Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
File: HNq3BST9UTE7hPXY9GNio9jICBQ.mft (raw, json)
Hash identifier: gdXFPueeFc0SjmPOjVNrHrwEJeb/FhCTfCBYOnJckLU=
Subject key identifier: 9F:AA:55:30:98:65:57:11:BF:BC:D9:76:25:0E:23:E5:DB:35:E1:0E
Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
Certificate issuer: /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Certificate serial: 019A70A5A020EA6F9AE68A54FCE7FBF5DCCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:01:33 +0000
Manifest this update: Tue 11 Nov 2025 02:01:33 +0000
Manifest next update: Wed 12 Nov 2025 02:01:33 +0000
Files and hashes: 1: 8H6vwz49R0kM-gbNtDLGiXSOgWE.roa (hash: 7d11KfsVtGX7lu3CgRTWP0J/PhStNQboteNSMa34UZE=)
2: HNq3BST9UTE7hPXY9GNio9jICBQ.crl (hash: qf6YTHEkgaGsvd1cSa3TiXBgcy3Ga2b92LJv3dEg9NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:a0:20:ea:6f:9a:e6:8a:54:fc:e7:fb:f5:dc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Validity
Not Before: Nov 11 02:01:33 2025 GMT
Not After : Nov 12 02:01:33 2025 GMT
Subject: CN=9faa553098655711bfbcd976250e23e5db35e10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:67:7a:39:c1:72:a4:19:0e:f2:0c:c6:aa:
50:fd:e5:83:b0:99:20:34:04:47:ed:ee:ed:d3:4c:
af:5c:4b:7e:c3:d0:2b:81:dc:b6:1c:5c:8e:00:13:
23:38:39:c4:9c:8f:af:7c:44:d6:26:05:6d:70:6c:
a0:59:ba:69:cf:ce:d2:97:6e:0a:ca:2a:db:77:7d:
48:6d:62:95:44:ec:61:53:1b:5e:c8:9e:ac:3e:43:
4c:2f:b2:e0:8d:34:50:bb:0d:86:ac:17:2d:2d:38:
be:d7:42:56:70:ae:e9:94:6c:23:04:e5:3a:83:18:
15:a5:15:eb:46:40:14:99:73:21:2d:e0:a6:e3:55:
92:a3:9c:c8:bb:57:c5:43:b3:b3:eb:13:cc:a4:2d:
4c:6d:6d:d6:b8:a4:95:6c:32:e9:60:d4:26:ef:fa:
12:40:8c:1c:5d:0a:c6:b7:b7:8b:f3:09:02:47:67:
56:47:4f:05:cf:4d:df:02:c4:a9:0f:69:4f:b8:aa:
91:32:59:57:60:ac:41:67:f2:c3:bc:f4:9d:4c:f6:
f6:15:88:ba:92:78:5b:99:37:ef:8c:fc:eb:1b:4c:
2b:33:22:e6:9f:d7:6e:df:73:73:33:b3:50:f7:0f:
b9:3f:85:d6:76:22:a5:fb:c9:b4:38:c6:4a:cc:a1:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AA:55:30:98:65:57:11:BF:BC:D9:76:25:0E:23:E5:DB:35:E1:0E
X509v3 Authority Key Identifier:
keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e2:a1:1c:be:8d:ee:16:31:e1:c1:d3:d3:f6:09:0f:1b:07:
57:ef:ee:20:05:b0:2b:1e:93:f5:26:65:db:06:de:66:7e:33:
17:24:76:d3:50:38:c8:e6:78:27:e1:cd:82:56:00:9b:ab:96:
79:11:8e:0c:39:70:04:31:1c:b3:54:db:c6:5c:85:f4:5e:0d:
93:ff:61:6d:66:c9:55:b9:ae:52:ad:78:c0:77:e8:31:09:09:
99:f7:66:08:9b:1b:16:b3:78:2a:28:a7:2a:bc:8b:48:42:f5:
8f:12:ee:fe:13:a7:72:a3:9b:17:00:e3:c9:d9:2f:98:cb:55:
df:70:33:0b:b2:3a:f3:79:27:a5:12:58:f8:d8:f6:31:61:01:
45:85:c6:ae:11:8b:14:cb:cb:28:9b:cc:74:2e:29:68:57:7b:
4c:ae:b8:64:9b:d6:c2:8d:70:3d:5f:76:b3:2c:7f:84:ce:86:
34:b2:6c:36:9d:a2:ac:cd:df:f0:1e:6e:70:a5:b4:d5:86:e3:
09:c3:5c:b2:6a:b2:33:83:54:ff:8d:ec:db:9e:0e:61:e3:d0:
1e:27:64:72:ce:33:ee:a0:0d:4a:28:99:30:4c:09:58:85:59:
50:80:d7:1c:4a:ee:b1:64:54:d8:5a:7b:4d:ac:73:9f:f6:95:
54:c0:4c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:08 2025 by rpki-client