Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: 9ksuhsD02iOZzGh6wnozzWbplla1JShwRdAsZRlPUp4=
Subject key identifier: 61:88:DC:40:52:AC:59:AB:95:0A:2B:1B:C5:EF:F5:48:8A:51:AE:59
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019A26670539277ACAEAB91A1FBA91E3FBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 1005
Signing time: Mon 27 Oct 2025 16:01:17 +0000
Manifest this update: Mon 27 Oct 2025 16:01:17 +0000
Manifest next update: Tue 28 Oct 2025 16:01:17 +0000
Files and hashes: 1: GtM4pSsiK5eSfyxXfFff62QmvIQ.roa (hash: d17WNX33kwLBGAgNh9bS/nIhg2dh/WqffpjSyAJ5+FM=)
2: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: 6LjxXLoIHwmZoYinMT5iNMiINNgCTux6GVv3l5p+glU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:05:39:27:7a:ca:ea:b9:1a:1f:ba:91:e3:fb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Oct 27 16:01:17 2025 GMT
Not After : Oct 28 16:01:17 2025 GMT
Subject: CN=6188dc4052ac59ab950a2b1bc5eff5488a51ae59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:54:92:d9:78:da:01:fe:16:d0:3c:c1:90:
e2:f1:4a:72:9d:92:99:6d:91:3d:9b:c3:3e:f5:7c:
45:59:78:3d:8c:4f:81:55:3f:2f:d8:a4:fa:14:86:
98:6a:1e:bc:d3:37:6c:71:3e:e7:a0:7c:03:86:d7:
d8:da:0d:fe:40:a2:4a:69:fe:0b:60:a5:ad:76:7c:
15:30:54:12:b8:37:3e:e1:5a:1a:3b:09:31:79:97:
0c:1f:8c:c0:e8:dd:71:70:3e:c2:2e:1d:4a:e3:24:
53:1d:af:92:3a:0b:f6:70:c0:fb:0a:dc:e1:8f:f4:
d6:47:cf:02:2e:6b:9c:26:20:93:98:7b:4e:9f:7a:
57:be:8c:f3:fe:4e:e4:a7:95:07:ee:ac:24:b3:d4:
f2:6c:a5:44:67:cf:51:b6:f1:92:d9:67:c5:18:4e:
71:88:71:b9:ee:24:7c:4f:dd:3c:8a:a2:41:70:81:
b2:37:ba:d2:d7:7c:9c:bf:83:d2:27:37:a7:d5:41:
24:cb:2a:60:55:db:46:16:c6:9e:59:9d:e6:f3:83:
bd:70:0e:b9:0d:41:45:4a:9b:57:16:30:1e:29:41:
07:c5:e9:8f:f3:51:4f:58:d0:77:a3:d6:d6:48:37:
59:a6:d5:ad:94:d8:3c:cb:13:d9:77:53:1a:a9:d5:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:88:DC:40:52:AC:59:AB:95:0A:2B:1B:C5:EF:F5:48:8A:51:AE:59
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ef:2b:d1:9c:3a:ea:2e:2a:d4:63:3b:5c:32:3c:62:0c:59:
18:72:36:f4:2f:5c:3a:dd:36:9d:43:a2:77:7a:46:b0:fb:4a:
70:24:38:22:d1:e7:03:56:74:f5:5c:cb:a1:82:3b:02:4d:af:
af:3e:eb:2e:27:3e:7b:82:ae:89:53:37:15:30:f4:92:13:28:
f1:9c:43:ea:1a:96:b7:e6:66:d4:4f:59:bf:8a:5f:e3:68:56:
53:ec:47:82:7d:c2:54:fc:0a:33:75:26:a7:7b:1c:8e:be:b3:
c5:f1:81:ca:fb:71:34:4a:77:18:f3:4e:65:ea:36:41:e0:fd:
fb:b8:25:0f:96:12:48:12:c1:6b:5f:84:7f:fe:d1:f2:13:c0:
c5:1c:b8:83:a6:7c:3c:6f:40:63:e1:fc:62:26:c6:35:c1:07:
ad:d1:05:fb:04:6a:23:af:c1:75:a6:b7:86:ac:12:00:48:6c:
a8:29:e6:f0:a3:70:41:52:9c:14:a7:3b:7c:61:fb:70:be:37:
27:79:0f:a9:39:a2:96:94:5e:94:50:a0:20:ba:5c:3b:ec:57:
dc:80:ba:e1:0f:8a:d5:4e:b3:ed:6e:53:a2:35:66:d7:bc:87:
a4:05:da:fd:58:77:92:51:f2:64:71:8f:75:9b:fa:ac:73:e4:
51:37:82:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 00:00:38 2025 by rpki-client