Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json)
Hash identifier: RipcvwfeJ61CbZUHMihSDSLO24HAYL1klGW1Ua9vjIs=
Subject key identifier: 9C:75:AF:65:AB:D4:1C:3B:EF:80:7C:4E:61:A1:B3:BE:D1:37:EC:77
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 019A73A6DCFA3F4BEE2BD689EE503D0DE32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
Manifest number: 0F82
Signing time: Tue 11 Nov 2025 16:01:46 +0000
Manifest this update: Tue 11 Nov 2025 16:01:46 +0000
Manifest next update: Wed 12 Nov 2025 16:01:46 +0000
Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: UUeXZ/tvVGqOzVMmPkAMC4kUCQDwFAND/zgj5Ss4EuQ=)
2: QTjz4VGR-GTFrRo0tluoiHJIBec.roa (hash: cV6m/fRf828h8WvDtj1b9iihpVzZghXy5TyXPUcK2IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:dc:fa:3f:4b:ee:2b:d6:89:ee:50:3d:0d:e3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: Nov 11 16:01:46 2025 GMT
Not After : Nov 12 16:01:46 2025 GMT
Subject: CN=9c75af65abd41c3bef807c4e61a1b3bed137ec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:07:c9:f1:4f:b5:56:a0:e3:3d:35:24:64:
c9:8f:34:af:23:31:36:1f:41:dd:bf:ef:75:ae:10:
60:1f:b5:d9:fb:7a:d0:fa:09:16:90:e6:7f:48:26:
79:77:9f:39:ec:93:db:00:0a:a5:31:e1:f9:4e:65:
2d:5a:d6:43:4b:d3:2d:1a:ff:d5:8c:da:36:f0:7b:
db:57:71:fa:1a:14:64:7c:4e:b1:36:f7:3b:21:60:
66:e4:db:60:c9:5e:25:7f:b6:24:05:7b:07:c4:40:
dc:4d:73:cd:11:5b:ee:c3:d0:42:9c:2c:a9:22:4a:
46:18:23:6d:78:b8:38:12:1e:c9:4c:9a:3c:7a:93:
94:98:4b:84:74:38:b5:5f:b2:bd:a0:56:4d:4c:8e:
28:71:12:14:ab:17:07:ca:42:2b:d0:da:27:4c:3c:
14:9d:54:f8:15:6d:1f:e6:1d:7e:1c:62:e7:8b:37:
75:96:82:dd:a2:32:e1:57:78:96:0b:ab:c9:d8:fb:
e7:34:dd:6b:06:cc:4b:7f:70:d1:ea:27:35:83:aa:
56:1d:d8:d4:a7:73:dd:11:28:70:c4:34:02:a1:04:
7d:79:d8:3e:c2:3a:4e:5b:3c:f3:8c:39:33:42:37:
36:12:fa:fe:66:40:02:0a:8b:a0:b3:c1:33:9d:3a:
ef:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:75:AF:65:AB:D4:1C:3B:EF:80:7C:4E:61:A1:B3:BE:D1:37:EC:77
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:33:3d:f4:ea:b0:6b:08:f6:b3:10:16:dd:6e:24:b8:a2:89:
9d:46:e4:da:96:93:9a:19:32:37:b1:22:3b:c4:ba:ef:86:ad:
df:e3:99:e6:66:10:d0:ae:6f:a2:f4:6c:54:6d:13:c6:15:2c:
35:0d:e5:1c:42:b3:76:14:75:d9:12:1f:86:ed:8b:d3:19:af:
ff:c5:2a:bd:0d:e5:47:8a:37:fd:bb:d4:5d:7b:4d:81:1f:aa:
17:2d:22:91:44:a4:6e:38:bb:29:37:6f:f0:ec:ef:7b:17:3d:
e4:46:ed:9e:27:5d:f0:ad:c8:ab:78:7e:f0:1d:45:61:07:7d:
5f:fa:42:51:fb:cf:14:5b:07:7e:46:bd:4f:c7:eb:d2:f5:f3:
e2:b8:22:4c:22:56:16:b3:3a:bc:8c:f9:f4:55:92:72:f6:5a:
89:b5:1e:02:bc:0a:7e:a6:f5:26:4d:b3:68:c4:9a:e4:73:7e:
c7:42:24:31:b6:e8:28:f8:a2:b9:99:c8:a6:19:65:d8:b0:19:
3d:5a:57:83:a8:df:ad:b1:59:4f:41:5f:f7:a7:64:14:1e:6a:
18:66:86:b5:2a:6f:fc:41:36:f8:00:bd:ba:a7:1d:f4:bf:50:
d8:ea:b7:13:e4:54:da:8f:90:1e:3d:cd:d7:94:63:8e:07:7a:
a8:b2:0e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:39 2025 by rpki-client