Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier: Zb+Sbl0VXiZphT7/7E7H4Vz/t7iXAJUqWgYQWXlCDpo=
Subject key identifier: E1:52:D1:68:1B:8B:43:45:91:27:E5:1D:09:AF:5E:B5:9F:7A:4C:B8
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 019A4F99205FC8F6A6E47CA111D6C4FA8294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number: 1543
Signing time: Tue 04 Nov 2025 16:00:26 +0000
Manifest this update: Tue 04 Nov 2025 16:00:26 +0000
Manifest next update: Wed 05 Nov 2025 16:00:26 +0000
Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: KwgpasivUWrgSwR0tEQedQDE3B6h/mqwgX9I+8J/c2c=)
2: IfJsnDvBjhqNyvQwy7Sj6pVTE48.roa (hash: 72JQ+BiVOGXtzrf0r97edI+poiwfkKBvn0dEoFn6Vjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:20:5f:c8:f6:a6:e4:7c:a1:11:d6:c4:fa:82:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Nov 4 16:00:26 2025 GMT
Not After : Nov 5 16:00:26 2025 GMT
Subject: CN=e152d1681b8b43459127e51d09af5eb59f7a4cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:cd:a8:55:3a:ea:18:f3:37:0e:8c:03:2e:
2d:09:1b:ce:dd:b7:67:8d:94:7b:71:4c:6b:27:81:
47:2c:a6:1c:43:2e:83:62:62:91:e3:1d:fa:e7:65:
a5:97:41:87:ad:f0:bf:cf:7f:d8:c9:db:6b:7f:81:
70:01:e6:e8:f4:a7:82:e7:f5:8e:3b:4d:8b:63:41:
1e:d4:81:4f:22:c2:52:19:cc:3e:20:21:35:fc:8d:
97:a9:f5:c9:95:e9:50:d2:db:6d:72:bc:1a:eb:29:
cb:d0:47:7e:50:8d:47:ee:e6:87:65:4b:71:08:b0:
45:46:89:6d:01:a5:46:da:c8:3c:08:8e:e0:32:1c:
11:be:01:03:c5:98:c7:5b:08:43:dc:ff:66:60:0d:
24:46:49:1b:cc:9f:10:03:58:22:c6:2a:4e:8e:d2:
5d:9b:e4:90:ca:6b:2c:2a:a8:b0:0c:5e:f9:ab:cb:
ab:6d:9b:50:42:4f:67:61:3b:e7:15:75:a9:05:c9:
76:49:ca:f1:ea:7a:f0:1c:3a:96:77:b4:5c:7f:3e:
23:da:a2:d1:a7:34:b7:73:19:f8:f4:99:56:2c:c4:
5f:5e:0f:b2:15:23:eb:c8:df:41:66:3b:74:01:8f:
aa:a7:ce:6f:c8:9f:af:55:d9:ae:4d:46:b1:e4:60:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:52:D1:68:1B:8B:43:45:91:27:E5:1D:09:AF:5E:B5:9F:7A:4C:B8
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:57:a0:6e:ba:6e:df:7f:de:c9:5f:1d:21:17:75:dc:72:09:
19:fd:db:ac:49:46:11:ed:82:19:11:88:f4:f0:a0:73:a1:fa:
eb:2e:1d:a5:23:ef:51:da:27:79:87:96:71:8a:21:05:1e:c9:
c1:39:2d:6a:32:b6:3b:5b:98:4c:09:96:87:66:13:dc:af:f4:
4d:b2:39:76:48:ab:50:4d:03:f9:ca:52:ce:26:a6:fe:fb:0b:
96:8a:47:9b:5d:13:b3:17:4c:23:83:00:2b:a0:01:3f:f5:b5:
11:74:f8:e2:5f:3d:4c:de:77:22:5d:9d:33:6e:b7:04:ea:59:
8f:b6:4b:f5:5b:ed:8b:a6:f9:d1:84:8c:8d:ae:f8:f9:82:dd:
44:d1:e7:79:55:3f:8a:9d:74:90:18:7d:58:d8:b0:0d:e3:33:
85:d0:b0:48:a5:c5:ba:93:b2:e9:c8:76:dd:8a:a9:81:9f:84:
d5:ee:2d:64:3d:9b:b4:58:cb:c9:c3:79:b4:d1:51:bc:b6:23:
9f:c2:d4:8b:39:32:98:7c:4b:36:bc:fd:7e:ba:b6:c7:3f:d3:
3f:3a:cc:57:b4:1d:02:d6:fc:c6:06:a6:31:1d:87:35:f9:7e:
ca:52:40:7d:67:19:c7:53:7a:57:de:f1:79:9a:a9:68:75:12:
09:2e:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:20 2025 by rpki-client