Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: Op4ccDQoQMx/N5QVJU/dM1zgNXxYVuNSGEuiRgNjRK0=
Subject key identifier: 8D:BB:91:3B:E8:EA:29:A8:53:A2:ED:2E:CD:07:A7:2C:8B:D3:D9:D4
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 019A57529CED82D5EE8F029F342D85CF53C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 1111
Signing time: Thu 06 Nov 2025 04:00:23 +0000
Manifest this update: Thu 06 Nov 2025 04:00:23 +0000
Manifest next update: Fri 07 Nov 2025 04:00:23 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: p5Fd+xbRHdkr12rdydhNgAYS3i2qfVhlvjGwSqJXmXE=)
2: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (hash: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:52:9c:ed:82:d5:ee:8f:02:9f:34:2d:85:cf:53:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Nov 6 04:00:23 2025 GMT
Not After : Nov 7 04:00:23 2025 GMT
Subject: CN=8dbb913be8ea29a853a2ed2ecd07a72c8bd3d9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:46:d3:f0:c3:45:c2:0b:e9:22:2f:66:71:
df:15:5e:4e:95:56:f7:5e:a5:d6:07:05:a3:1c:74:
0e:8b:ee:4f:ee:da:7f:ab:60:fa:5b:90:9d:0d:46:
1c:9c:0a:d6:b7:10:1b:f0:ac:7a:50:8f:92:c9:be:
13:d1:be:06:4f:5b:ff:d5:18:a0:a1:56:c5:be:39:
0b:9f:d5:62:96:bb:7e:a9:0b:97:7a:d4:01:d3:c3:
65:e4:a6:43:3b:b7:69:ac:ba:ad:7f:38:04:dd:7d:
ca:50:4f:0c:93:6a:22:fa:1c:57:e5:58:cd:04:06:
9c:02:91:a0:b8:82:e2:bf:80:e5:d4:71:7e:0a:ec:
b9:3d:87:18:a0:c1:50:b7:01:76:17:22:1a:9a:f3:
f0:aa:88:97:61:e3:b8:14:17:60:fe:f9:6f:32:22:
3c:66:df:cb:62:a0:d0:59:f2:17:c3:a5:8a:d2:07:
6d:74:74:58:3b:39:bb:af:ba:1d:70:d0:97:70:bf:
8e:87:ac:d6:eb:a0:18:7f:2f:f6:eb:2f:7b:3b:9a:
f6:0f:6d:c1:da:7f:7b:2e:9c:06:f7:1e:6c:74:58:
5e:8c:46:21:68:24:85:20:0b:45:ec:1e:a6:66:c5:
70:db:ef:32:c3:c0:2a:ad:97:de:60:20:2b:28:bb:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BB:91:3B:E8:EA:29:A8:53:A2:ED:2E:CD:07:A7:2C:8B:D3:D9:D4
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:40:9d:1e:7f:73:24:97:d8:8f:7e:c6:a3:3c:34:19:b0:c9:
23:c7:3a:f3:e5:11:62:1b:9f:2a:53:84:95:dc:47:a0:0a:1d:
e9:ef:54:35:2a:d7:e1:e9:bf:33:8e:95:6a:27:c0:e4:43:9a:
c5:31:2b:dc:39:43:f1:d2:68:6e:6b:51:73:b9:91:a6:7d:11:
88:d5:5c:5b:d9:73:e3:c4:a5:05:e6:d5:59:ef:46:bc:70:c8:
a0:d9:20:40:2b:b3:d0:1e:15:b8:36:21:39:a0:d8:d6:2e:18:
a7:a3:1f:80:bf:57:3f:b8:00:3b:1b:cc:8e:bc:c3:74:83:bc:
a9:92:a6:5a:64:a5:5b:b8:1b:ad:dc:20:dc:21:15:2c:d0:d0:
d9:a8:d2:e7:2f:b0:b8:50:ee:00:11:e9:63:cb:9f:5d:bf:c2:
24:5c:7d:47:63:dd:c7:a8:68:63:58:0d:7a:2a:11:01:68:20:
98:58:f3:d4:75:9f:1c:e6:fd:3c:e3:fe:03:1d:08:41:08:ed:
4f:5c:19:67:7d:08:be:e8:ae:c4:57:16:48:87:19:52:f8:7f:
f8:c2:18:62:c3:bd:5e:1c:70:58:95:21:56:80:25:b0:9b:b3:
a4:0a:5b:e1:f0:02:0a:d3:1e:83:ab:f1:bb:5e:86:0e:28:35:
ff:16:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 12:09:00 2025 by rpki-client