Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
File: HPMelYpvqF39UX6lohZ6NZzgJpE.mft (raw, json)
Hash identifier: iFnmCFvZh+f+QBddErCVnJdnVxDBF0uQySz6Y4Xw6pY=
Subject key identifier: 38:2E:4D:5B:C0:9B:FD:B2:44:7D:BC:C9:08:6C:21:2C:7F:F6:FF:3F
Authority key identifier: 1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
Certificate issuer: /CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Certificate serial: 019A28C27C26FC4D894C8CC3A51ED8D84618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 03:00:25 +0000
Manifest this update: Tue 28 Oct 2025 03:00:25 +0000
Manifest next update: Wed 29 Oct 2025 03:00:25 +0000
Files and hashes: 1: 1Az4dE0ZX7KAKDKykX60lhzHZkE.roa (hash: 8wvcW71BfAfRwFPQ94lUDGje+TfkTvnyVdfl40+6qJo=)
2: HPMelYpvqF39UX6lohZ6NZzgJpE.crl (hash: +Ly4QjZmj6sDoiG071ScH1Po77SzfWuFjwA48VdpYt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:7c:26:fc:4d:89:4c:8c:c3:a5:1e:d8:d8:46:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Validity
Not Before: Oct 28 03:00:25 2025 GMT
Not After : Oct 29 03:00:25 2025 GMT
Subject: CN=382e4d5bc09bfdb2447dbcc9086c212c7ff6ff3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:e2:ff:d1:d3:e6:8d:34:27:8e:2f:e1:a5:
cd:4b:ce:b8:86:d4:1e:4f:95:70:2b:b8:8e:d2:c5:
54:b4:a2:94:5f:1f:43:e7:11:6f:50:11:f6:49:0d:
08:19:a2:d6:e4:ab:06:6a:a9:0e:be:23:c9:df:30:
e7:50:d5:26:26:14:b5:5c:3e:df:f2:38:75:94:23:
3b:45:aa:05:77:78:e8:bd:96:80:57:da:fb:ac:8f:
09:a4:17:0d:79:35:a7:e6:0b:1e:fe:56:6f:2b:7c:
d2:29:db:27:c7:d1:ba:7d:79:21:40:22:34:8d:3e:
78:40:7e:73:48:d6:11:35:64:48:36:a9:31:a8:62:
9b:f1:97:e1:9a:90:0e:a2:f5:85:e2:c8:e5:bc:5e:
29:63:dc:c3:f7:cf:a7:d7:db:98:d7:97:41:fe:55:
74:0f:c0:ae:4e:75:0b:f6:ee:f0:25:bf:03:d2:5b:
db:35:ed:95:e3:90:43:27:9c:9b:45:c9:aa:3d:68:
4e:25:fe:d7:5f:63:c0:67:d2:69:28:d3:65:1e:94:
a0:16:7f:3b:34:45:d1:82:09:ef:ac:5b:14:04:aa:
7b:91:66:3f:c8:e5:30:9e:34:9a:64:55:4c:72:77:
13:4a:5a:39:27:33:82:57:b9:2e:0c:9c:5a:1a:3b:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2E:4D:5B:C0:9B:FD:B2:44:7D:BC:C9:08:6C:21:2C:7F:F6:FF:3F
X509v3 Authority Key Identifier:
keyid:1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c4:5d:fa:5f:06:61:e7:97:11:4d:31:05:0f:18:d9:a3:8b:
53:68:32:73:b5:f9:71:4f:71:92:be:04:e3:a1:14:1a:76:e3:
98:be:01:1d:87:bf:51:10:8a:c0:26:fe:aa:5f:c3:e8:9d:8d:
c4:f3:29:c1:a8:14:2a:c1:bc:ce:51:a8:56:63:07:72:94:f5:
a9:88:27:bb:01:53:e1:0b:46:75:7c:76:b8:b4:8a:c7:84:8c:
94:64:53:62:ff:8d:e6:fb:c4:cb:1a:89:f0:cf:13:4d:42:8a:
ee:35:6c:1a:e2:39:85:eb:d5:64:f6:18:fc:6d:0f:8b:b6:8f:
26:18:ac:8d:48:fd:bf:d0:09:ed:ac:5e:d3:09:ab:d3:99:48:
b1:6f:82:44:26:e1:ac:83:a2:5d:92:18:13:33:e6:da:9a:62:
ef:4e:5b:7a:bf:17:44:93:8c:0f:63:9c:d8:ad:e3:56:d1:0b:
e9:d9:28:95:b9:7f:fe:55:eb:10:1c:fa:10:eb:ff:8e:48:b3:
dd:40:6a:b0:5a:5c:3e:67:d8:3d:8c:d5:32:2e:a8:f2:52:ec:
08:ec:54:d2:95:43:f4:fb:4d:d1:4b:02:a4:88:50:bf:81:62:
d8:2f:c3:c2:82:e2:7d:0e:f2:57:e6:22:e5:dd:e1:81:9d:5a:
84:6b:ba:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:10:56 2025 by rpki-client