Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
File: Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json)
Hash identifier: rPgmZqIdJX1/ppeQiej5tuHE/KgEK08Y7WwO997K3/c=
Subject key identifier: C2:41:CB:7A:B2:38:37:4F:F7:7B:CB:09:53:9D:B4:AA:85:2C:45:4F
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial: 019A73014C264C6B63B54ADC1DA0D1D211A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
Manifest number: 0F69
Signing time: Tue 11 Nov 2025 13:00:56 +0000
Manifest this update: Tue 11 Nov 2025 13:00:56 +0000
Manifest next update: Wed 12 Nov 2025 13:00:56 +0000
Files and hashes: 1: 1-veQxSzqgnwuwyzarzzUI6GU1Vo.roa (hash: bIWGmao73L88A9Mc0bEmGHNF/q2XxTrM/cwuMLwX1wg=)
2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: RxN1DS6qsKk0wdsFn2nOYdhZnKnRDzyOUREEslfjx0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:4c:26:4c:6b:63:b5:4a:dc:1d:a0:d1:d2:11:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Validity
Not Before: Nov 11 13:00:56 2025 GMT
Not After : Nov 12 13:00:56 2025 GMT
Subject: CN=c241cb7ab238374ff77bcb09539db4aa852c454f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:28:2d:6c:1e:6c:8b:83:18:41:25:8e:c9:
0f:68:30:1d:bd:f8:f1:95:df:cc:26:53:a2:b6:30:
35:75:0c:41:b8:e5:15:39:18:d5:af:dc:e2:d0:ef:
43:d4:d2:e1:8f:8c:24:91:fe:da:5b:67:d9:97:72:
39:8a:f5:80:32:a8:32:86:75:6d:20:61:66:1c:14:
c5:3e:71:05:30:e7:c8:8a:d2:d9:0b:2a:ee:16:ad:
c3:3e:5e:86:95:8f:0a:d1:c8:4d:aa:57:77:47:d9:
95:a2:68:00:4f:eb:94:2d:09:4d:8e:39:98:f2:bd:
e8:51:34:e5:91:42:c9:57:d9:86:3c:4d:fd:60:42:
b3:66:8b:a9:6c:82:4c:90:40:15:47:68:b4:c8:12:
2c:59:43:99:1c:30:df:eb:17:14:df:43:25:e0:a4:
dc:b5:bc:57:59:43:c7:f6:1e:5b:0a:6b:4f:65:85:
9d:f2:ae:1c:52:e1:ef:42:be:70:04:ac:b1:a2:ab:
ef:c7:21:08:c3:e2:fa:58:b0:91:57:10:56:4f:22:
3c:e8:70:8d:04:a8:83:15:9f:a5:45:bf:07:c0:f1:
a5:95:a8:b2:a6:dc:13:c8:b4:6e:37:2a:97:51:5d:
b5:a2:d5:d7:ff:1f:fb:5e:a0:e5:9c:fb:26:ed:f6:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:41:CB:7A:B2:38:37:4F:F7:7B:CB:09:53:9D:B4:AA:85:2C:45:4F
X509v3 Authority Key Identifier:
keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c6:31:cf:24:06:7c:07:4c:ba:bb:4c:23:e8:6f:3a:c5:6e:
77:c1:26:5c:7e:2a:6a:4d:35:12:0f:58:29:f7:37:57:7e:28:
1c:a0:68:ac:ea:1f:e0:18:5a:11:9c:d7:eb:a9:03:cd:54:b9:
ea:c0:b3:e6:60:ac:68:bb:00:48:89:31:dc:97:15:78:71:a5:
31:13:c6:75:3e:45:6c:98:40:44:2c:8c:26:c7:ac:ea:e0:b6:
b2:60:cd:55:76:5d:ad:39:ae:9b:ff:5a:ed:18:4c:ca:83:e1:
92:ac:71:77:f7:ce:0a:ee:1b:e5:51:2d:ce:08:29:46:24:7c:
73:bc:22:28:76:bc:5b:f5:63:95:3a:00:2c:05:1d:96:7c:24:
d5:ab:75:60:7c:cf:02:96:fd:62:c0:4e:bc:6b:7e:fc:57:8e:
fd:ae:07:4e:57:bc:dc:18:6a:70:62:52:2e:dc:32:89:78:ff:
cf:61:48:f1:07:f0:7a:8c:30:8d:ed:ad:c1:ee:e7:fb:26:53:
44:07:ce:b2:d6:fe:9a:21:6c:54:78:2f:c5:3d:05:b6:bf:98:
b9:92:02:e5:6e:8c:ec:e2:1d:e7:00:c1:04:cf:7e:1e:1e:11:
f3:3f:02:d7:59:bf:9b:ca:ee:2b:4d:49:c8:55:30:bc:1d:28:
32:ca:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:55 2025 by rpki-client