Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
File: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft (raw, json)
Hash identifier: hbSDIY+xX+6nZ1yHQref4cEevXO6RFYTl/9ghOnZOKc=
Subject key identifier: 93:EC:55:03:C4:85:03:18:81:44:21:23:4D:10:2D:C6:55:C9:5A:80
Authority key identifier: F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
Certificate issuer: /CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Certificate serial: 019A7112CDF60CAE5BEB6FA515329F1872A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
Manifest number: 14D4
Signing time: Tue 11 Nov 2025 04:00:49 +0000
Manifest this update: Tue 11 Nov 2025 04:00:49 +0000
Manifest next update: Wed 12 Nov 2025 04:00:49 +0000
Files and hashes: 1: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl (hash: zSYmZUC2SXJ3uIdFUVVgKbP0xeIWOxw9thNBB0PJCnw=)
2: IPJ2H-DbyJS39-MqiGd6rorhNdk.roa (hash: s/YiZX5EGRobWwsqigpJwSULaBic38Nv8k8vwPxeO3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:cd:f6:0c:ae:5b:eb:6f:a5:15:32:9f:18:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Validity
Not Before: Nov 11 04:00:49 2025 GMT
Not After : Nov 12 04:00:49 2025 GMT
Subject: CN=93ec5503c4850318814421234d102dc655c95a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:62:d8:f1:cf:c2:6c:59:d5:a9:51:e5:d2:
fa:6c:30:79:4f:22:90:ab:55:9d:6b:8a:a5:6b:79:
91:11:83:76:50:b6:ce:0a:71:e0:67:71:30:d5:6d:
62:13:11:97:c4:14:e9:c4:96:7d:11:4f:ef:c0:c3:
a3:2c:59:e7:1a:ad:49:16:0d:53:00:21:5a:ed:e7:
8e:fb:ee:f6:7a:b7:37:6b:fd:58:cb:7f:47:7d:d6:
ff:ee:f5:c1:7b:e6:73:63:5f:28:f0:99:26:5b:78:
ff:fe:f9:b3:6b:d9:59:15:eb:1c:68:b6:40:75:54:
52:f5:89:62:b7:a6:10:83:f3:84:6b:87:5d:7a:67:
6c:0a:a0:3a:76:25:eb:f8:02:9f:c0:4f:ca:2d:01:
a1:f4:16:16:ab:50:ab:33:4f:6d:62:7c:0e:ba:06:
44:a7:7c:9e:b4:d2:5e:67:d5:ff:0e:05:4d:c2:b2:
7f:d5:c7:80:a7:53:f0:19:d5:35:aa:a4:b0:07:50:
01:17:ac:9b:73:bb:7a:0a:0d:1b:94:15:1a:47:c6:
fb:86:03:45:db:e4:16:4c:5a:76:66:25:ad:83:c2:
0d:61:38:5c:03:d5:87:86:76:65:4a:b2:6c:50:0b:
0a:93:d4:2a:76:87:55:1b:50:18:64:a1:80:0d:cb:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EC:55:03:C4:85:03:18:81:44:21:23:4D:10:2D:C6:55:C9:5A:80
X509v3 Authority Key Identifier:
keyid:F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ef:89:18:a1:56:72:c2:2a:d6:04:1a:6e:1f:08:82:5e:a9:
25:e0:dc:3b:b9:99:35:9c:cd:4d:3e:be:a2:9c:33:2b:5e:da:
93:c1:5b:88:78:de:ce:fb:d5:5c:13:13:6b:5c:ce:5d:6d:86:
1d:0d:3d:00:0c:72:72:b2:cf:58:44:ab:1e:20:df:80:33:83:
ef:a6:25:40:db:bd:7b:bb:c2:37:84:36:bf:f7:a7:4f:74:84:
8e:82:53:3b:d3:f4:be:20:a6:28:53:07:2a:b8:aa:c4:a7:f2:
12:3d:35:a6:b4:f4:48:99:18:09:5a:a2:25:42:77:d8:81:50:
06:7d:da:cc:b9:04:73:ef:ba:43:83:02:db:b4:ac:d3:f6:2f:
9b:aa:94:07:85:f9:5e:9c:86:c6:6e:49:9f:ae:73:97:2f:24:
5b:7f:8d:52:eb:d7:bc:77:35:29:05:c3:5f:94:4f:a6:9c:91:
41:8b:db:63:53:ca:bd:d5:93:79:aa:3f:a8:ca:aa:87:a2:69:
a2:e0:eb:52:98:29:81:3f:9c:46:5b:35:dd:fd:65:de:29:49:
30:95:c2:d7:af:8a:2f:5f:91:22:ae:1c:4e:95:6b:46:92:d0:
50:86:d0:c8:f0:cd:33:a2:4e:31:53:a2:33:c9:6b:43:4e:10:
66:87:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:40 2025 by rpki-client