Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: O43O1LiIsVKc2Od9UnLBHH3DQof0zL5th7rkmwR9m7s=
Subject key identifier: 1E:08:22:69:5D:5C:36:9D:FD:A8:59:85:BB:1C:4D:0B:88:E1:2C:38
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 019A337D3F2677F8650DB285EEF7685B4A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 1384
Signing time: Thu 30 Oct 2025 05:00:37 +0000
Manifest this update: Thu 30 Oct 2025 05:00:37 +0000
Manifest next update: Fri 31 Oct 2025 05:00:37 +0000
Files and hashes: 1: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: tBVy3dshe15WghX7hkbqIWBXyxFMn2HGMQAJX+noSfE=)
2: UYoraKeZIaoa2wVuoomivtXbxRQ.roa (hash: 64MFcCCoNK8y5TAb4sImtBVWhOrUKow/FlcIn/ABu34=)
3: bce9mz0b3BUGOMHAJWY8rMCRxek.roa (hash: IEeWzdb92Rel/sak0WfNMG3iDCwAJHBVrKmaRSr9eNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:7d:3f:26:77:f8:65:0d:b2:85:ee:f7:68:5b:4a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Oct 30 05:00:37 2025 GMT
Not After : Oct 31 05:00:37 2025 GMT
Subject: CN=1e0822695d5c369dfda85985bb1c4d0b88e12c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:8c:fe:14:15:4e:97:7b:d3:4d:d7:45:4c:
c5:5d:ae:24:99:78:04:86:ed:06:8f:90:2e:56:46:
5f:3e:62:e7:50:0e:b3:69:74:68:a6:dc:c1:c3:94:
c6:cc:df:1f:02:d6:dc:f3:63:2d:c6:3a:de:be:a8:
f4:6d:eb:10:e8:43:0f:b6:54:fd:2b:22:13:d6:7f:
cc:d2:ce:20:97:15:77:0d:80:46:30:39:2d:0b:fb:
40:dd:ec:11:50:03:87:a5:db:ee:54:64:12:51:e9:
4f:02:77:da:0d:07:95:40:50:d0:1b:27:35:1a:64:
84:db:a2:d0:2e:53:b4:4c:7f:79:6c:a3:dc:2c:83:
8f:78:49:21:da:cc:e7:fd:29:83:72:e8:a4:1a:e4:
98:03:f0:1a:17:44:df:b3:89:57:17:2d:50:75:23:
43:6b:a4:e4:f4:96:4d:80:44:d6:f8:69:57:27:94:
60:3e:07:f9:32:29:c1:85:a2:96:e3:a6:ff:a4:7f:
d5:d2:af:e5:09:2f:d9:41:68:b8:7a:f8:3f:18:e4:
00:95:84:06:62:75:f5:fb:a2:f6:fc:a3:76:28:e9:
00:08:33:c4:b1:25:d9:91:1a:ea:d4:3f:02:2c:29:
c3:bf:34:74:d4:0a:6a:b4:b1:ad:2d:df:f9:40:a3:
75:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:08:22:69:5D:5C:36:9D:FD:A8:59:85:BB:1C:4D:0B:88:E1:2C:38
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ce:2e:4a:23:00:cd:d1:fd:69:8c:f3:dc:0c:9a:d7:64:40:
93:11:9a:ad:a0:34:90:42:ed:7a:d3:28:61:b9:f7:72:6b:3c:
6a:d3:f2:04:65:0e:d5:af:9d:60:c3:db:a7:59:3e:3d:86:22:
01:11:7e:eb:1a:24:73:d0:32:90:f7:02:19:fa:f8:9f:b4:7b:
e9:c1:18:35:91:7b:e7:0e:24:2a:09:2f:7f:53:93:70:7c:19:
17:d7:e7:fb:1f:b5:f6:f6:6e:a9:c6:48:4b:70:a5:e2:9f:6e:
a2:87:5f:c1:de:f1:61:86:16:81:0a:29:64:f1:47:b9:d5:ea:
a7:14:a9:6b:af:e3:ab:ea:00:4c:6c:3a:d8:eb:7f:b9:f2:8f:
0d:d9:13:f7:37:64:1f:9c:cb:9f:2e:63:53:9e:b7:ba:6d:09:
12:26:6a:eb:53:d5:86:f8:3d:0f:1e:c9:63:c4:90:5e:33:ec:
57:86:36:75:6c:80:b3:45:49:61:32:ab:55:43:26:98:18:81:
4b:9a:a5:92:a4:9f:c9:13:c7:13:13:9f:d4:35:36:28:90:5b:
eb:d5:7c:c0:7c:0b:c1:e2:0d:06:00:ba:2e:e2:02:c7:aa:55:
c2:f3:ad:0a:fa:16:0f:e6:dd:fa:aa:20:d1:37:f9:67:a4:4d:
49:d0:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 14:39:45 2025 by rpki-client