Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: o76W4VszlrUyOe/F05Jg3oyv/TqdjVZZDacHnUfj6b4=
Subject key identifier: 03:6A:DA:C6:68:3A:59:60:51:61:C6:81:D4:32:8A:1A:3F:DA:30:1A
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 019A706E16EAF886145F609962B37C5E7EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0C1D
Signing time: Tue 11 Nov 2025 01:00:54 +0000
Manifest this update: Tue 11 Nov 2025 01:00:54 +0000
Manifest next update: Wed 12 Nov 2025 01:00:54 +0000
Files and hashes: 1: FauikgvNNACdpAzUUwIbibw2Em4.roa (hash: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=)
2: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: hjsWcMr8bGR1Jy6+d8NYj31uYxkr7LJP3CikLwKf9gQ=)
3: Y5GCtBSidhvcw_3SSYUfDvMbzug.roa (hash: jacf0Q1rEeNMWmSXZkId8BlqjNp4I0/crgw/+VHO0/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:16:ea:f8:86:14:5f:60:99:62:b3:7c:5e:7e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Nov 11 01:00:54 2025 GMT
Not After : Nov 12 01:00:54 2025 GMT
Subject: CN=036adac6683a59605161c681d4328a1a3fda301a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:60:fd:8b:1d:1a:36:66:9d:63:83:3d:33:
7f:34:36:aa:e9:a2:c5:b8:f2:42:ba:76:69:1d:54:
12:b3:ec:a3:c6:2a:10:e0:5c:49:ae:f3:64:2c:1e:
51:90:23:a1:21:68:3a:5a:1c:75:d3:29:d2:81:df:
ba:61:15:a0:18:73:1f:81:a2:73:5a:cc:55:29:60:
d2:42:78:2c:fe:6b:46:bd:9d:4e:d4:fd:5c:84:cd:
a7:5d:f0:62:50:d2:69:e8:2c:a7:fa:52:70:f9:13:
91:3b:38:35:0b:e4:d2:c3:3d:d4:39:c1:92:bb:11:
7f:ad:b3:60:5e:79:9e:87:75:be:66:e3:d5:f0:9e:
c8:43:e6:15:22:7b:32:df:31:60:4f:3a:fe:37:a6:
9f:8e:68:98:5f:bd:21:9f:04:2c:40:58:f3:20:7d:
05:0c:95:78:27:9d:dc:9a:39:95:91:d4:fa:25:40:
68:c0:fb:88:15:42:50:a1:df:9d:e0:a7:f9:0b:c1:
37:8e:de:48:d0:58:47:b0:73:6e:3c:00:56:02:e1:
07:68:8d:a7:0b:74:c4:05:40:9a:79:15:a1:f0:20:
a7:31:1d:68:d6:d6:fb:3d:1a:97:3a:60:b5:2a:6e:
87:c0:1a:12:bf:8c:3f:5a:06:ac:6c:06:3a:83:9f:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:DA:C6:68:3A:59:60:51:61:C6:81:D4:32:8A:1A:3F:DA:30:1A
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:71:b9:70:69:06:d8:5a:9d:74:67:96:e0:31:ba:c8:ec:ba:
db:ed:af:77:ca:82:34:59:a9:35:8c:ba:a6:f7:d7:f8:54:e8:
0d:d7:89:ed:9f:7e:b5:c5:76:1c:2f:ec:a6:85:ec:63:45:36:
c9:e1:34:8c:f7:d4:c4:89:f8:11:91:5c:32:89:a2:bf:8b:7e:
87:cb:a1:49:47:cc:41:56:da:e3:3d:99:1d:88:b6:f2:46:54:
e9:d0:bc:c8:1b:74:0c:e3:80:fe:55:2b:1c:c6:7f:74:48:e5:
ef:b7:32:07:89:47:3f:de:89:22:c0:ae:7f:75:f0:83:dd:0a:
fe:13:7b:f7:68:7c:cd:97:5b:ec:89:95:a9:24:e0:1c:c6:4c:
46:85:1d:83:76:63:35:24:67:7d:cf:d2:73:3d:68:7a:63:9c:
62:de:e1:3e:ab:3b:af:eb:9e:88:79:71:3c:a2:7b:88:4a:0b:
57:24:ed:10:57:8f:ec:1c:70:d6:0e:bc:08:57:3d:f0:43:b3:
1d:29:a3:5d:f2:2a:37:8e:a0:f1:5a:e8:98:13:ff:3b:5e:9e:
9f:0a:bf:81:3c:8f:66:aa:f6:b7:9f:3f:3a:1a:28:3c:1e:70:
ae:38:79:c3:ea:ae:b1:a5:fb:9d:c7:25:93:85:00:8e:53:d7:
47:a4:41:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:33 2025 by rpki-client