Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
File: HNPDCTm5BqRRWhxlwIg2gptqMok.mft (raw, json)
Hash identifier: Lv778ABIUTMwABcOV/Gse1S4bDxjA0NoS9w83KUkszA=
Subject key identifier: 19:16:D9:0D:8A:C7:E2:16:7B:92:EA:29:50:88:C4:09:37:37:5A:81
Authority key identifier: 1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
Certificate issuer: /CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Certificate serial: 019A71EE9E717F5151452050DA41852D914E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: HNPDCTm5BqRRWhxlwIg2gptqMok.crl (hash: DCrwN845UXWYk+ktqTxe7RonBkVjZsP7x/anlDnIpZE=)
2: zraU6JUbMiPLRortKHmXEnAo1OE.roa (hash: HMXC6yKtO8g8Ym91NRBLoqlps2ZqE/0U22YJBVZue4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9e:71:7f:51:51:45:20:50:da:41:85:2d:91:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=1916d90d8ac7e2167b92ea295088c40937375a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:98:1e:5d:b1:47:f4:e3:d6:43:88:e5:a5:32:
79:e4:6f:1b:56:44:b3:b6:f8:12:54:e0:e0:00:3c:
43:7f:b9:3f:a0:82:00:e7:28:40:c8:bd:d1:65:61:
3e:54:9c:c2:3a:6b:34:f6:43:3d:39:31:2b:67:8d:
1d:cd:72:86:aa:85:9d:b0:f6:38:de:53:3f:71:2a:
a0:7c:41:ef:e3:cd:18:47:a0:8d:f7:75:5d:36:c1:
86:f6:f5:64:c0:a7:16:67:15:f0:09:f2:6b:e7:ad:
10:05:26:8f:8d:34:09:ea:3a:d1:a4:02:eb:62:32:
c3:b6:be:2f:0e:4b:58:02:61:9e:bd:1d:da:70:20:
ac:c8:4f:c6:cb:3e:14:38:1f:fc:66:df:f6:2a:04:
a9:7f:7a:ae:37:08:ca:05:f1:ec:59:ac:2b:d7:b5:
29:2d:ae:c7:3f:d6:24:3c:07:c4:45:d1:61:ac:a3:
55:de:2d:df:69:ec:01:89:61:1a:66:71:f5:b3:c2:
97:da:36:b0:49:1e:df:1e:6b:82:30:e6:cc:06:26:
91:9b:f6:a0:fd:27:0e:ae:0b:f9:1d:65:79:8c:90:
3c:11:34:07:7a:f4:ef:8d:7c:f8:ec:c8:a9:d2:77:
93:81:ec:74:7f:b7:e9:e5:c6:d4:60:10:90:66:80:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:16:D9:0D:8A:C7:E2:16:7B:92:EA:29:50:88:C4:09:37:37:5A:81
X509v3 Authority Key Identifier:
keyid:1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d3:ee:c8:b1:b8:00:3d:24:6c:05:fc:59:61:3f:b3:2e:09:
d7:a9:ea:2f:2f:6d:b4:54:97:48:6e:9e:42:fc:ec:5c:b4:63:
4f:8e:37:fe:66:24:65:d9:3d:2b:5c:c3:65:3e:9b:35:dc:db:
2a:a3:91:7c:e2:cc:48:3c:44:54:ce:f4:45:a7:c4:3e:cb:48:
a9:06:b9:ff:8b:20:49:41:6d:d6:b1:55:9a:f4:99:24:f8:c3:
c5:42:c6:d7:53:0c:f8:e2:6c:dd:d2:ac:ce:91:e3:28:49:10:
7a:1a:a3:7e:1a:6f:a6:f7:70:28:d4:35:0f:49:e4:62:2e:60:
5e:7f:c3:55:3a:c4:7a:57:1e:61:fe:c9:f1:d7:38:57:7d:a4:
61:6e:a9:13:b1:c2:4b:ac:32:e7:7d:57:ba:6c:ab:d7:5f:96:
18:a3:87:5b:ab:f6:63:54:53:f4:20:33:4e:89:2e:56:76:13:
df:38:5e:0c:87:6b:b0:90:bf:ac:1b:f0:36:78:81:26:e4:a6:
af:5a:ec:a0:f2:ba:05:49:d8:49:74:01:2a:07:85:9a:0c:ea:
58:f3:88:18:0b:1f:1c:2d:76:32:05:32:fa:b7:b6:9b:b4:ee:
b5:88:26:b9:4d:b4:11:6c:8c:32:87:c1:8c:9d:73:bb:7b:4a:
73:1f:85:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:15 2025 by rpki-client