Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
File: HXJHHgJd46gqjfWKrm4S4x1s0FA.mft (raw, json)
Hash identifier: qeETL2hrv+c0sIOtm4MHsKlA7FxeOEMvKh1XgHJXJ00=
Subject key identifier: 50:25:71:6A:4A:C4:E5:9D:E2:4D:4D:69:D0:ED:73:CD:DB:2D:F0:AD
Authority key identifier: 1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
Certificate issuer: /CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Certificate serial: 019A714A09BD43A427BAE883895BC224D98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
Manifest number: 0151
Signing time: Tue 11 Nov 2025 05:01:08 +0000
Manifest this update: Tue 11 Nov 2025 05:01:08 +0000
Manifest next update: Wed 12 Nov 2025 05:01:08 +0000
Files and hashes: 1: HXJHHgJd46gqjfWKrm4S4x1s0FA.crl (hash: ZHzvlkLla3A0+g+F6ruZ+oNRns+5/b7HxJg1tivUAEE=)
2: fj04IAgRtLyt8FxauXRHzCCY2dM.roa (hash: RQPUjLROTiuPGUSBn8RZIchppB8l2w9Yk7LM8XCFoI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:09:bd:43:a4:27:ba:e8:83:89:5b:c2:24:d9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Validity
Not Before: Nov 11 05:01:08 2025 GMT
Not After : Nov 12 05:01:08 2025 GMT
Subject: CN=5025716a4ac4e59de24d4d69d0ed73cddb2df0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:ba:1f:a0:ec:c8:e0:b9:f6:fc:53:92:1d:
ad:e2:1b:f2:f7:a9:25:ed:0a:02:e7:d0:1a:2b:1a:
7c:25:2c:1b:d8:ca:17:7d:eb:45:76:75:60:67:bf:
f3:7a:d2:c2:80:98:7d:f8:57:fd:1a:d8:a1:d8:f5:
99:d8:2f:0d:d3:03:d2:cc:3b:57:72:ff:79:dd:32:
f3:fd:d3:db:e4:79:34:55:d5:57:46:24:7d:0d:20:
b0:5d:c5:9d:01:1f:d6:f4:13:ab:cd:df:8a:ee:0b:
39:2e:1b:60:a9:81:91:72:6e:ef:1a:6b:70:0e:ed:
02:c6:c6:24:c7:85:97:28:43:89:0a:aa:57:82:fe:
88:2c:3a:3b:49:7f:4a:b9:89:c1:59:e2:b4:3c:1a:
6b:bb:65:b8:97:57:22:f3:33:6a:5d:a4:a7:e6:da:
c8:2b:c9:90:e6:cf:ac:c5:48:f1:e3:93:85:8b:0f:
ac:12:6b:20:5b:19:93:df:3a:fc:fd:b5:81:91:0a:
43:28:7c:ed:88:81:64:3d:a7:e3:f8:45:a3:16:9e:
bb:4b:80:ed:27:a7:7a:48:c8:02:3a:18:c8:6a:11:
64:ee:83:10:13:7e:29:9c:7e:a6:d0:f6:dd:2e:3a:
56:fc:5a:71:61:9d:78:c4:19:5b:7e:3f:97:c0:74:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:25:71:6A:4A:C4:E5:9D:E2:4D:4D:69:D0:ED:73:CD:DB:2D:F0:AD
X509v3 Authority Key Identifier:
keyid:1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:73:e1:d3:0f:d5:7c:a7:9c:7a:41:aa:52:e7:a7:4c:83:c7:
1f:3d:d9:68:5f:d0:bd:c3:ca:5e:04:fa:b5:2c:4e:f8:e7:7a:
7a:b0:ad:96:c7:be:7d:e3:f4:6b:de:72:ec:ae:28:46:62:7d:
b1:d1:b6:f4:2d:98:12:3a:b5:c8:ea:1e:f3:10:07:55:ce:47:
0f:13:95:c4:5b:f3:9a:fa:f3:99:04:21:c5:da:3a:16:37:47:
66:f3:bc:ad:30:1d:aa:07:c9:6d:d5:a3:69:d5:a8:94:4a:b1:
b2:9d:1a:83:89:47:11:d1:d4:07:e1:92:5d:2d:a1:ea:94:b1:
60:7b:8f:7d:8a:b7:24:0a:cd:8c:b5:f7:80:16:94:4f:89:2e:
60:e8:84:13:dc:1d:67:40:72:65:f3:3f:f4:50:61:9c:22:89:
cd:a2:e6:76:75:39:06:f4:36:6c:8d:6c:4f:b1:c0:d0:10:84:
c5:a6:66:4b:05:61:4f:1f:38:dd:87:06:a2:e8:f4:9c:07:1f:
0a:c5:a8:b8:8c:9a:65:a4:ee:bb:fc:ce:3f:74:40:35:b9:40:
7b:f0:f4:7f:47:cd:7d:10:ca:99:1b:3e:af:0b:69:3e:71:9e:
0c:b6:50:d2:1c:96:8f:2f:6e:c3:40:06:49:0b:b4:9a:38:a5:
3e:c3:b3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:23 2025 by rpki-client