Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier: vNsgn2KNlTyEQRH57wDsGacdWTdnV2S3G0Du/ONS1tU=
Subject key identifier: B2:15:D9:FD:A5:66:12:72:CC:83:63:73:FA:4A:50:75:C0:1A:F9:B7
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 019A706E1487C2FF4A905CBFC5403220A8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number: 1554
Signing time: Tue 11 Nov 2025 01:00:53 +0000
Manifest this update: Tue 11 Nov 2025 01:00:53 +0000
Manifest next update: Wed 12 Nov 2025 01:00:53 +0000
Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: WBX4bJC4MwAry0+2X1FFNz4PYCNWv1EFKlA3aSzr1IM=)
2: IfJsnDvBjhqNyvQwy7Sj6pVTE48.roa (hash: 72JQ+BiVOGXtzrf0r97edI+poiwfkKBvn0dEoFn6Vjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:14:87:c2:ff:4a:90:5c:bf:c5:40:32:20:a8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Nov 11 01:00:53 2025 GMT
Not After : Nov 12 01:00:53 2025 GMT
Subject: CN=b215d9fda5661272cc836373fa4a5075c01af9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:1a:7d:46:f3:f1:45:e1:de:2b:f3:8a:69:
30:94:10:bf:8a:8f:a0:53:af:f2:8b:e6:0d:9e:94:
80:b6:87:2e:ff:20:44:ca:c8:5b:ad:ff:12:67:33:
61:cd:01:10:4d:d3:6c:d3:04:fb:74:b7:0f:28:73:
2b:32:8f:d9:42:85:78:35:5e:84:94:b2:b3:50:69:
c3:d7:f7:a1:5b:d8:74:68:cd:3a:1f:2d:5d:25:e3:
56:49:11:55:1c:16:1c:25:72:6e:f8:bc:da:83:c0:
9b:5a:b0:a7:98:31:ec:93:15:16:15:10:6f:ca:80:
bd:5a:4b:b6:fd:16:b0:30:73:5b:b4:11:fa:49:03:
08:61:00:e2:12:46:47:2e:01:97:15:fe:89:ff:18:
69:4e:ef:ca:61:e6:96:4a:b7:68:23:e0:58:8c:58:
f1:60:93:7d:5c:18:b9:04:28:7d:84:31:24:48:90:
07:fd:1d:3a:53:45:37:f4:5f:1f:8a:fb:e3:3e:a1:
84:8b:63:4f:3d:27:2a:84:c2:b6:f0:ce:bc:ad:5e:
33:41:91:10:32:ed:5e:c4:75:0a:5e:1b:a1:ec:47:
69:f9:a7:51:a2:3c:a7:4b:d5:5b:73:2c:8b:3c:e5:
26:e9:32:a5:5f:30:30:ac:78:e9:92:60:56:73:18:
bb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:15:D9:FD:A5:66:12:72:CC:83:63:73:FA:4A:50:75:C0:1A:F9:B7
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8f:a7:ec:07:a8:ef:7d:7c:7a:f4:62:67:63:95:49:d2:88:
e3:58:88:12:9c:29:3c:a0:2c:5f:9b:84:24:6a:fd:c0:f8:ab:
cc:1c:20:22:8a:05:30:6d:02:9e:0c:34:2e:50:c2:35:a5:ac:
81:43:36:06:e9:fb:88:15:e9:51:ac:c6:16:9c:1b:ed:f7:3f:
83:fe:f5:5d:ef:24:98:be:81:5c:92:44:43:b2:41:a4:69:f3:
e5:e7:8d:64:60:ba:ac:09:31:67:27:3d:0b:1d:3f:8e:6a:18:
1b:63:0a:13:7a:9b:05:bc:eb:46:0a:3e:09:7f:ea:6a:28:ff:
01:62:90:26:3c:db:85:a8:9a:a0:08:b6:fa:57:c3:a6:07:4d:
3b:81:a6:78:6c:66:e4:a9:08:eb:d4:ed:e9:51:59:3f:c6:b6:
71:be:95:06:dc:78:a0:5b:14:0b:4b:08:c1:32:c3:d7:81:f8:
f7:eb:73:3e:c0:ab:0f:22:bd:ce:40:7c:9d:57:8d:ae:62:e2:
a9:80:d4:61:c2:a3:51:4e:d4:06:62:8b:39:f3:e7:47:2f:7e:
4a:71:69:39:ca:08:b8:af:30:8c:07:a2:6e:d7:06:19:60:1b:
31:10:9a:18:f0:3e:97:0c:1a:81:a4:79:dd:dc:fe:54:a2:d0:
b0:2a:64:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:44 2025 by rpki-client