Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
File: HgxHunmaBgczODuKTbNuhLYtMV0.mft (raw, json)
Hash identifier: 6NgCNy9PxwizxxRooLRcNBr2Po44pNdUeon8Fsn8Umk=
Subject key identifier: B8:3E:42:4A:00:EE:CB:04:02:19:D1:3B:7F:41:4F:61:03:9C:7D:6A
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Certificate issuer: /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial: 019A70A56AAE3F1AFD5D76CAF080160CBC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
Manifest number: 14B3
Signing time: Tue 11 Nov 2025 02:01:20 +0000
Manifest this update: Tue 11 Nov 2025 02:01:20 +0000
Manifest next update: Wed 12 Nov 2025 02:01:20 +0000
Files and hashes: 1: HgxHunmaBgczODuKTbNuhLYtMV0.crl (hash: wNeEXYqTuf/uVj24VYarlNj3qeEnjQKdyu+vPTnC+hg=)
2: efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa (hash: Ks2lZAvTiIXOJHL4XOxVW69lFz0D0Ra18E8s7zHIoZo=)
3: xFzbq7zegADAXEC3JlJ8gW_VXDA.roa (hash: NRYhSLCd0Q4zIkCT1UgOQ1E2p+RPP3+6wGhkQgIto+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:6a:ae:3f:1a:fd:5d:76:ca:f0:80:16:0c:bc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Validity
Not Before: Nov 11 02:01:20 2025 GMT
Not After : Nov 12 02:01:20 2025 GMT
Subject: CN=b83e424a00eecb040219d13b7f414f61039c7d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:72:5d:46:7f:79:39:db:d7:f2:7d:42:a9:0f:
e9:ed:99:5f:0b:59:6b:c6:26:83:c9:8a:af:a0:49:
02:f3:24:87:bb:51:47:9c:b0:51:0f:6a:9d:bb:e2:
e3:35:55:67:84:5e:72:d3:5d:0f:c7:55:6e:d3:6c:
52:a2:9f:7a:97:a5:ce:ed:46:33:aa:38:cf:aa:42:
5d:80:45:52:c2:46:1c:c1:7c:e6:54:66:dc:55:0b:
5e:ad:a0:ad:0b:25:56:2b:5e:77:f6:25:4f:29:71:
81:b9:28:68:53:28:7f:15:1d:49:74:5a:65:57:cf:
74:fb:90:7d:e3:9f:7f:c4:29:79:ed:7f:c3:5e:c3:
71:72:20:f2:89:59:ab:be:20:65:c2:68:b0:45:fe:
1b:b2:75:37:9d:e0:8b:f0:92:cf:41:b2:40:22:eb:
89:fb:d0:cf:5a:bb:b9:51:06:ad:db:d7:78:cd:cf:
2a:c4:f5:d1:64:99:87:04:cb:48:19:46:cc:e7:bb:
91:ca:c4:33:7b:3b:de:d6:49:f6:74:4a:69:56:b6:
68:14:56:89:f2:a5:5e:bc:e2:0b:c4:91:26:da:a6:
ad:ae:57:18:ad:05:37:16:b6:e4:23:c4:72:94:04:
57:66:dc:a1:a4:e2:6b:b2:cb:71:e4:01:ee:90:28:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3E:42:4A:00:EE:CB:04:02:19:D1:3B:7F:41:4F:61:03:9C:7D:6A
X509v3 Authority Key Identifier:
keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7f:17:d0:9c:9a:f4:eb:c0:a2:43:bf:dc:11:5d:02:a6:f0:
0c:ef:0e:a6:36:12:a7:8f:6a:6a:1a:b4:43:00:a7:af:b4:ca:
df:9c:87:5d:00:7a:e1:ce:ad:aa:6b:f9:5f:cb:0d:9a:c7:8f:
58:a9:f1:61:5e:d6:be:3d:a3:a9:82:20:10:e0:c6:c0:77:f4:
95:14:a8:db:71:69:54:44:6f:93:49:9e:65:01:43:5e:33:d1:
7c:78:79:b6:22:10:d6:57:5f:e1:ee:6e:b2:09:c4:12:88:e1:
14:d0:61:fa:51:d2:1c:6b:b4:65:4b:ad:df:5a:67:af:5f:37:
61:02:d1:69:ae:b6:3c:78:24:89:2a:0d:fd:b6:c4:86:d8:20:
d6:2b:d4:40:ac:4a:85:15:de:68:cd:4e:61:ad:10:0e:42:96:
74:2c:67:89:20:01:fc:61:0f:3e:95:fc:c1:d2:0b:e9:08:ab:
7c:cf:f9:2a:a5:ff:19:65:52:4a:b5:47:32:1c:e5:f5:c5:f3:
bf:d9:c1:fe:6f:cb:4b:4a:db:a6:a0:9a:4b:9e:c5:1e:21:90:
a9:32:c6:53:87:f0:61:0f:1a:0d:d0:37:42:8b:81:37:5d:b9:
41:c9:6a:06:4c:50:79:19:cf:05:7c:39:eb:9d:1d:d1:5a:0b:
16:8a:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:09 2025 by rpki-client