Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File: HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier: 5e7QLv3JDqDQcOz5oG+ustYutcfmBuM1A1yqLror3rY=
Subject key identifier: 8A:75:96:59:02:EB:09:04:06:E1:29:19:44:CF:23:C4:83:E0:B5:73
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 019A725CA67B22B9FF1B290F9A43700A69C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number: 142F
Signing time: Tue 11 Nov 2025 10:01:05 +0000
Manifest this update: Tue 11 Nov 2025 10:01:05 +0000
Manifest next update: Wed 12 Nov 2025 10:01:05 +0000
Files and hashes: 1: DaVvwNhmLZ7YvB4G_4EErsgVRto.roa (hash: 9N2XrCoRGQ94Srik137EIdOpwG9c0HxGyO4AFS+YxkQ=)
2: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: x9PQuy/KGHMzujEy8xTRHg2MP9EsgnhqFZIFJAZUDpQ=)
3: IK01XRjBPLd-6jbRM6WX3KlYFaU.roa (hash: hpMtGTgtQBn7QaBbprX3PlSpi2a4sNEtbAx00Rc21hI=)
4: u1_Gd7VlEhZ3QqgjEg2OEC7gm14.roa (hash: NHFnan+4Era3/L1csOitqJI62J77zZalfXkxncagMSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a6:7b:22:b9:ff:1b:29:0f:9a:43:70:0a:69:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Nov 11 10:01:05 2025 GMT
Not After : Nov 12 10:01:05 2025 GMT
Subject: CN=8a75965902eb090406e1291944cf23c483e0b573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:b0:25:41:1c:96:1a:d9:91:78:d8:08:e0:
28:a1:ad:71:18:72:6f:77:5f:5b:ef:af:94:a9:3c:
86:34:dd:c9:df:c0:c0:56:ed:4b:1f:6a:7b:cb:f9:
a3:45:11:9e:a0:60:78:7f:97:c8:77:79:07:a9:e3:
67:95:85:ce:d1:3d:30:0c:a0:1c:73:57:6a:e8:78:
35:31:1d:c9:4e:c1:60:b6:8f:d2:60:2d:84:22:49:
be:ba:65:30:0a:e8:bf:b0:b7:79:75:94:d9:75:35:
7f:ff:2e:17:cc:ae:34:7d:cb:e9:0d:53:84:06:3a:
45:fe:c7:ec:7a:b7:2a:b4:b3:d4:e4:02:63:44:ce:
72:bb:59:96:31:90:d2:6a:bd:6d:00:d4:05:1a:9c:
69:1a:63:a6:9a:46:13:c8:3b:85:3d:d9:e1:12:f7:
27:c4:98:89:b9:16:ef:e3:2b:0e:d7:77:30:09:8d:
b1:97:d0:02:de:49:88:39:82:eb:1b:c8:64:4a:65:
be:b4:50:eb:62:49:a6:31:d3:ff:3d:5b:66:9c:f1:
b9:59:96:af:66:0f:37:d9:ee:d4:5b:9e:79:63:2c:
12:32:db:2e:87:52:4f:6e:65:bd:ed:a3:d8:d3:2b:
b8:0d:48:3b:32:95:1d:81:6a:58:a2:c0:ad:38:dd:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:75:96:59:02:EB:09:04:06:E1:29:19:44:CF:23:C4:83:E0:B5:73
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f6:88:8d:28:5f:95:73:6c:14:17:94:35:c4:10:15:c6:86:
ec:5e:36:83:38:e8:76:85:25:75:08:24:96:d0:f5:28:ee:86:
23:cf:56:5a:c6:34:e1:ba:66:66:b6:a3:9a:e8:c9:db:6d:e6:
72:59:97:32:d6:e5:0d:dc:3f:c3:1c:18:ea:c8:d2:74:d2:8d:
87:a4:a8:bf:89:ab:a0:67:b8:09:d2:bf:e8:86:09:b2:91:da:
cd:96:bc:09:d6:d9:c6:b0:16:e8:90:34:df:b7:57:56:93:d2:
e0:d7:8b:b5:9b:b7:38:ec:aa:50:08:2c:21:8c:77:d7:cf:e2:
25:62:35:70:97:e5:cf:ca:a1:33:38:13:dd:98:20:ff:a2:1c:
0c:ac:10:2d:73:28:e3:38:e5:23:28:2f:c5:26:02:3c:fe:31:
11:a5:f9:d8:24:3b:fa:80:39:ef:35:5e:7e:4a:83:cf:e8:04:
56:d2:02:0a:77:d0:ab:e6:5b:03:6f:85:8d:90:a6:1a:5f:17:
e0:d5:94:6d:da:c0:73:88:0f:d2:03:61:b5:ba:ea:9b:bb:89:
2d:0d:9c:2a:ca:2e:a0:4e:d9:d5:4b:3b:c2:b4:43:ff:7f:4e:
b9:e1:11:4f:16:43:8f:79:56:ce:c3:70:ba:32:02:4e:70:17:
5a:ad:66:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:49 2025 by rpki-client