Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
File: HXJHHgJd46gqjfWKrm4S4x1s0FA.mft (raw, json)
Hash identifier: vSGXLw9+0B7wiRUOI+sVJmctWC1A5t7KpE8yCxMrCY0=
Subject key identifier: 32:07:BB:58:0E:39:A3:5A:BF:CB:00:F6:FE:22:2F:F1:56:F8:2D:57
Authority key identifier: 1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
Certificate issuer: /CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Certificate serial: 01992367CF6C7A001E030E8DDB3B4D00276A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
Manifest number: A4
Signing time: Sun 07 Sep 2025 09:00:29 +0000
Manifest this update: Sun 07 Sep 2025 09:00:29 +0000
Manifest next update: Mon 08 Sep 2025 09:00:29 +0000
Files and hashes: 1: HXJHHgJd46gqjfWKrm4S4x1s0FA.crl (hash: kRPjx5GlytvXGmiQjAw2lm4nVktsrDA2UaiI1wc9qG4=)
2: fj04IAgRtLyt8FxauXRHzCCY2dM.roa (hash: RQPUjLROTiuPGUSBn8RZIchppB8l2w9Yk7LM8XCFoI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:cf:6c:7a:00:1e:03:0e:8d:db:3b:4d:00:27:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Validity
Not Before: Sep 7 09:00:29 2025 GMT
Not After : Sep 8 09:00:29 2025 GMT
Subject: CN=3207bb580e39a35abfcb00f6fe222ff156f82d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:00:b8:58:7f:52:80:cc:74:ee:f8:6b:a6:
1a:d0:95:1c:19:b0:c6:45:34:26:7d:01:95:5b:ba:
64:1b:a3:b1:31:61:a5:55:50:78:21:da:d9:86:05:
94:d5:f7:92:23:cf:b1:49:1b:9f:8b:9d:9a:f0:38:
42:3d:63:4d:80:bf:5a:f9:2c:66:37:33:03:c6:83:
e6:0e:6a:0a:c6:cf:d3:23:47:b5:26:8c:68:6a:65:
96:8c:aa:15:f8:c5:60:4b:a5:72:a1:12:15:25:c9:
57:4a:fa:1a:08:96:3b:18:ce:74:44:1b:85:68:b9:
ab:58:f3:f1:f6:cc:d9:e1:15:4a:71:b7:d4:c1:e3:
d4:a4:ad:00:b3:07:e1:48:bf:03:ee:d6:08:99:63:
1b:69:37:e6:54:7e:3e:58:ef:3b:75:d3:dc:80:4e:
6b:f8:32:4f:40:b1:e0:eb:e7:16:79:6c:61:58:e8:
cf:38:e6:15:4e:69:5f:d2:76:af:4e:17:a0:5f:a1:
3b:52:2f:f5:04:4d:51:0b:7c:86:10:66:83:a9:4b:
0a:93:5c:5a:d1:47:cc:c3:44:aa:67:2f:a2:31:df:
14:43:6e:6c:51:e9:bb:82:49:91:d9:d3:a8:33:f4:
a8:05:98:9e:dd:8b:18:fc:2f:fd:b4:e0:c9:1c:03:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:07:BB:58:0E:39:A3:5A:BF:CB:00:F6:FE:22:2F:F1:56:F8:2D:57
X509v3 Authority Key Identifier:
keyid:1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:88:39:5c:4c:9b:ce:82:eb:36:37:3d:d2:27:46:7b:86:b1:
7d:be:b2:c2:d9:ca:92:0c:42:33:e0:7a:ca:93:6c:28:76:7f:
09:4f:28:d1:06:7d:52:8a:8c:b7:a6:bb:65:13:83:e8:a0:e2:
c4:2c:18:aa:ca:dc:7a:df:68:89:f6:1b:8c:50:4d:8e:76:3b:
97:49:20:f3:23:b8:57:03:31:47:52:b3:24:77:29:85:1a:63:
6a:ae:7a:3e:71:d7:da:81:72:7e:9d:17:f5:b7:8f:aa:fa:54:
b3:bf:4c:f2:ef:98:d7:c7:79:a6:37:93:a1:5f:68:2f:fc:15:
f0:9d:24:6f:05:a3:fe:46:c8:a7:1b:fb:33:df:90:02:18:ef:
8d:1e:8e:fd:08:93:8c:3b:f7:36:1b:5f:d2:8f:0b:f7:36:67:
1f:cc:64:33:c8:07:de:c0:1d:50:6a:7e:55:09:40:6f:c7:ca:
94:c2:ee:16:7d:42:59:87:b2:50:4f:dd:8d:a1:e9:34:3c:79:
1d:bc:11:fa:02:f1:72:1e:01:44:03:6e:1f:66:bd:00:d2:b9:
f6:dd:3b:83:0b:43:75:55:da:97:cd:83:4b:fb:d6:21:d7:4f:
3f:16:72:9d:1c:18:3e:78:51:87:b9:d9:1d:19:2f:60:12:74:
75:38:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:41 2025 by rpki-client