Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: vZsvIL1HkIOG4mvWk1EeS1r2AaDvvwSyJbsG3MuPwRs=
Subject key identifier: 40:9A:9D:39:02:4F:F8:E9:0B:3E:DC:9C:56:77:96:E6:56:AB:44:9D
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 019A28F95417E51F5C4BE80E67352E78D266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 03CD
Signing time: Tue 28 Oct 2025 04:00:19 +0000
Manifest this update: Tue 28 Oct 2025 04:00:19 +0000
Manifest next update: Wed 29 Oct 2025 04:00:19 +0000
Files and hashes: 1: 8-kkwcK7J3DxZVf5MGzOJYHQ7BI.roa (hash: rhq0p1ekXajroUDi/6gbWVszGGw1Hl0Cw7VvrAiAjNE=)
2: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: DHe+F2zJdXfLEl40WiysUBSarGHi0uLW5WIgL3fC5Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:54:17:e5:1f:5c:4b:e8:0e:67:35:2e:78:d2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Oct 28 04:00:19 2025 GMT
Not After : Oct 29 04:00:19 2025 GMT
Subject: CN=409a9d39024ff8e90b3edc9c567796e656ab449d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:6c:77:eb:20:a9:ca:cf:34:1f:b2:c4:eb:
92:ce:cf:11:03:d3:51:25:ce:23:45:01:88:f4:50:
4f:7b:f4:8d:9e:2d:2f:ef:39:55:77:dd:c3:b7:cb:
d1:33:01:33:93:f1:c0:03:21:a8:b0:04:ca:77:bc:
80:5a:71:7d:19:30:51:31:66:9f:2e:ce:eb:ce:9d:
4d:12:1b:96:f6:15:c8:d0:e0:19:c5:e4:85:fb:f8:
06:db:16:7e:38:fd:99:64:da:18:20:d2:29:b7:7e:
ff:8d:b8:7a:b4:f3:60:2c:20:2d:7d:da:d9:08:90:
12:9b:06:9c:d9:27:89:7a:3a:a9:9d:78:dc:4b:d9:
c6:d0:2e:c9:cc:9a:f1:52:21:6b:3f:50:85:c8:ca:
84:17:65:11:86:18:0c:0d:32:39:0d:a9:b0:82:e3:
4e:11:af:c6:78:9e:20:0f:9f:37:56:50:85:09:c3:
72:a1:95:8d:95:8f:12:c0:28:d6:c0:02:80:12:43:
f3:2b:f1:b5:96:0a:cd:ff:72:ff:76:2f:cd:15:50:
dc:ae:03:e6:a2:e4:e6:02:e2:df:33:e5:1d:1a:72:
fc:64:e1:93:b4:b1:28:c4:62:3f:91:b2:f9:2b:9d:
27:c0:ad:55:18:1b:70:db:07:c0:95:90:3f:20:52:
2b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9A:9D:39:02:4F:F8:E9:0B:3E:DC:9C:56:77:96:E6:56:AB:44:9D
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e7:4b:f2:12:9d:1a:30:fb:92:63:82:c2:6e:5f:a4:d3:b6:
61:13:17:4e:05:05:84:c8:9f:2b:76:7b:d3:f8:61:01:65:11:
c6:d6:1b:a3:13:64:4e:62:7f:ba:af:eb:4d:ab:cd:46:70:8f:
17:4e:d2:46:4c:f9:0e:fc:a7:f8:55:d9:fc:b5:4a:d3:bc:5e:
86:36:e9:60:7d:09:0d:c0:75:4b:7f:91:db:49:3e:a2:3e:d6:
f9:d4:b7:87:90:c6:6c:86:95:42:f3:17:cf:ce:6d:d1:81:ee:
de:99:14:f3:d3:66:78:26:65:d9:f9:f1:f2:e5:9b:49:cd:35:
07:aa:6e:c6:11:8f:f2:e3:c7:54:1f:3b:b9:23:c8:b6:fe:4b:
13:11:e9:a6:96:3d:e0:a4:d2:38:e7:09:06:4d:d9:42:f5:54:
3f:a2:7d:bf:b2:81:60:2a:8b:21:bc:ea:a5:7c:d7:88:df:58:
f1:89:2a:61:52:60:af:20:1a:b0:c7:1d:f2:4c:19:52:6a:37:
b6:1b:30:8a:28:ee:57:98:85:fd:7f:a2:d3:89:c1:1a:2d:25:
25:3f:be:c8:40:1f:2e:e7:ab:ba:36:82:d7:5b:8c:58:34:1f:
08:3d:34:8f:39:87:ad:de:cd:90:73:69:c9:8f:17:b6:ff:c8:
2c:2e:b3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:46:16 2025 by rpki-client