Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: bxd7UoIuMl4gheecYY2VFA8eNvacZ9q5AYODV/s6+qE=
Subject key identifier: 29:95:73:20:4D:EC:1F:66:E1:B8:3A:9A:C3:74:6B:E0:7F:C2:D8:FF
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 019A2A7A0DC9C4D005E5A4BD27E79EC5C8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0C31
Signing time: Tue 28 Oct 2025 11:00:33 +0000
Manifest this update: Tue 28 Oct 2025 11:00:33 +0000
Manifest next update: Wed 29 Oct 2025 11:00:33 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: K/MIBn8Po/g3JF4A8W1mu5lW7m6nC4xjLkp7F2Fsuag=)
2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:0d:c9:c4:d0:05:e5:a4:bd:27:e7:9e:c5:c8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Oct 28 11:00:33 2025 GMT
Not After : Oct 29 11:00:33 2025 GMT
Subject: CN=299573204dec1f66e1b83a9ac3746be07fc2d8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:e5:1e:6e:ed:63:2e:1d:4a:4b:d8:bd:66:
a6:9f:1b:74:51:35:3b:88:87:6c:cd:dd:26:99:b8:
69:d4:15:43:af:52:21:73:1d:bb:05:37:5c:50:c8:
4f:63:b7:b9:bc:52:b8:f9:da:2a:3f:2c:e1:67:a2:
37:68:89:a1:c4:02:b7:22:9c:90:96:b6:78:54:9b:
56:3a:ca:b3:61:7f:88:5d:b4:06:77:2b:3e:df:08:
d1:2c:bf:37:d6:e0:17:08:46:91:e2:25:7f:26:42:
07:86:7c:1e:5e:c6:b3:52:a3:28:a5:02:cb:cf:f8:
0d:95:4d:12:d3:43:40:fc:5b:67:ff:f6:74:83:f1:
a0:6b:95:00:6e:48:7e:7b:6b:2f:5f:03:75:f3:04:
1d:f6:8a:ec:9f:2e:33:39:19:e6:8b:fe:89:2f:e6:
c6:f8:a5:30:b2:cf:29:8d:e6:a9:2a:ed:69:6e:0b:
ec:7d:56:c8:67:2e:db:cb:2d:e2:1b:0b:06:66:34:
30:54:f5:35:b9:39:6d:a6:a1:b0:43:00:d1:8f:4d:
17:a9:46:87:a8:35:04:3c:92:68:62:c6:14:53:2c:
9d:9d:1a:b8:1a:34:3e:1c:13:03:10:f9:a4:f9:4f:
81:e6:59:da:ef:ed:f5:c8:2f:f3:6d:3a:d8:c9:99:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:95:73:20:4D:EC:1F:66:E1:B8:3A:9A:C3:74:6B:E0:7F:C2:D8:FF
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:33:be:11:12:0e:c8:f5:52:2e:7d:d8:7b:ea:e6:9c:88:a7:
1a:56:66:32:76:ce:22:bd:52:26:f4:ab:04:4b:30:a3:73:df:
64:92:b1:fa:ea:5e:50:a6:98:f3:5f:92:f7:2d:c6:4f:4f:3f:
c2:a9:d1:7d:86:b2:28:b4:f3:90:85:70:e8:d5:d7:ce:16:1b:
87:d3:e9:31:3e:74:e7:a7:8d:ae:52:77:4a:83:9a:01:56:e6:
d6:56:cb:68:b7:06:28:6f:e4:40:0b:84:9f:07:2c:3c:6f:f5:
18:e7:99:f9:3f:ae:b4:31:26:26:42:48:0d:42:03:bf:2f:bd:
64:f3:f2:12:9b:fc:3a:34:f1:5c:30:eb:09:13:ce:63:0f:ce:
8e:da:bc:4c:80:40:70:10:00:36:80:20:c3:9d:a1:9b:20:8a:
2b:b3:44:18:b1:f5:34:ff:0e:84:88:bb:90:70:ac:a2:02:7d:
3e:88:81:dd:6c:e5:cd:6d:6f:b1:5c:f5:e9:f2:83:13:a1:68:
3e:d7:4d:b8:53:3c:82:ad:a3:12:0a:20:b5:38:6b:ff:3c:b5:
7f:3e:f7:b7:58:f6:3f:73:4e:f2:5e:3c:16:d2:27:42:78:db:
16:30:c6:ca:bb:23:2a:6e:be:91:97:4b:a8:dc:f7:d3:83:6f:
46:72:4d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:46:43 2025 by rpki-client