Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
File: HSzcucdvXgzgw4XX4O8VVy0VpUw.mft (raw, json)
Hash identifier: GxORKczpjhyhq9FnjLnvj1HRBnEpxyx/YIgYocvl1eo=
Subject key identifier: B6:38:49:6A:77:8C:BF:C0:25:B0:D9:29:76:A8:CC:79:92:2A:B9:A3
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Certificate issuer: /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial: 019A4B18C8EC370E0DF4B926363CCC7DD30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
Manifest number: 169F
Signing time: Mon 03 Nov 2025 19:01:46 +0000
Manifest this update: Mon 03 Nov 2025 19:01:46 +0000
Manifest next update: Tue 04 Nov 2025 19:01:46 +0000
Files and hashes: 1: 3E7aBqsHg6THlsFLCGCu1ykhumg.roa (hash: vdRC30YdnIGNPLtMGa2MkjovoqgS/LCgWDKRJk5Yhko=)
2: HSzcucdvXgzgw4XX4O8VVy0VpUw.crl (hash: gtGeU6kEQPKwg+LcClLoURQlO5bijGj2wP6VjJsqVtE=)
3: _gYUlUCfN6l5n67P7rXluh_fPlA.roa (hash: U4UZUMI/kaS2KD/9/bzXxhkFvL6NwSNWIwZGPCQg08o=)
4: drOxTuSdQFczpcVwXyFaIyEbsdY.roa (hash: flldTjSWU2bObz1CZncUhXjWnhrg2F/Btx8as3R6O7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:18:c8:ec:37:0e:0d:f4:b9:26:36:3c:cc:7d:d3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Validity
Not Before: Nov 3 19:01:46 2025 GMT
Not After : Nov 4 19:01:46 2025 GMT
Subject: CN=b638496a778cbfc025b0d92976a8cc79922ab9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:c5:a6:64:8c:6b:42:5b:37:96:f5:31:b6:
c7:ce:01:7b:41:da:6a:f6:0f:7d:a5:05:f9:89:ad:
6b:64:1c:96:fd:a0:db:f1:c2:1d:5c:3a:7c:b0:67:
59:a4:fc:ba:a8:c2:3e:a0:65:53:06:be:d8:15:ac:
79:fe:f4:bc:9f:3d:69:3b:0a:fb:89:bb:e8:85:90:
bc:59:29:ed:ba:aa:4a:10:95:c1:07:a2:2c:aa:ba:
37:c3:78:11:07:dc:36:27:ae:af:90:bd:70:a5:88:
b7:e2:88:b8:49:f2:58:e4:86:cc:83:e1:ad:95:73:
93:41:03:2a:b7:35:90:a4:0b:f8:01:0a:f3:34:6d:
b8:fc:77:89:03:ee:98:28:ac:8e:0d:82:75:7b:25:
a6:38:d1:65:54:0c:a6:3c:64:19:1b:0f:18:a2:18:
33:b1:d5:52:ca:de:50:64:29:ef:47:81:a3:87:1a:
0a:1c:cf:8d:bf:6b:ad:cb:17:98:11:21:2f:a8:83:
f9:60:31:d8:77:ba:b7:93:f9:47:ad:89:53:97:b7:
08:d8:0b:6a:a1:ce:eb:0d:26:1e:5d:ce:79:fb:e2:
3a:9f:2b:7b:bf:1d:b6:f7:73:cf:c6:d5:f0:83:62:
1e:92:97:20:de:52:63:df:04:45:72:a9:73:f1:49:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:38:49:6A:77:8C:BF:C0:25:B0:D9:29:76:A8:CC:79:92:2A:B9:A3
X509v3 Authority Key Identifier:
keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c6:8e:f6:8c:71:08:63:2d:de:10:9c:b2:b4:30:f1:9c:39:
3d:bd:9d:85:27:2d:50:0b:1b:94:36:85:96:d9:95:5b:fb:49:
c5:93:fe:83:64:ec:c3:4b:71:02:38:1f:05:55:2e:1c:31:24:
79:d5:24:c2:3e:aa:64:ae:87:7e:9e:37:d7:36:b7:f6:50:b3:
39:8f:ee:d5:74:37:01:63:a3:31:7a:87:fe:2c:4d:f9:8f:99:
43:a4:dc:ed:1f:b9:92:46:67:c5:c6:88:87:80:16:8e:ee:9b:
9b:6a:7c:db:9a:7f:bd:52:5e:3a:e6:f5:ae:0f:5c:19:9f:50:
13:99:d7:6c:a5:8c:09:0e:ab:38:ed:60:23:8d:6f:3c:11:79:
cc:be:56:c3:ed:12:78:74:70:52:2b:22:b7:5c:80:7b:82:62:
cd:d9:d9:96:d9:e3:69:cf:5b:24:51:b8:c1:1d:89:3d:e7:a3:
1b:a9:15:4a:0c:92:2c:9a:4b:ca:47:a6:cf:a0:ae:4e:07:87:
b8:cc:0c:3a:7a:76:27:56:81:de:94:a2:f7:2b:5f:05:f1:da:
97:77:bd:00:b0:42:74:21:4f:a8:65:bc:cf:02:d7:3f:f9:82:
ac:3b:13:36:6f:a4:ac:98:72:04:00:b4:52:d1:37:44:59:78:
fb:ee:0a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:22:40 2025 by rpki-client