Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier: PmQ8vQQVWm9CjCAYaUmqHtZMQmprcF+Czv5QZh8oHrg=
Subject key identifier: 04:5A:C7:83:62:89:88:30:F3:3B:85:22:14:67:96:C4:77:08:A5:26
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 019A73014B1AF1250662DC173E66A48219E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number: 14B0
Signing time: Tue 11 Nov 2025 13:00:55 +0000
Manifest this update: Tue 11 Nov 2025 13:00:55 +0000
Manifest next update: Wed 12 Nov 2025 13:00:55 +0000
Files and hashes: 1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: AhaY2k5pwJJDu+0g9OI5hqjtSc76YCvcamjUV/l824c=)
2: siSVK589afKFmNB4xui803eAFA8.roa (hash: pIfAtolx6StiwhL02gSeSu2zm+FTXp7cgi/yqREz08c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:4b:1a:f1:25:06:62:dc:17:3e:66:a4:82:19:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Nov 11 13:00:55 2025 GMT
Not After : Nov 12 13:00:55 2025 GMT
Subject: CN=045ac78362898830f33b8522146796c47708a526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:80:10:1a:9d:61:95:fc:e5:82:d7:28:34:
11:c4:1c:69:da:df:db:d8:1c:48:82:2a:8b:21:a8:
5e:76:3d:03:d0:8f:c2:d4:75:da:56:72:66:0c:f9:
ef:f2:3b:5c:74:5a:51:d1:62:6c:16:9f:e0:dd:d4:
25:ed:cb:21:64:04:9d:5b:9a:c9:1d:4c:cf:a2:ae:
89:03:a7:5e:cc:8c:74:77:65:43:bd:59:86:cf:85:
6e:12:34:74:83:ea:70:50:e3:7c:a9:b9:86:3d:42:
e1:cb:d6:be:92:a2:25:3f:87:e1:74:ca:24:3b:a3:
d3:6b:74:da:bd:7d:ff:c3:7c:7d:03:77:ae:4c:cd:
f0:0e:e4:aa:b6:37:5c:86:ee:4c:a6:78:df:9b:04:
0d:91:1f:3c:b1:86:1b:af:48:4a:48:67:cc:96:c3:
5f:98:74:96:9f:26:21:d8:08:05:33:13:9f:28:06:
db:aa:a4:97:7b:d0:d5:ea:93:28:b5:46:2d:83:dc:
bb:77:60:05:aa:1a:40:ad:be:1f:67:2f:66:8e:fb:
5e:70:a5:e7:94:da:a2:97:1c:81:a7:7f:68:f3:d1:
21:dd:89:e6:0b:40:43:21:dd:1d:f1:9c:4d:9f:86:
66:b5:be:6f:96:c6:c7:aa:64:9e:57:c4:6e:2f:e7:
31:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5A:C7:83:62:89:88:30:F3:3B:85:22:14:67:96:C4:77:08:A5:26
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7a:c1:e6:c3:b2:ad:e8:b9:32:bc:5f:85:94:08:1b:ac:eb:
c3:36:80:63:d0:9a:d8:4a:75:61:46:d6:63:2d:b6:bb:6e:e1:
37:d7:92:09:8d:c1:44:2e:7a:50:1e:64:5f:51:f2:5b:9b:c8:
31:7a:2c:94:da:f3:84:d2:a0:a9:56:9a:d3:f2:de:69:cc:6b:
f6:a0:9c:c8:a2:fd:52:54:14:df:9d:75:b5:29:44:8c:6e:96:
bd:6d:55:8e:c9:f2:cf:b6:7c:b9:8b:be:f0:e9:a3:0d:57:53:
a1:93:99:22:98:09:0a:93:6d:7c:91:f3:54:6d:0b:d0:a9:6b:
98:39:a1:aa:2a:eb:8d:06:b5:79:77:f3:4f:7d:8e:9f:16:46:
af:61:0f:7d:09:11:d5:2f:9c:5d:44:6e:91:11:4f:9f:81:43:
fe:f9:86:c4:6c:74:02:77:4d:3f:0f:87:2d:29:51:e8:6b:69:
fd:5a:61:5b:30:8e:c9:52:47:40:e6:17:d0:46:70:c0:8f:d1:
51:c3:5d:bb:11:df:2c:37:8b:a1:c8:1c:68:6d:4e:da:e9:88:
9c:5f:71:57:04:b1:22:ba:4e:37:9e:0b:6f:7f:98:d2:13:31:
cb:00:28:8c:9f:d4:5d:12:cc:d4:8f:06:77:52:da:79:74:4c:
70:69:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:34 2025 by rpki-client