Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
File: HNq3BST9UTE7hPXY9GNio9jICBQ.mft (raw, json)
Hash identifier: lSs3DTTIGKomls99G4g/pfzHL5lJzj/8ilwCjApB45M=
Subject key identifier: B4:12:5A:60:EC:4E:D4:EF:6C:72:CE:5E:96:80:A6:71:B9:61:E8:32
Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
Certificate issuer: /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Certificate serial: 0199228C63169B78AB9420523B8A1D2896D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:00:49 +0000
Manifest this update: Sun 07 Sep 2025 05:00:49 +0000
Manifest next update: Mon 08 Sep 2025 05:00:49 +0000
Files and hashes: 1: 8H6vwz49R0kM-gbNtDLGiXSOgWE.roa (hash: 7d11KfsVtGX7lu3CgRTWP0J/PhStNQboteNSMa34UZE=)
2: HNq3BST9UTE7hPXY9GNio9jICBQ.crl (hash: ZA75t623TgBDgeNOvx2HWHUyEEEtT1MboixSZeHhjc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:63:16:9b:78:ab:94:20:52:3b:8a:1d:28:96:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Validity
Not Before: Sep 7 05:00:49 2025 GMT
Not After : Sep 8 05:00:49 2025 GMT
Subject: CN=b4125a60ec4ed4ef6c72ce5e9680a671b961e832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:5d:db:65:bf:70:0d:a1:fa:df:50:52:c4:
32:1d:c9:78:53:b3:60:28:dd:e1:d8:16:de:de:dc:
db:39:d6:5c:02:19:27:7b:3c:95:de:3f:35:60:34:
88:f6:6f:18:d3:7b:94:3e:f9:25:5d:75:07:b0:4a:
d0:8d:a6:e9:3c:d4:92:b6:fd:2f:b0:01:17:a4:6f:
f7:b8:70:ad:52:52:b3:32:77:79:19:37:3e:a4:fe:
3d:ec:17:2a:1e:13:09:2c:2c:28:b3:42:9c:1b:e8:
a5:f2:f8:13:1f:3c:22:35:3a:66:95:bc:d6:88:f9:
98:93:f7:79:61:dc:b8:c0:43:5c:20:83:d4:f3:fb:
37:29:09:14:a2:02:74:5d:96:23:40:63:f3:58:ca:
1e:6c:66:c4:4f:fd:28:ff:a5:56:85:e1:e6:00:af:
ec:a8:44:d8:55:a9:62:ad:80:df:30:ad:33:25:7b:
54:79:f8:dc:0e:72:4c:2c:d2:f6:1c:5d:38:04:c2:
cf:24:4b:b3:81:68:34:3a:96:e7:3a:b2:44:6f:ff:
31:d1:5d:0a:fb:45:9f:fc:db:45:44:e0:e4:c2:22:
b6:8b:85:e0:ac:1b:3e:3f:ba:0b:fc:1f:db:bf:04:
b8:e5:5b:f9:e6:ef:28:23:c2:91:bb:92:84:3b:4e:
08:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:12:5A:60:EC:4E:D4:EF:6C:72:CE:5E:96:80:A6:71:B9:61:E8:32
X509v3 Authority Key Identifier:
keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e4:1f:c7:50:4a:2b:1d:10:20:82:46:23:f6:de:5b:25:9e:
61:fe:ba:26:ee:c5:2b:bb:9b:b7:53:04:fb:58:a7:df:8b:85:
9d:d4:07:13:ef:69:77:2a:5d:e1:c9:3b:6f:8f:a6:27:ae:1e:
4e:56:27:60:60:5c:b8:3e:ee:51:b2:86:68:05:de:3b:9b:c5:
96:8f:97:8b:09:3c:a7:c1:5a:d9:77:7b:9b:2f:7d:0b:42:af:
8b:b6:5c:c0:ab:d2:d8:9c:33:02:48:3e:33:ae:10:5e:65:23:
d5:bc:2c:2b:ba:b3:c2:fa:80:dc:c2:0e:fc:b6:58:5f:63:0d:
8a:32:ea:bb:e9:47:68:32:70:4d:91:46:da:22:4c:fc:48:98:
f8:62:64:0f:a5:2c:46:06:99:aa:55:10:e5:b3:54:86:ee:22:
64:4d:85:1a:bb:bf:6b:f3:45:cc:f9:29:8a:59:8a:ce:3b:0b:
44:04:7e:11:26:38:d2:a7:2a:aa:07:bf:d5:3e:69:74:0f:f7:
fa:c6:b9:3c:6b:e1:a4:9c:bd:f8:fb:48:d6:42:d6:7f:ff:54:
2d:2f:86:f9:a5:f4:1f:15:e5:58:d1:70:97:35:e5:37:ba:42:
b7:94:a4:01:a2:e9:d7:3a:da:67:8d:d2:3f:ff:b7:b2:bc:7a:
35:49:6f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:31 2025 by rpki-client