Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
File: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft (raw, json)
Hash identifier: 6mx1OeOnTPwPtcDNn5KNaeCtQeRiLTeLsneR0XccVyc=
Subject key identifier: 6B:C5:A6:1E:A6:64:8A:78:B6:C0:C8:2C:D9:7F:C6:BF:C6:99:3E:A1
Authority key identifier: 1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
Certificate issuer: /CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Certificate serial: 019A71B8D8A464CC9075FA6566E3E261FFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
Manifest number: 107B
Signing time: Tue 11 Nov 2025 07:02:10 +0000
Manifest this update: Tue 11 Nov 2025 07:02:10 +0000
Manifest next update: Wed 12 Nov 2025 07:02:10 +0000
Files and hashes: 1: 5pynZFAsqvPIGH5-PXLgAGK58mA.roa (hash: fBc4s8OOq/rbaknM5GE/ZQ9xYBiAMIuTqJlNTn46D0Y=)
2: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl (hash: K40s3aHtme1nK0d4xXGhDY35CL8UNJqFgKG5Tqe+9aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d8:a4:64:cc:90:75:fa:65:66:e3:e2:61:ff:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Validity
Not Before: Nov 11 07:02:10 2025 GMT
Not After : Nov 12 07:02:10 2025 GMT
Subject: CN=6bc5a61ea6648a78b6c0c82cd97fc6bfc6993ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:7c:70:b7:af:58:7a:e3:f3:a6:02:b9:df:
0f:a6:ae:6d:d5:08:c3:c7:6d:1e:91:44:8a:30:6b:
ae:ab:f7:07:de:b0:e6:67:2c:95:f9:f4:6e:f6:39:
b4:7b:cb:ee:1f:fe:53:ff:57:f5:5b:b9:a2:49:a1:
c0:6b:1b:e4:8d:e3:e2:28:6b:73:ed:7c:a8:39:c6:
38:39:f4:df:40:86:58:7b:07:f6:ee:d7:af:e6:dc:
c6:f4:e5:a0:93:18:5d:09:a9:52:62:3e:85:8c:1e:
05:01:4d:fa:d3:11:74:17:65:2a:94:99:91:ab:1c:
19:eb:7e:b4:99:2e:e1:8e:f9:ed:be:9b:91:a6:8d:
a6:10:69:84:38:ba:1b:98:fd:04:bb:aa:3d:14:8b:
aa:f6:7e:ea:e4:02:42:87:55:89:4c:02:0b:a0:1e:
d0:ea:50:5d:1f:68:e6:73:2f:bf:04:45:e7:bb:ea:
e8:18:20:f3:89:6b:76:67:31:6d:f6:3a:d7:b6:b3:
20:81:90:75:da:4e:19:66:9d:e3:5a:8b:89:4d:23:
fc:06:ce:72:27:98:ee:22:d4:8f:4a:69:ce:39:e2:
ec:4f:3b:2f:3a:11:56:db:05:12:df:45:78:20:10:
41:0c:b0:2a:dd:88:90:45:31:9c:1c:98:0f:17:d9:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C5:A6:1E:A6:64:8A:78:B6:C0:C8:2C:D9:7F:C6:BF:C6:99:3E:A1
X509v3 Authority Key Identifier:
keyid:1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a7:d4:6e:96:e8:1c:25:76:04:56:f8:f4:99:4a:23:92:40:
27:f9:33:cd:53:e0:52:d3:96:2f:70:77:00:c5:d3:b5:10:2e:
95:a8:70:79:4a:1b:24:d0:63:93:67:b6:5d:7a:4b:f0:85:53:
e4:7c:fd:86:f3:4f:32:3e:62:2a:8e:d0:4c:ee:71:52:22:f5:
5c:ba:c9:80:83:e2:33:a6:b6:4c:8d:48:7f:69:3a:b9:06:6f:
43:c8:5d:27:da:fd:f0:4e:bf:e4:35:3a:b3:40:ee:76:dd:7f:
89:ff:e0:49:6a:87:a9:0d:1c:f7:5b:78:e9:44:20:0b:6e:77:
bd:e3:1f:cd:2c:32:3f:53:04:d5:9e:58:a6:b0:1d:ad:b5:9e:
f8:a2:df:85:29:da:72:00:26:07:57:4d:76:e1:6b:e2:fd:25:
22:6e:ef:02:d8:2c:35:b3:91:4d:ea:61:a4:a0:87:67:a7:71:
f0:a2:df:c2:4a:60:52:3d:fc:bb:7d:5f:14:43:d8:c3:f9:bf:
1c:00:65:5e:f3:ba:17:19:8a:23:87:51:f9:de:a2:66:9c:c5:
a1:1e:57:31:85:e1:24:f1:7a:b9:f9:cf:d7:c8:12:56:6c:33:
9d:ab:9a:c0:f3:50:95:b6:a2:f9:83:42:b1:3d:a6:db:fe:ea:
d7:8c:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:46 2025 by rpki-client