Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier: zkiVxgWoTJ13WTlocDTvEuoLSbQ013O5dRIEY+sNeIQ=
Subject key identifier: E8:07:DF:13:84:27:D4:96:E5:EF:D2:93:E9:FC:A8:C7:D4:79:89:23
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 019A725C77BED5BA8CB957262411FB88328B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number: 01D5
Signing time: Tue 11 Nov 2025 10:00:53 +0000
Manifest this update: Tue 11 Nov 2025 10:00:53 +0000
Manifest next update: Wed 12 Nov 2025 10:00:53 +0000
Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: oBGRNvlDxfHyHe/rN9My5oPGuT3uwF9cIWoys85w4RE=)
2: NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa (hash: wYz2fmfXZeLSC/FkxxCfmscRdqW9p4YQgw0dEkDtFvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:77:be:d5:ba:8c:b9:57:26:24:11:fb:88:32:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: Nov 11 10:00:53 2025 GMT
Not After : Nov 12 10:00:53 2025 GMT
Subject: CN=e807df138427d496e5efd293e9fca8c7d4798923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:36:c1:f1:df:81:8d:38:b4:99:a5:74:00:13:
d6:eb:b2:51:9a:c5:1a:5b:72:17:df:8f:36:ac:21:
30:d5:9d:63:fd:c9:bf:a7:07:33:70:85:36:34:c9:
ae:b7:2c:2b:93:d2:92:a3:17:e5:5b:3e:07:83:0e:
c9:3e:47:b2:1e:55:03:dc:87:3d:c4:0f:01:b2:9d:
85:44:02:fb:2e:a3:35:8b:d2:1c:b5:58:78:e4:40:
74:70:58:cd:ba:bd:f3:f8:7f:65:52:14:86:a6:86:
97:ba:21:1b:c6:0e:d4:80:cb:a7:63:12:3c:61:22:
7c:f9:cb:33:a4:73:e0:d5:32:9f:5a:93:5e:60:ed:
af:21:61:ef:7d:43:a4:6f:19:a0:eb:8e:a4:aa:44:
1d:15:a2:70:ba:fc:76:93:8f:bf:24:c1:88:b9:5a:
26:d5:c6:5a:fe:3e:8f:f8:84:9f:59:55:ca:d9:3b:
ab:42:b1:a6:56:b2:a2:82:fb:7f:01:89:17:db:73:
5d:94:71:f8:a6:a2:cf:5c:a6:ff:22:53:b3:56:a0:
d6:4f:1d:d1:df:08:49:05:0c:5c:b7:e3:78:ea:91:
80:85:e5:3b:7d:76:0f:6e:96:7e:c0:6a:c7:ab:57:
ba:70:30:ca:0a:fd:f6:9b:37:11:f9:36:e5:e4:a2:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:07:DF:13:84:27:D4:96:E5:EF:D2:93:E9:FC:A8:C7:D4:79:89:23
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:54:20:57:99:63:a3:82:b5:63:91:9b:b3:b6:ce:75:68:dc:
5a:8f:be:13:73:d9:88:18:0a:16:64:52:d4:84:8e:9c:43:47:
d1:41:6a:98:77:33:56:9a:99:a2:ca:1d:97:a3:f3:39:77:ef:
28:b5:6c:1e:61:de:60:d6:aa:24:2f:12:22:00:e1:aa:a0:e2:
be:e0:e7:75:bd:8f:b9:4c:61:f5:4e:7c:fb:20:2f:63:ea:36:
4b:12:56:da:17:c8:40:2e:d2:27:35:46:cf:29:9d:3c:a3:b0:
71:d3:dc:eb:94:01:b3:75:4b:03:41:31:2d:96:7e:0d:1c:42:
b1:ef:47:1e:20:46:b0:82:b4:09:d0:fa:73:f5:ec:9c:43:a5:
92:f9:73:3c:22:54:ad:ea:2a:59:95:6a:ea:ec:3b:6f:6b:49:
dd:55:69:0c:55:28:1d:60:d1:4e:b1:7a:24:6b:fe:13:74:b6:
7f:01:d7:8a:6d:f2:5b:6e:18:47:40:d9:52:f9:4c:69:40:47:
78:d2:e9:b1:8a:a5:0f:f6:ad:58:b1:7c:03:d4:77:60:5a:a6:
93:0e:26:c0:42:06:58:1c:cb:0f:7a:8a:69:72:21:ec:98:32:
c2:41:12:8d:f3:50:e8:05:26:05:cd:76:29:21:30:27:c3:3a:
1c:92:8c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:57:05 2025 by rpki-client