Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier: ICrsGFKruPMRlyaH+kF9ItSTCKHZk6qETQSGnW4iN1M=
Subject key identifier: FA:D5:EC:55:96:66:97:60:76:71:34:EB:BE:CC:30:2C:D4:9C:F9:BF
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 019A51BE262A1CF73FAC457D008EFFD7A48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number: E3
Signing time: Wed 05 Nov 2025 02:00:07 +0000
Manifest this update: Wed 05 Nov 2025 02:00:07 +0000
Manifest next update: Thu 06 Nov 2025 02:00:07 +0000
Files and hashes: 1: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: xbdfhjl2kt44LUN99tkiOdb22m3J0Wgfh/ZTXj+bwVI=)
2: oVPiQMn-UegBx2J-TQORMG9g6K0.roa (hash: 4SSzKPc2mgWhQk6lB1aOXRB/10H0pRazL5v2Txj6Wns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:26:2a:1c:f7:3f:ac:45:7d:00:8e:ff:d7:a4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Nov 5 02:00:07 2025 GMT
Not After : Nov 6 02:00:07 2025 GMT
Subject: CN=fad5ec5596669760767134ebbecc302cd49cf9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:0c:71:81:b1:14:7a:1f:86:d6:da:3b:84:
08:45:7d:d0:91:de:88:1e:d7:f3:6e:5f:32:8a:8b:
d2:b6:47:d6:20:42:47:1b:17:ec:39:ba:74:c3:33:
f6:89:c7:10:72:bd:08:9f:49:e5:6f:fa:fe:56:ab:
5d:55:d2:4e:41:c7:d4:4b:35:02:fe:56:e2:e2:fd:
63:94:61:7b:49:bc:76:47:e8:5d:26:bf:bd:d6:35:
ae:58:4d:9a:31:af:b5:ed:20:09:d5:ae:a4:54:2a:
bb:0c:4b:30:5f:82:27:27:c3:61:6a:0c:4b:4d:22:
2f:8b:6b:95:a5:ec:50:07:c1:b0:68:19:7e:7b:8b:
dd:d9:6b:c4:4d:55:ac:67:21:50:c2:c8:39:41:ee:
b3:86:fc:c6:4c:e5:2b:dd:23:e2:fb:72:77:b8:8e:
51:18:d3:06:91:4b:41:c7:ea:a0:31:8b:3e:df:1c:
24:29:f4:75:65:8e:5a:ce:fc:5c:83:fa:a8:f4:62:
36:ec:1b:ce:c2:ab:a0:f2:c6:d6:5d:c4:0d:08:71:
99:71:55:5c:f0:f8:c0:01:bb:a8:77:55:c0:97:ae:
a8:04:41:91:82:3e:3e:4c:dd:0b:46:eb:31:73:aa:
ba:91:00:81:6e:18:d7:aa:86:1a:87:a1:c6:7b:a6:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D5:EC:55:96:66:97:60:76:71:34:EB:BE:CC:30:2C:D4:9C:F9:BF
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8d:ed:48:e0:8f:e7:aa:a3:c0:14:23:29:04:78:28:23:b9:
cc:10:12:63:8b:ca:ee:10:79:bb:27:68:a0:4b:8c:8f:47:40:
be:a4:2f:73:b0:a1:e1:4b:62:b3:1c:dd:0a:2d:b7:8d:09:02:
6e:e5:08:00:d1:16:ea:70:1a:14:a4:18:d1:bf:da:f8:96:02:
8a:fd:70:0a:2f:36:89:6b:75:25:79:9e:64:3a:67:aa:82:a0:
38:94:1e:bd:be:7b:78:db:a7:d6:e1:e7:2f:a4:e3:77:9a:01:
55:ff:58:78:19:7e:48:b0:20:08:f8:fc:98:99:58:d7:44:a2:
d9:83:c2:50:32:6a:6e:21:d2:a6:37:31:6b:fe:18:aa:2d:44:
07:4a:75:49:7d:6a:d0:ca:dd:45:46:c6:7f:dd:bb:ca:1e:37:
30:55:8b:e3:07:71:b5:c9:67:48:bb:13:58:45:b4:31:f9:df:
46:22:e9:8d:93:9d:39:17:af:ef:1c:c8:2a:53:b2:f1:39:59:
ce:4f:9e:44:65:50:e6:89:b7:fe:6b:fb:32:6b:bc:68:e9:1f:
53:b7:9a:dd:48:7b:30:8f:61:51:e3:01:64:fe:bb:89:a2:9d:
36:1e:fe:0a:04:d2:e5:cc:f4:95:6c:7b:ff:cb:2b:12:a8:ba:
fd:6d:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:33:08 2025 by rpki-client