f:83:9f:b8:32:37:00:af:97:01:f7:f2:67:7c:49:3a:
6c:dc:04:95:fe:06:83:6e:b7:7b:6b:5a:2d:26:e1:1d:61:b5:
89:5c:43:24:f1:7a:e8:e6:5c:a8:ab:d6:da:6e:c8:e8:c0:a9:
89:fe:21:fa:b0:1d:4d:8c:de:69:d9:e2:19:9d:6f:3c:71:c8:
f5:52:22:eb:c9:86:33:e5:68:5f:b6:e1:1d:52:de:21:bc:18:
91:11:e5:b3:00:16:0e:6c:4c:18:b8:ab:51:52:ba:fb:ab:bc:
58:fa:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:41:50 2025 by rpki-client