Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
File: HWHLS77lzdfs7adWCqJJxtEfI6k.mft (raw, json)
Hash identifier: 4Y4G7GBA/44fM3/MWHwu2RF8KiOR1yjmN7+uKdV1LeQ=
Subject key identifier: FA:4E:FB:12:0E:2C:58:56:96:6E:4B:8D:77:36:34:B4:D5:F3:6C:48
Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
Certificate issuer: /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Certificate serial: 019A71B91D784E71ECD39BC5F8AE102BC9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
Manifest number: 0E46
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: HWHLS77lzdfs7adWCqJJxtEfI6k.crl (hash: 6eRoNgjfHu3IxTpmToon9XUCbjQKLzYDUL3XQ11/UsA=)
2: RPmjQPRT6ThSraH9_mRiL0MDtOs.roa (hash: whApUZJ7ydquVhB+yjQTmZxwrY2+CBwkk7L36wahsAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1d:78:4e:71:ec:d3:9b:c5:f8:ae:10:2b:c9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=fa4efb120e2c5856966e4b8d773634b4d5f36c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:a9:18:e8:69:00:04:9e:8a:c6:1f:cb:16:
a8:42:8f:b3:fa:24:e4:1e:35:59:97:86:0e:0e:1c:
2a:c6:95:2c:85:29:d3:9f:97:29:4b:b0:53:3a:69:
83:ea:c6:19:37:21:65:31:1b:96:83:9c:b8:44:94:
0a:99:41:ac:ec:bf:9c:04:f8:77:09:52:99:1d:25:
3c:c2:54:fb:6e:21:c4:4a:7a:96:a5:04:0b:ec:a0:
a5:0b:2b:68:48:31:4e:01:da:4e:a6:6b:97:bd:4a:
bc:84:63:95:23:20:f2:98:85:89:6d:49:0e:1e:48:
8f:53:20:ed:37:c6:6d:ff:e4:ea:0f:5a:42:b6:43:
36:dc:68:8f:07:b7:27:a5:f8:30:e0:1c:a0:e5:a7:
72:00:fd:a5:58:ac:ad:7c:73:5a:8a:1d:8f:36:2d:
9e:03:35:fa:8e:4f:c6:a6:e5:d8:e6:73:82:b0:7c:
42:aa:b1:a8:22:9c:34:c9:9d:25:92:53:ab:6a:99:
c4:5c:22:f5:53:48:7b:c2:21:c2:3f:41:a9:9c:28:
06:30:0c:01:34:f7:d6:9a:e8:52:b1:39:62:0e:e6:
eb:d2:80:ce:e5:52:ed:7e:12:1c:da:6c:20:14:7e:
88:e7:d4:39:aa:70:22:50:e3:2a:04:4f:8b:36:3a:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4E:FB:12:0E:2C:58:56:96:6E:4B:8D:77:36:34:B4:D5:F3:6C:48
X509v3 Authority Key Identifier:
keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:33:e5:f5:40:3b:71:2f:fc:62:e0:fe:c9:38:e3:5f:0b:b4:
7d:e1:3d:da:2d:d2:4c:7e:c8:df:d6:9e:b5:9b:84:23:7f:41:
55:69:74:e2:b1:de:5b:00:9b:86:6c:eb:c1:ad:c6:3d:cc:1d:
78:e0:eb:2e:03:03:44:47:85:78:ae:df:f6:11:89:de:28:4a:
96:5a:0e:47:11:c8:3a:99:64:6e:5a:29:81:30:86:de:93:f3:
88:da:c3:b5:92:f9:32:1a:63:d6:ca:69:31:c3:8b:3f:1d:5d:
25:a5:3b:24:05:ee:92:cf:df:01:3a:63:4e:31:74:cf:15:f0:
7f:37:46:c6:d2:d3:96:b9:2d:79:f8:06:42:99:f0:73:67:72:
33:58:05:2f:e3:8c:e6:6f:ca:9a:c7:3b:ac:6c:76:2c:a3:c4:
6b:91:5b:d1:a9:e1:f9:7a:e9:2e:b9:9d:cd:55:12:de:ec:4c:
c4:52:12:b8:64:7e:9d:0d:2d:da:d1:5b:d7:54:bd:71:b7:01:
07:6c:3e:77:a5:20:57:05:c1:72:a0:0a:6a:8c:3f:11:49:7b:
71:11:cb:43:34:7a:4f:39:51:d4:4d:ea:53:c3:36:80:aa:27:
eb:b7:7b:98:61:5d:b6:06:de:d7:66:06:fd:33:d0:a1:74:68:
15:b5:c0:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuR14TnHs05vF+K4QK8n2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjFjYjRiYmVlNWNkZDdlY2VkYTc1NjBhYTI0OWM2ZDEx
ZjIzYTkwHhcNMjUxMTExMDcwMjI4WhcNMjUxMTEyMDcwMjI4WjAzMTEwLwYDVQQD
EyhmYTRlZmIxMjBlMmM1ODU2OTY2ZTRiOGQ3NzM2MzRiNGQ1ZjM2YzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv06pGOhpAASeisYfyxaoQo+z+iTk
HjVZl4YODhwqxpUshSnTn5cpS7BTOmmD6sYZNyFlMRuWg5y4RJQKmUGs7L+cBPh3
CVKZHSU8wlT7biHESnqWpQQL7KClCytoSDFOAdpOpmuXvUq8hGOVIyDymIWJbUkO
HkiPUyDtN8Zt/+TqD1pCtkM23GiPB7cnpfgw4Byg5adyAP2lWKytfHNaih2PNi2e
AzX6jk/GpuXY5nOCsHxCqrGoIpw0yZ0lklOrapnEXCL1U0h7wiHCP0GpnCgGMAwB
NPfWmuhSsTliDubr0oDO5VLtfhIc2mwgFH6I59Q5qnAiUOMqBE+LNjpzgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpO+xIOLFhWlm5LjXc2NLTV82xIMB8GA1UdIwQY
MBaAFB1hy0u+5c3X7O2nVgqiScbRHyOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iMmY1ZjktZDM0YS00N2EzLWJiNTQt
MDg3MWZkYjZhNGZhLzEvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iMmY1ZjktZDM0YS00N2EzLWJiNTQtMDg3MWZkYjZhNGZh
LzEvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejPl9UA7
cS/8YuD+yTjjXwu0feE92i3STH7I39aetZuEI39BVWl04rHeWwCbhmzrwa3GPcwd
eODrLgMDREeFeK7f9hGJ3ihKlloORxHIOplkblopgTCG3pPziNrDtZL5Mhpj1spp
McOLPx1dJaU7JAXuks/fATpjTjF0zxXwfzdGxtLTlrktefgGQpnwc2dyM1gFL+OM
5m/Kmsc7rGx2LKPEa5Fb0anh+XrpLrmdzVUS3uxMxFISuGR+nQ0t2tFb11S9cbcB
B2w+d6UgVwXBcqAKaow/EUl7cRHLQzR6TzlR1E3qU8M2gKon67d7mGFdtgbe12YG
/TPQoXRoFbXAMA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:47 2025 by rpki-client