Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
File: HWtralBhpBFdUwQM_9xks7DXGng.mft (raw, json)
Hash identifier: 6CIffrWFl1LugLLRK396+QVoZKijSgJfkvUv5X/KxNY=
Subject key identifier: 7F:F0:A3:14:74:00:91:6B:26:DD:BD:0A:83:0D:27:4A:D0:60:96:95
Authority key identifier: 1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
Certificate issuer: /CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Certificate serial: 019A714A13008EF35CB83A33C134CF17F44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:01:11 +0000
Manifest this update: Tue 11 Nov 2025 05:01:11 +0000
Manifest next update: Wed 12 Nov 2025 05:01:11 +0000
Files and hashes: 1: 59rlgV96ANnvbttVckQTSpcL4gg.roa (hash: yMmqOnSAlEZI0n5Ljt8KnwxkwDwpOxx+NBJ3GGUG5bk=)
2: HWtralBhpBFdUwQM_9xks7DXGng.crl (hash: LDnNuJPmpYXbSXJ5U6M4Hsf7ZJH349a++WthlmQx2UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:13:00:8e:f3:5c:b8:3a:33:c1:34:cf:17:f4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Validity
Not Before: Nov 11 05:01:11 2025 GMT
Not After : Nov 12 05:01:11 2025 GMT
Subject: CN=7ff0a3147400916b26ddbd0a830d274ad0609695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:a3:9d:30:5b:ba:77:5a:87:6a:26:43:c5:
60:66:56:bd:14:b4:f3:fe:db:b0:89:f7:59:c0:de:
c4:09:f0:46:c7:96:49:a4:0a:19:fc:68:7d:b7:2d:
21:cb:09:33:de:72:8a:ed:b5:26:18:13:01:8b:6f:
71:74:c0:70:c9:8c:b4:9f:c9:1a:9f:ff:6f:52:f1:
a1:db:0d:7c:9d:28:55:57:e8:d7:fa:b2:74:29:29:
6a:d5:b4:bb:de:c2:18:49:3a:89:00:a5:cf:2a:69:
ce:af:ed:e1:99:bc:55:89:bc:3f:75:0c:71:64:39:
20:02:aa:a7:ff:e2:1a:24:fd:b0:0d:72:19:bd:7c:
8a:c8:a2:01:14:47:64:5e:15:cf:36:78:dc:ad:80:
01:00:33:50:24:c0:d4:b2:06:c3:7e:34:e6:cb:24:
74:84:67:ea:31:f8:58:6f:e3:54:dc:87:02:5e:82:
b9:75:4b:59:32:a9:3f:3c:7b:80:77:68:25:c5:6a:
4e:85:34:84:ac:4b:05:70:f2:35:21:85:fe:99:cb:
7a:87:ed:e3:90:89:b5:86:db:ae:f2:23:bc:49:57:
9f:7f:62:89:44:1b:ea:72:cc:7a:91:83:19:4b:21:
3c:19:83:9a:c7:26:c2:ab:7d:b1:ad:e9:5c:0c:0b:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F0:A3:14:74:00:91:6B:26:DD:BD:0A:83:0D:27:4A:D0:60:96:95
X509v3 Authority Key Identifier:
keyid:1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a3:4f:79:a5:f2:80:69:88:0a:65:f2:4c:35:8b:b4:1d:80:
97:ee:30:7b:b5:ca:f9:34:8e:27:8d:b1:a4:c4:1e:71:80:77:
02:f2:2e:0d:ad:d3:02:7f:c1:26:06:8b:26:8d:77:43:10:27:
9f:e3:04:44:26:9c:93:58:74:10:b8:86:f9:6f:a9:e4:b8:bf:
d5:2c:23:fd:cf:d0:38:26:4e:85:f3:76:2d:bd:54:09:26:ce:
ce:ba:73:46:d2:1b:63:0f:eb:d4:ff:8d:6f:89:96:20:31:62:
6d:d4:64:54:87:a1:cb:cf:8e:95:bd:8c:24:91:71:99:f3:9b:
8a:79:56:a7:48:c2:5e:07:6a:e7:15:a5:2a:96:6c:e1:dc:77:
2a:e5:00:f4:0e:37:1e:c3:74:db:c0:26:e5:5e:88:5c:7e:fa:
1e:46:98:72:c5:7c:54:68:d0:f9:4d:20:4d:c1:f6:86:54:45:
62:87:82:d6:fa:56:e0:ad:40:f2:ec:95:42:44:32:20:37:f5:
91:22:a8:cf:87:e6:7a:9b:f4:36:fe:4e:49:f0:ea:52:e4:e2:
24:f6:28:c7:39:7e:58:59:41:e7:cc:46:fd:f8:78:4c:af:7e:
8b:f1:fa:d9:06:d8:59:c4:13:d5:7f:93:3e:35:bc:e2:78:f8:
c2:5c:ae:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:46 2025 by rpki-client