Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
File: Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft (raw, json)
Hash identifier: zCEf+r4qUXoMGTidenERdrSo07fLG5larWXMgc0skVs=
Subject key identifier: 89:6C:A5:B4:E7:E0:D0:09:0F:1E:3C:E9:A5:F7:48:C2:EF:35:AF:09
Authority key identifier: 1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42
Certificate issuer: /CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
Certificate serial: 019A73015199DA101AF4C372442E3D04C803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
Manifest number: 1632
Signing time: Tue 11 Nov 2025 13:00:57 +0000
Manifest this update: Tue 11 Nov 2025 13:00:57 +0000
Manifest next update: Wed 12 Nov 2025 13:00:57 +0000
Files and hashes: 1: Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl (hash: 3r4qasL1a7Fj5Cg8sl7VbNNSr9jn7tFmm1hqn8Z+CDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:51:99:da:10:1a:f4:c3:72:44:2e:3d:04:c8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
Validity
Not Before: Nov 11 13:00:57 2025 GMT
Not After : Nov 12 13:00:57 2025 GMT
Subject: CN=896ca5b4e7e0d0090f1e3ce9a5f748c2ef35af09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:be:61:3f:34:0d:3e:1b:34:7e:18:3c:5e:
ea:cd:af:ab:d3:43:c7:11:7d:18:50:a3:1e:b0:c1:
29:2d:95:b2:bb:6a:80:2b:06:b4:b6:a8:09:31:45:
a1:2d:5e:74:2f:f5:8a:2a:91:4d:e1:82:f0:2c:50:
f1:ed:5c:d0:d2:02:34:ba:24:b1:4f:46:69:c3:16:
ab:34:72:ee:1a:b0:88:4d:0b:12:10:71:0f:2f:59:
82:6b:fa:bd:50:ec:4d:ed:75:81:06:e9:fb:83:a2:
36:21:e1:f4:3f:25:6d:66:70:56:d8:11:92:7f:46:
f7:b1:bb:f5:8b:a1:46:71:ec:09:59:48:87:35:03:
63:e6:54:62:00:a4:6e:fa:39:b4:f9:0f:c2:81:10:
57:5c:b7:64:07:b7:18:97:95:f7:29:5c:41:db:a3:
bb:a4:bd:b4:53:ec:12:74:85:c3:c1:83:2f:86:7b:
a3:91:19:8d:94:f2:dd:df:21:2d:fd:03:fd:8c:ad:
0b:5d:33:af:fb:98:3a:e0:03:c1:9b:02:80:af:c9:
f7:f9:c8:ec:c5:22:b8:35:b5:ab:4f:3a:e1:1d:39:
68:f5:c6:72:89:85:dd:c1:e3:eb:00:ce:2e:c2:19:
eb:76:49:88:1c:94:ea:a1:4b:63:b5:2f:c8:ae:0b:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6C:A5:B4:E7:E0:D0:09:0F:1E:3C:E9:A5:F7:48:C2:EF:35:AF:09
X509v3 Authority Key Identifier:
keyid:1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f8:b7:b6:ca:3e:9b:11:f4:d9:16:95:d4:38:99:a4:96:f3:
ca:e9:c1:f8:7e:c1:ff:4e:6c:6d:83:14:51:5c:d5:0b:55:e6:
ac:2f:15:37:ba:39:fd:2d:54:0a:f0:45:dc:0d:d1:cc:03:dc:
13:ed:54:ab:37:9a:e9:18:85:03:65:a2:54:65:4c:85:6e:ad:
d6:8c:c8:22:09:71:63:ad:19:c6:6a:a1:36:25:0e:32:85:f4:
b1:e1:89:7a:b3:08:08:94:69:92:5d:d4:73:98:d5:4d:ec:01:
2d:f9:0b:ee:0c:05:2e:6c:71:25:cc:9c:7e:d2:1f:4b:0d:7d:
ee:1e:96:24:f2:c3:36:3f:9f:e0:ed:80:f1:6a:4b:da:05:08:
d5:96:aa:60:49:33:ed:c1:02:f8:58:0b:f1:5c:f4:db:42:4d:
5e:3c:66:bb:9a:3d:2e:ca:e6:19:f1:d6:a4:1e:c6:2a:2a:67:
c6:c5:70:37:dc:14:6a:3f:68:9c:39:c9:98:57:0f:d1:52:d4:
92:1c:e1:5d:7e:cc:9f:fa:7f:50:79:e5:1d:fd:e8:28:73:54:
41:d0:61:04:80:e8:fa:5a:aa:7d:06:b6:c7:76:28:07:ff:b2:
e5:f0:8e:e9:bd:f4:b9:0c:ef:4a:83:2c:ea:86:2c:05:cd:73:
4f:cd:da:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:55 2025 by rpki-client