Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: o7mzY46FV/xCHqW0G6jmM0I4Yb1Z9X3M68jvPRFzI0g=
Subject key identifier: 63:22:61:1F:AA:6A:92:32:B0:BA:A5:47:4C:71:02:9B:60:B3:8A:9A
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 019A24E60963778E4CA22E2BE77C8A1F1864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 06B7
Signing time: Mon 27 Oct 2025 09:00:46 +0000
Manifest this update: Mon 27 Oct 2025 09:00:46 +0000
Manifest next update: Tue 28 Oct 2025 09:00:46 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: igPvOzuMm/7U82reoEVqB74jfkN4Ju6iWpG+UnSEud8=)
2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:09:63:77:8e:4c:a2:2e:2b:e7:7c:8a:1f:18:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Oct 27 09:00:46 2025 GMT
Not After : Oct 28 09:00:46 2025 GMT
Subject: CN=6322611faa6a9232b0baa5474c71029b60b38a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:07:44:1b:5d:6e:a8:31:08:f8:af:4b:f9:
1e:6b:9e:3c:ff:08:34:57:6a:2c:79:15:93:05:e6:
4c:f9:11:ff:dd:24:5e:ac:06:31:9c:d5:a2:53:be:
99:4b:1f:db:dd:21:e2:c4:bb:55:6a:a9:97:95:05:
74:09:db:f6:f1:96:83:d4:f8:98:3f:21:d0:1e:80:
1e:15:e5:c3:61:b8:6a:be:6d:5a:5f:41:f3:16:95:
ce:e0:84:5c:c5:05:88:9b:3c:44:e9:47:e7:a8:56:
c1:c6:b5:9d:4d:aa:44:c7:e5:e3:d5:b7:04:26:3c:
f0:f6:14:8b:14:11:6e:a6:3b:fa:23:ab:21:b1:0d:
ab:8e:ba:ef:82:e7:ec:bd:33:7f:a2:ca:77:7c:f6:
92:ba:a6:2b:98:55:09:f5:1a:40:e2:38:96:fa:50:
b8:0a:2d:75:66:54:07:fb:09:ad:c6:07:13:67:f0:
30:e5:6e:91:ba:21:4c:32:83:01:4c:22:a4:1f:f3:
d9:ca:10:e2:e4:20:0a:fa:4a:26:24:da:f6:69:cb:
5d:1c:4d:d3:7a:8b:c9:b7:bd:77:6d:fd:55:2f:ec:
7c:52:cd:df:a3:a8:05:80:f2:8a:62:3b:c9:be:f8:
d9:b8:f8:ef:50:81:8a:97:ae:b3:5d:3b:7a:f0:71:
cb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:22:61:1F:AA:6A:92:32:B0:BA:A5:47:4C:71:02:9B:60:B3:8A:9A
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b1:fb:fc:02:d6:1b:c3:3f:cd:10:41:a7:32:ac:7e:bd:aa:
ae:8c:88:29:a9:e8:5b:8b:a2:b7:5a:54:c9:4e:af:c5:bd:49:
fc:53:07:18:81:51:15:c8:50:4e:c2:b1:f7:fb:d3:65:e5:28:
d7:af:3d:06:18:aa:4b:9f:ef:6a:e9:1c:6f:4d:b3:2e:60:49:
0c:cc:d7:65:50:6d:a0:42:3d:fc:cf:0a:bc:67:65:20:67:1d:
02:e1:c5:30:27:53:2a:19:cb:6b:0f:83:32:3d:fc:08:22:6a:
05:c1:78:1b:db:d7:0c:cd:3b:90:24:fc:58:90:20:ca:56:b9:
80:2d:75:38:90:3f:64:4b:2f:eb:8d:bd:d6:b1:09:be:b7:23:
7e:54:06:94:bf:b9:26:b8:15:c3:55:f5:8a:56:f5:f0:56:48:
28:35:d8:23:5c:18:f7:df:c0:e3:34:29:44:50:01:c3:4f:54:
f2:ba:31:18:71:ed:4a:a4:8b:cf:57:b2:44:8a:92:9c:4e:b0:
93:a6:79:9e:cb:fc:79:9e:91:59:db:25:67:fc:71:2e:22:92:
de:bb:ed:28:27:ec:8c:ff:4a:72:28:b5:c0:8d:7a:11:29:30:
8b:89:92:7c:11:67:c5:ac:fe:3b:bb:0d:f1:9f:65:ab:ec:e1:
99:4c:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 16:46:12 2025 by rpki-client