Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
File: Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft (raw, json)
Hash identifier: MAqLzczxx7OApPPv6yEUFIdRv1KUA0oyV5JpgPB83DA=
Subject key identifier: 01:45:A9:34:C4:BE:40:83:37:01:0A:BA:D3:3F:58:39:B1:4C:17:33
Authority key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
Certificate issuer: /CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Certificate serial: 019A58D3CBA3AE145B3D8C70869EBB1F8149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
Manifest number: 16A4
Signing time: Thu 06 Nov 2025 11:01:06 +0000
Manifest this update: Thu 06 Nov 2025 11:01:06 +0000
Manifest next update: Fri 07 Nov 2025 11:01:06 +0000
Files and hashes: 1: Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl (hash: d7PZyCz5gg4SAOB0fMXnSaSzXbPMOgyAtIwF2H2QGXc=)
2: yEdA_N7rWdELvU2ot9EEaCyQPBo.roa (hash: 8ht/7rJO+ixz8Sl+2g/oVNj6ivGQ0TQ42doSDeerWxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:d3:cb:a3:ae:14:5b:3d:8c:70:86:9e:bb:1f:81:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Validity
Not Before: Nov 6 11:01:06 2025 GMT
Not After : Nov 7 11:01:06 2025 GMT
Subject: CN=0145a934c4be408337010abad33f5839b14c1733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:8e:7d:6b:43:73:f7:0a:a0:62:16:74:74:
cb:a8:22:cb:be:0b:ee:04:b1:ec:f0:c2:35:0a:3b:
04:e7:d8:df:f4:01:46:93:26:da:38:b6:0f:21:66:
e7:c6:d9:5e:f8:3c:b2:f4:46:91:9a:12:c1:04:b5:
5d:45:f7:56:05:da:50:43:25:0c:cb:c8:27:ea:94:
44:5e:c2:6b:41:3f:96:17:47:23:3b:30:a3:3a:29:
b0:c0:07:f6:e9:11:09:52:85:89:e7:ea:e9:20:80:
bb:6a:34:fe:83:ed:27:85:28:be:e3:06:17:3d:78:
d2:12:8b:a5:18:d0:3d:22:0c:5e:37:ab:7a:50:e8:
d2:69:a0:d1:4b:04:ae:6c:37:1e:2f:ee:b8:ec:84:
15:9d:ab:75:8c:a0:ae:bf:4d:fd:30:1c:90:fa:ad:
9f:0d:2b:f7:df:e4:02:81:c6:1f:b3:6e:16:ad:af:
8c:c6:2f:25:96:da:83:da:05:5b:d7:53:9a:a7:b8:
02:31:35:df:2f:2e:56:23:e6:b7:a5:2e:4c:ec:53:
15:3b:bb:29:ed:02:7a:19:6d:00:f4:9e:48:c9:7e:
7f:61:37:3b:26:98:bb:a7:ad:e0:2f:66:f1:09:30:
31:a2:f3:1d:b8:11:a5:e1:48:fb:07:e9:54:30:d8:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:45:A9:34:C4:BE:40:83:37:01:0A:BA:D3:3F:58:39:B1:4C:17:33
X509v3 Authority Key Identifier:
keyid:1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:70:22:4c:70:04:a4:17:03:26:f3:93:a4:4c:b4:bf:93:64:
70:88:e6:51:a3:25:05:69:de:f8:91:c5:3b:10:f7:94:e1:29:
58:74:53:f4:63:8b:66:83:3e:a9:cf:d5:ac:92:ef:27:f1:4e:
da:ef:5c:da:12:71:60:cf:99:79:e5:44:30:f0:78:48:0a:8e:
11:42:eb:41:c2:29:e2:8d:d9:d1:c5:11:87:6a:c0:4b:1e:6e:
9c:5c:90:ed:9b:ff:86:aa:fa:25:01:ac:38:62:9c:21:92:f7:
de:8f:0e:94:de:2a:7c:b2:e2:e7:f2:9d:fe:cc:fd:35:2f:40:
31:a2:d7:77:91:f0:e8:82:bc:1c:aa:a7:3b:e5:b3:50:8f:c2:
96:51:50:30:19:7e:fa:69:a7:8c:c5:f6:bb:f5:82:99:81:d5:
e7:21:3c:80:e7:55:ce:8b:c7:94:92:fc:da:83:d0:f2:fc:23:
ca:a6:3b:8a:f4:dc:39:98:24:54:27:97:63:4e:6e:78:5d:1d:
26:03:41:7c:15:6e:42:5c:38:ae:e9:84:8d:00:77:9d:04:f9:
9a:94:17:26:f0:a7:70:a6:04:4b:b5:16:bb:81:dc:ac:70:90:
36:d8:a8:67:71:46:21:50:72:8a:9a:70:f4:af:1a:28:f1:10:
e8:1a:28:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 12:08:59 2025 by rpki-client