Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
File: HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft (raw, json)
Hash identifier: RmfEOJ/g8TPSr9wAAeHK8Yorb0yuba5n1PEKe59YyP4=
Subject key identifier: 0C:F5:2A:30:56:9E:EB:D0:C0:C4:35:C5:E2:97:46:0B:41:21:C3:86
Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
Certificate issuer: /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Certificate serial: 019A71B84196E15F8C39592DAE71BDD73FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
Manifest number: 05D5
Signing time: Tue 11 Nov 2025 07:01:31 +0000
Manifest this update: Tue 11 Nov 2025 07:01:31 +0000
Manifest next update: Wed 12 Nov 2025 07:01:31 +0000
Files and hashes: 1: 6KBWfvurH0ryN0klNLmOfIfXS50.roa (hash: bQYxwK8PunB8us4iL4+kd3a48QuBW1TD23kpBG66hec=)
2: HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl (hash: cgBVvHN04nW55G4F0qHmCVIvnTslpjHVx1BUzHSsGNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:41:96:e1:5f:8c:39:59:2d:ae:71:bd:d7:3f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Validity
Not Before: Nov 11 07:01:31 2025 GMT
Not After : Nov 12 07:01:31 2025 GMT
Subject: CN=0cf52a30569eebd0c0c435c5e297460b4121c386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:21:01:cf:4e:56:4b:29:03:88:72:60:ba:17:
8b:85:36:21:8e:38:b3:3c:65:da:70:43:ec:b9:53:
f9:72:a7:bb:f2:2a:63:23:81:fd:55:aa:56:92:7b:
6c:e0:25:d6:70:4e:ec:59:f7:62:0a:c8:b0:02:d8:
97:a7:f5:2b:9c:68:8a:bd:86:ab:3c:18:e7:89:90:
5d:51:71:c6:c9:86:c1:d3:b6:32:1f:40:18:fd:0a:
cb:52:90:fe:e5:7b:d1:ac:8c:20:a4:9f:aa:fe:7f:
86:ac:25:8f:b9:4e:54:33:3f:61:2c:00:e2:0d:2d:
8a:ee:ce:64:e0:13:29:d8:65:ec:06:c3:3e:8d:4d:
22:ef:bf:ba:73:11:ea:ec:1f:e2:bc:b5:7a:aa:20:
b0:83:82:f5:ad:28:00:79:52:f7:6c:55:d2:70:46:
30:94:ac:52:a4:97:27:1b:a1:57:7f:71:d6:bb:a2:
7f:ed:95:99:0a:55:40:8d:b0:c2:2e:52:e9:ed:55:
3b:ba:fe:3d:f2:4f:af:86:2e:76:8c:24:2b:61:1a:
36:34:5b:ed:95:30:65:ff:b4:bc:a5:c5:70:57:ea:
70:1c:55:50:2b:cb:2a:72:d4:aa:22:08:f1:14:b1:
02:c3:39:21:94:a7:8c:5e:c6:4a:a8:e9:82:a6:d3:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F5:2A:30:56:9E:EB:D0:C0:C4:35:C5:E2:97:46:0B:41:21:C3:86
X509v3 Authority Key Identifier:
keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e5:73:41:41:60:56:2f:c8:e8:a9:02:8c:22:9d:07:d8:d4:
f3:1e:12:e7:eb:f2:02:98:88:5f:79:94:4b:b5:18:95:e9:10:
f7:86:3c:25:08:95:f3:82:94:26:3f:1c:65:7d:2c:a7:ed:28:
e4:f0:77:86:26:04:41:26:c3:88:50:af:0b:b5:f3:7f:ff:2d:
f1:5f:1c:41:4f:a6:7d:21:48:43:ea:07:57:bf:7b:7b:b4:b7:
a2:ed:ee:90:d2:ff:11:5c:7e:ed:e5:0d:db:5c:2e:7e:85:46:
3e:b7:8a:30:19:dd:51:9c:88:4a:fd:a8:71:08:44:b6:a1:c7:
b9:a6:8e:63:57:42:64:cb:b8:ef:9e:5f:c9:41:94:e0:40:bd:
86:1d:1f:0f:9a:1c:fe:9b:4d:56:27:05:81:a0:08:20:eb:2d:
ef:43:7e:e9:10:0a:1c:b6:5d:b5:2f:65:6d:bc:30:32:46:90:
a8:57:8e:46:81:34:e0:1f:d1:1a:27:2c:c1:f1:af:6a:ca:40:
2a:36:55:d9:dc:bd:0a:4a:d8:32:5a:46:0b:55:db:fd:43:ef:
a5:01:aa:59:5a:d1:10:8c:be:3b:ac:7e:4d:8c:9e:05:e3:8f:
17:01:af:44:cc:a2:ea:59:ec:83:9c:eb:f0:01:69:09:61:68:
42:4d:7f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:21 2025 by rpki-client