Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier: eu7CSo3HvMs6TWtGM9ntHeOyboEABSU7bdMHjBccVXc=
Subject key identifier: B3:A5:21:E5:8B:0D:00:68:4E:43:C0:F1:BE:A5:16:C2:FF:F9:63:76
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 0199C2D6AC1A26318A1C49349777486668B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number: 99
Signing time: Wed 08 Oct 2025 08:01:12 +0000
Manifest this update: Wed 08 Oct 2025 08:01:12 +0000
Manifest next update: Thu 09 Oct 2025 08:01:12 +0000
Files and hashes: 1: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: SjsNvuv2u4k3u/nIf+Z/xohwqcxZ7R2ZRYu1MRgAEnY=)
2: oVPiQMn-UegBx2J-TQORMG9g6K0.roa (hash: 4SSzKPc2mgWhQk6lB1aOXRB/10H0pRazL5v2Txj6Wns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:d6:ac:1a:26:31:8a:1c:49:34:97:77:48:66:68:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Oct 8 08:01:12 2025 GMT
Not After : Oct 9 08:01:12 2025 GMT
Subject: CN=b3a521e58b0d00684e43c0f1bea516c2fff96376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:8a:ea:92:f2:c3:a9:73:5f:5f:41:9b:03:
d3:a7:ba:00:9e:6e:b7:ca:48:f6:42:2b:e5:00:15:
74:f5:e4:11:2f:d0:ea:5c:a6:35:62:84:8c:61:a1:
6e:e6:bb:3c:f3:5d:54:b0:1e:ae:37:18:4c:03:8c:
ca:75:12:e6:63:52:fd:14:f1:73:01:ea:c4:1f:96:
3d:ff:99:fb:f9:d9:e1:73:df:03:27:e7:13:e1:38:
41:06:0e:8a:46:0e:b6:68:78:3e:16:b0:a0:14:95:
21:66:1c:db:75:73:b0:08:d3:b8:ca:1b:c6:4c:0f:
b3:19:25:13:e4:af:f9:74:84:f1:85:45:91:76:e4:
47:b9:8c:c2:20:d0:79:50:72:1a:78:5e:70:c1:c0:
ba:3b:9f:d4:b3:32:d2:9a:37:de:22:f6:37:d2:a5:
bb:81:7f:05:f1:cd:67:0b:5e:51:ba:51:5d:38:e7:
84:45:ec:af:f9:55:02:b4:57:77:a6:51:ee:36:db:
cd:6b:a3:0f:6c:bd:a5:87:ef:79:ad:22:78:cd:38:
27:f0:f1:1a:60:7e:f5:ca:ba:04:91:b2:3a:36:df:
05:38:25:63:ab:5a:ba:ca:48:6b:d7:00:a4:c1:c4:
cf:51:e8:cc:9e:94:ad:fd:21:78:d1:ec:4f:a8:77:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A5:21:E5:8B:0D:00:68:4E:43:C0:F1:BE:A5:16:C2:FF:F9:63:76
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:11:0c:41:fb:2b:0f:23:8c:a5:e3:8c:9b:5c:d9:f7:6d:df:
88:9d:e8:fe:d5:9f:88:9d:04:83:9c:3f:60:e1:20:4a:38:d4:
3a:cf:36:c4:fb:91:cd:59:b6:4e:d9:a3:36:c4:74:dd:ec:f4:
7a:01:b6:55:32:b4:b2:6e:72:18:86:4a:f8:57:82:de:81:68:
dd:96:6d:a3:b6:a1:19:68:6e:88:68:0e:42:1b:0d:50:ec:33:
70:93:ab:b8:8f:e9:4c:db:e0:76:63:21:9c:40:0c:6a:b6:73:
14:3f:7d:82:47:e4:c3:ac:a9:15:43:9d:4b:31:ff:fb:f9:fa:
53:43:2d:40:f1:c7:df:4d:43:21:3f:e9:6d:e7:2c:b8:a4:5e:
0b:94:72:b4:d1:7b:47:bc:f6:41:ad:a6:ca:c8:0d:1e:2e:e6:
3f:4d:32:c0:80:3e:05:18:a1:d4:c4:5f:f8:3c:6b:65:6d:42:
d6:b9:ee:fb:eb:d0:38:7a:b7:6d:ec:dc:85:0f:b9:76:98:1f:
13:a3:82:28:40:c0:70:e6:20:d3:b0:4c:d1:90:f2:c2:f6:66:
50:c2:74:3f:42:73:62:99:76:5c:2f:8a:f7:10:0d:6d:59:2b:
e7:a8:d0:48:53:e4:bf:72:5d:a1:dc:12:bb:42:78:b8:6a:e8:
3a:10:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:47:23 2025 by rpki-client