Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: QYx9ccQuVt+aJ4QoGY2RR3Qf2EG2ed07erqWGFFsU4A=
Subject key identifier: C1:1D:AC:13:39:03:C0:09:FA:9E:1F:C7:2F:33:67:F0:81:D7:ED:3E
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 019A71B939D85BD276B0856317184D11A829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 07:02:35 +0000
Manifest this update: Tue 11 Nov 2025 07:02:35 +0000
Manifest next update: Wed 12 Nov 2025 07:02:35 +0000
Files and hashes: 1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: eYSDg3otk7vL4dhEaYeTm+NIEaGtAtJEeMwZ/4BMsKU=)
2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=)
3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:39:d8:5b:d2:76:b0:85:63:17:18:4d:11:a8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Nov 11 07:02:35 2025 GMT
Not After : Nov 12 07:02:35 2025 GMT
Subject: CN=c11dac133903c009fa9e1fc72f3367f081d7ed3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:2e:1f:0b:53:b7:b2:5a:dc:dd:1f:51:a0:
c3:f7:de:91:50:72:62:c5:2f:1a:c4:15:21:73:45:
fd:91:b1:78:e0:8b:04:f3:d8:06:52:a3:6a:76:02:
8b:ac:7e:06:d4:bc:19:00:de:69:90:90:e8:cb:7a:
a6:31:d7:25:13:65:84:21:d7:ba:99:c1:5e:1a:9c:
44:2e:54:96:54:34:45:05:97:66:56:22:08:ee:bb:
e2:99:4e:e4:0c:01:9b:14:05:fb:ca:a7:65:8d:37:
28:0d:24:ae:66:30:e0:c6:b4:0a:64:bf:57:a5:fe:
4e:45:1e:99:5b:83:8d:d1:5f:35:e9:e3:23:f3:e7:
14:72:0d:c2:26:e6:96:bd:b3:a8:40:ba:d2:12:9b:
ed:40:7a:63:a8:df:95:7d:f8:5e:fe:0c:57:f5:51:
f1:e6:d3:44:ad:d0:c1:3b:92:55:da:c4:16:a1:8a:
21:94:63:cd:b9:44:0f:5c:8c:4b:16:03:4a:42:fc:
da:b5:aa:99:07:3e:a2:15:7e:2c:54:89:b2:21:65:
6d:6f:3c:2b:42:33:7b:03:7e:d6:29:de:69:14:a5:
be:a3:5e:e3:99:d8:24:57:4e:dc:ff:50:13:fa:d3:
0e:32:96:1a:6b:fa:6c:b8:f6:92:3b:ce:ff:fd:4f:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1D:AC:13:39:03:C0:09:FA:9E:1F:C7:2F:33:67:F0:81:D7:ED:3E
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:cf:91:e1:62:99:5b:18:66:5f:65:ee:40:71:a2:44:64:07:
68:88:39:d7:1d:95:62:ee:57:85:3f:13:f5:a8:eb:62:79:8e:
58:b7:e4:6b:79:56:0d:42:c8:2e:ea:ec:6b:8b:4e:c3:bf:19:
a0:08:1b:41:26:12:9c:5d:32:46:e4:6c:2b:10:bc:0c:97:1a:
aa:7a:3f:7c:b9:c3:62:dc:9b:b1:bb:62:4b:6f:14:3c:51:2c:
f2:5c:51:7c:a0:94:cd:62:ab:cb:55:db:4e:f7:ee:39:0a:9c:
7e:62:08:71:8b:f4:84:5e:5c:36:a2:15:ed:9a:5f:23:b6:37:
1e:cd:2e:d8:16:c6:98:4a:63:6b:d1:61:f2:e1:0b:32:ad:2b:
b8:69:2d:3a:f7:8f:0a:8f:84:d3:32:a0:25:8f:2d:87:95:db:
04:65:d1:0b:3e:e4:f6:92:a5:2e:3e:d4:6d:bb:b5:45:a3:b5:
b9:e0:7d:c4:0a:2f:21:9f:6b:24:81:af:ea:67:d1:eb:3a:26:
dd:43:57:a1:d5:bf:a7:c2:6c:db:a6:15:34:14:9d:2e:30:14:
4c:06:eb:53:aa:d9:6f:19:01:dd:e8:41:94:0e:b7:ee:ad:b8:
a4:5a:63:57:5d:8c:42:3b:f0:8b:e6:cf:04:42:f2:dd:62:fc:
eb:19:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:01 2025 by rpki-client