Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File: HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier: BGtrkH6qSjedIIdRW8nejjHVM0xfLBw0twZ8/+ILX/A=
Subject key identifier: AC:2E:A0:D1:BC:25:DF:86:45:C0:A6:8D:0C:71:8A:56:EC:A6:EC:79
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial: 019A71B803EAD352025E1B5B9F9BD0C865A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa (hash: nSw+Z2r+tEaSc2AQgef90FTr8oKptJDQ2v6jPAQnhGM=)
2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: ttvtHKMSrD4St73Xr9zD5UmyiMvv0f3OouQo46EGp0o=)
3: HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa (hash: XR9eo2BAwqzrJQjS2GXKNqFXgZew/uNp0g76elzf6UI=)
4: q-KsgHc87yurkiTPrGB6_ENn-Sg.roa (hash: cFavBWqarVDA4XfAipmh7/d8krk6AEiGb/atvWyd1pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:03:ea:d3:52:02:5e:1b:5b:9f:9b:d0:c8:65:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=ac2ea0d1bc25df8645c0a68d0c718a56eca6ec79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:bf:34:c8:00:77:38:f8:24:77:f8:01:cb:
09:95:c2:e3:b2:2f:e6:a4:11:26:77:1d:7b:ec:50:
53:53:28:a0:2d:ef:89:3c:d0:70:15:8f:e5:cc:1f:
94:97:34:34:5e:c2:a6:56:b8:b5:5b:c9:05:42:75:
33:cd:aa:22:e7:85:ca:40:f2:c4:b6:77:b1:11:e7:
6a:ad:0c:f1:ca:64:ac:f0:e3:9a:3f:a8:f9:da:4d:
3c:eb:09:ef:3b:21:12:a0:16:b8:db:e8:bc:cb:f4:
38:c5:a0:ad:65:45:00:f8:38:75:e8:b3:95:9c:64:
dc:76:50:ff:26:24:1a:56:24:33:ba:3d:2a:7a:2f:
88:6f:d9:90:f3:56:0c:aa:47:dc:59:96:1f:4a:7b:
9a:c1:22:6a:b1:d6:bb:0d:b9:8b:5e:41:f4:e1:61:
a6:49:86:52:16:36:9c:a8:76:bb:96:c5:fc:8f:48:
7a:69:f7:59:0a:b7:f9:2c:52:47:37:40:df:b5:fb:
29:4c:e9:8f:ce:a6:5e:2c:38:bc:23:44:13:33:c7:
c9:19:8e:b9:4c:cc:e9:9f:aa:1b:60:6e:1d:e3:69:
ea:43:79:e0:5a:f4:d6:4b:32:76:f3:a9:85:c7:f7:
3f:c1:15:ab:c6:9a:85:3b:70:a9:20:91:70:27:f7:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2E:A0:D1:BC:25:DF:86:45:C0:A6:8D:0C:71:8A:56:EC:A6:EC:79
X509v3 Authority Key Identifier:
keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fa:e7:51:be:bb:00:b0:2d:0d:f5:75:0f:5e:58:0d:0b:be:
b0:d6:61:6b:9e:c1:2d:d0:e3:23:81:ba:aa:74:be:ba:bd:5e:
1b:aa:d0:4b:36:04:4d:c6:18:c9:1e:7c:eb:a4:b0:cd:b8:a0:
b9:ac:50:ab:61:83:67:08:d8:fc:51:a1:47:30:6f:7f:b5:cf:
08:db:56:a3:ec:44:ab:15:6b:f8:72:1d:32:ff:78:93:17:df:
5a:16:44:25:46:2e:30:b6:58:16:88:fd:8f:a3:48:f9:6f:23:
fd:77:bd:10:6b:a9:61:8d:82:64:71:9f:f9:1f:c7:a9:19:2c:
f8:90:e6:bc:69:e2:21:61:dc:a5:86:93:2d:a3:a2:26:48:3a:
7f:21:db:06:5f:a6:2d:3c:bc:38:16:49:89:6d:17:9e:8e:b9:
24:67:d5:eb:39:59:25:e3:15:8e:e1:87:d7:93:00:d0:bc:27:
0c:f8:0a:44:a1:c2:d7:d6:73:9a:9d:02:ac:b0:03:21:e5:44:
40:48:d5:67:69:19:bc:70:7c:54:2f:d6:3e:28:db:26:cf:80:
30:56:02:2c:80:90:f5:f4:cf:bb:14:c8:5d:c2:46:e8:be:1c:
f2:7c:60:91:06:18:c5:c2:a2:e4:be:f0:44:ba:d0:51:95:32:
0e:38:52:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:40 2025 by rpki-client