Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json)
Hash identifier: eeIc5RjJsjwwEz1xFPDyu/hrZ6LYPaU+izer0BtkmFQ=
Subject key identifier: C4:37:2F:42:A7:A1:C3:15:93:A8:16:68:3F:7C:5F:C8:86:41:D5:A9
Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f
Certificate serial: 019A71B8398CAA40C2B3D5EE9E273DD730A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: uAYl5aonkQ3mN5y651aDlATFeZ0h1muEuvHZAOtWVBA=)
2: sleOMLu6lCo0yQ_O9Go3ZMBJ4nQ.roa (hash: mFLE25zkAY/mi0s19XSunEJLEf8g+Qy7QzSZ17V9QYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:39:8c:aa:40:c2:b3:d5:ee:9e:27:3d:d7:30:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=c4372f42a7a1c31593a816683f7c5fc88641d5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:94:1b:04:96:8b:94:35:4e:99:01:2d:88:
d6:95:51:8f:ee:80:a6:90:f2:79:d1:20:58:7f:eb:
ea:cc:32:75:96:ce:45:89:f6:75:70:9e:90:1b:15:
5a:ae:49:54:0f:24:6c:cf:c1:9e:50:9f:e8:03:1f:
b7:90:92:f2:8d:28:43:e3:02:37:69:c8:b0:1c:f4:
c9:bf:67:26:bb:94:d6:c7:5b:1d:3e:4f:a6:51:6b:
c7:e0:c8:49:84:c3:2b:b9:a9:31:fd:fd:1e:a6:03:
bf:42:6a:6d:fa:ce:4c:5b:47:69:79:70:0c:47:de:
f6:47:c1:88:cd:df:17:b3:13:bb:28:39:ce:82:b8:
9c:92:52:ca:d5:d7:cc:2a:1b:45:44:18:4e:91:52:
6f:02:0c:30:df:de:cf:11:5d:dd:14:4e:e5:16:f2:
d6:77:ed:d3:a7:b4:25:f4:aa:87:72:cd:a1:99:cb:
0d:bd:17:e6:6b:90:5f:e9:0c:b6:a9:f0:6f:77:e2:
92:63:7e:60:20:28:58:ac:a2:87:fc:6b:1a:2a:23:
9a:01:f6:dc:ad:01:1e:f0:1b:8f:e6:56:18:6f:4c:
d0:3b:03:71:b9:b3:59:d9:7e:8a:de:14:be:7e:2d:
b3:61:2e:31:cd:46:d4:35:5f:4e:2f:31:b5:b5:c5:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:2F:42:A7:A1:C3:15:93:A8:16:68:3F:7C:5F:C8:86:41:D5:A9
X509v3 Authority Key Identifier:
keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:79:fb:6d:ae:4a:8d:21:4c:55:46:60:bc:27:f7:8d:ce:f4:
b8:d3:99:c4:fb:40:38:61:33:d4:b1:5f:a7:13:77:a9:d8:f6:
42:20:27:db:f5:71:e1:43:b4:e1:76:7a:ff:7e:6f:93:9e:1f:
99:c4:74:47:16:a0:6c:d5:d8:11:da:8d:ec:b5:95:55:9b:32:
b9:48:9e:db:17:f4:46:1f:5b:e0:ef:7f:42:89:79:f7:e7:fc:
f3:41:77:29:c5:f9:27:d2:7f:29:42:90:ff:a9:44:ab:60:8a:
38:07:e5:75:0f:ff:b5:75:85:86:d9:31:af:2e:27:a8:7e:04:
9b:56:b8:68:f9:2e:a8:26:65:66:6f:20:bd:f1:5e:17:93:44:
7b:20:4f:6a:95:95:b4:ff:c8:a5:d2:b9:e1:05:4f:c8:4f:0f:
34:d5:55:e9:70:91:3d:5f:db:42:ac:65:12:39:bc:39:47:bf:
37:e0:04:bd:28:f4:69:a0:1c:b9:46:77:ac:f6:6d:71:85:b5:
ba:d5:e1:e2:af:56:1e:76:b0:17:ec:8b:c4:0b:61:c5:03:72:
54:c4:85:bb:03:fa:a4:b5:03:96:2c:03:6a:a1:dd:e4:d4:13:
c8:5a:ce:03:58:3a:39:f1:b2:ab:41:9f:a5:e8:68:18:35:2e:
3a:79:b4:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuDmMqkDCs9Xunic91zCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMjhiMThkZjI0NGRiODlmMmI5N2E2YzcyNjI5NzMzYjM4
ODYwMmYwHhcNMjUxMTExMDcwMTI5WhcNMjUxMTEyMDcwMTI5WjAzMTEwLwYDVQQD
EyhjNDM3MmY0MmE3YTFjMzE1OTNhODE2NjgzZjdjNWZjODg2NDFkNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSCUGwSWi5Q1TpkBLYjWlVGP7oCm
kPJ50SBYf+vqzDJ1ls5FifZ1cJ6QGxVarklUDyRsz8GeUJ/oAx+3kJLyjShD4wI3
aciwHPTJv2cmu5TWx1sdPk+mUWvH4MhJhMMruakx/f0epgO/Qmpt+s5MW0dpeXAM
R972R8GIzd8XsxO7KDnOgricklLK1dfMKhtFRBhOkVJvAgww397PEV3dFE7lFvLW
d+3Tp7Ql9KqHcs2hmcsNvRfma5Bf6Qy2qfBvd+KSY35gIChYrKKH/GsaKiOaAfbc
rQEe8BuP5lYYb0zQOwNxubNZ2X6K3hS+fi2zYS4xzUbUNV9OLzG1tcWEkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQ3L0KnocMVk6gWaD98X8iGQdWpMB8GA1UdIwQY
MBaAFB0osY3yRNuJ8rl6bHJilzOziGAvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84ODc2MjAtZjM4NS00M2Y0LTliZTIt
YTk5YzM5MDkwZGI0LzEvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84ODc2MjAtZjM4NS00M2Y0LTliZTItYTk5YzM5MDkwZGI0
LzEvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXn7ba5K
jSFMVUZgvCf3jc70uNOZxPtAOGEz1LFfpxN3qdj2QiAn2/Vx4UO04XZ6/35vk54f
mcR0RxagbNXYEdqN7LWVVZsyuUie2xf0Rh9b4O9/Qol59+f880F3KcX5J9J/KUKQ
/6lEq2CKOAfldQ//tXWFhtkxry4nqH4Em1a4aPkuqCZlZm8gvfFeF5NEeyBPapWV
tP/IpdK54QVPyE8PNNVV6XCRPV/bQqxlEjm8OUe/N+AEvSj0aaAcuUZ3rPZtcYW1
utXh4q9WHnawF+yLxAthxQNyVMSFuwP6pLUDliwDaqHd5NQTyFrOA1g6OfGyq0Gf
pehoGDUuOnm09A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:40 2025 by rpki-client