Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
File: HgKySJ9HE5YtEFESslJ264HxrJA.mft (raw, json)
Hash identifier: VJ1fahE9mSc6xf9OEkkpzebBbebhP03+JlbMj25vK/o=
Subject key identifier: DB:60:C7:03:80:F3:BD:8C:5D:D9:07:54:A6:AF:4D:F8:EA:64:B3:A8
Authority key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
Certificate issuer: /CN=1e02b2489f4713962d105112b25276eb81f1ac90
Certificate serial: 019A71132512055A91CA6E2F109C8D016276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:01:11 +0000
Manifest this update: Tue 11 Nov 2025 04:01:11 +0000
Manifest next update: Wed 12 Nov 2025 04:01:11 +0000
Files and hashes: 1: 9V85HLFbpWnoHuwfi3uBdYCY9ZM.roa (hash: sWuFEcVAMiwExmVPdpvYCkHmeYDgX5Tn0zMIqcTEx/4=)
2: HgKySJ9HE5YtEFESslJ264HxrJA.crl (hash: XY3OflGjm5MyTpRsFmE9zbBK0fr2qvCbeoeU53/22f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:25:12:05:5a:91:ca:6e:2f:10:9c:8d:01:62:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e02b2489f4713962d105112b25276eb81f1ac90
Validity
Not Before: Nov 11 04:01:11 2025 GMT
Not After : Nov 12 04:01:11 2025 GMT
Subject: CN=db60c70380f3bd8c5dd90754a6af4df8ea64b3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:b9:87:be:90:e8:43:d3:76:be:61:67:6d:
5f:c7:c4:34:93:d9:80:6b:9a:54:2c:81:60:d4:be:
70:f4:c9:de:8a:00:73:7d:25:85:38:c7:25:92:e6:
85:81:6f:c9:c9:59:87:6f:2d:ef:13:89:b3:d6:dc:
c2:7c:fe:3c:d0:d8:f8:94:c7:4d:2a:5b:7c:e1:50:
64:0a:85:cf:a9:22:d8:ee:10:5b:14:e9:06:6e:fa:
6f:66:d7:3b:02:22:2b:71:ff:82:a0:27:33:fa:35:
97:6b:ec:89:73:8e:a8:96:89:ed:4e:86:ed:1d:28:
d6:a6:e1:9b:80:56:cb:90:cd:44:e7:a5:41:4f:55:
a4:dd:cc:38:c3:c1:9a:0a:fa:8d:a8:8e:ce:33:d4:
2b:49:cc:ef:c2:c2:0e:e1:fa:28:33:4f:ca:0c:70:
c8:09:8a:69:56:28:9d:e9:ec:a2:23:60:dc:c6:48:
67:aa:dc:51:35:b9:2a:b0:d5:d0:5b:8b:86:ee:82:
a7:c1:d1:03:b8:43:ca:1c:4e:40:c3:4a:c5:b9:44:
64:78:4c:43:8f:2b:d5:ba:be:a8:26:ac:d7:06:ce:
c2:0b:19:9c:25:e9:94:48:22:a9:ef:6f:1e:ac:7f:
0b:5d:a1:3c:c6:ac:3f:10:42:4d:34:79:c2:60:d3:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:60:C7:03:80:F3:BD:8C:5D:D9:07:54:A6:AF:4D:F8:EA:64:B3:A8
X509v3 Authority Key Identifier:
keyid:1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:92:09:b5:4d:71:ad:66:61:8e:34:48:e8:c9:45:18:98:94:
c8:65:a2:f1:87:76:82:2d:77:b4:2b:74:56:72:9c:24:91:b5:
32:73:f7:59:f9:8f:23:b3:cc:43:89:50:da:bc:ef:99:d7:6f:
48:b0:7c:2b:38:77:20:0d:3b:65:ba:31:04:87:07:99:8d:7b:
e4:b6:5f:2b:6e:15:bc:84:75:13:a6:60:07:0b:e6:fe:d3:1a:
57:77:cb:14:1d:01:b1:a4:a4:db:e9:65:68:45:4e:4d:fd:e3:
82:8c:70:45:8c:06:2d:30:30:39:43:78:0a:9a:92:a8:8f:8a:
1a:21:19:bd:0d:1b:88:3a:ea:34:02:80:4c:90:dd:a5:9e:17:
c1:8d:ca:18:47:d4:2d:35:7e:00:fc:cb:6d:27:cc:2d:67:3f:
47:31:74:1a:94:9d:4b:77:7a:5f:e7:ff:b4:ad:00:33:b0:e4:
e5:2a:17:38:55:a0:3f:cd:49:4d:ba:e1:cb:02:58:19:ce:19:
8a:09:4e:f0:73:4b:d7:24:36:88:a7:cc:25:51:96:37:67:e4:
54:ca:fb:47:1f:d7:4b:12:9c:96:1b:09:8f:cd:f1:d0:03:f9:
ac:0c:2a:fa:89:71:34:85:fd:d3:2e:3c:05:91:60:a2:0a:9d:
f4:f7:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:25 2025 by rpki-client