Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
File: hu4gHGXWVe6c_iUflR6pG7oVRWc.mft (raw, json)
Hash identifier: 1D4/y7OmmwmpnrOMdqVvP6nUqjatD3pxYApTW5ZKKss=
Subject key identifier: 05:E4:7A:0D:95:A9:7F:4E:F1:BC:0B:1F:08:F7:90:D6:5B:1E:FF:D3
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 019A71B7737AF76A1F39507A11FD2793E110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
Manifest number: 172D
Signing time: Tue 11 Nov 2025 07:00:39 +0000
Manifest this update: Tue 11 Nov 2025 07:00:39 +0000
Manifest next update: Wed 12 Nov 2025 07:00:39 +0000
Files and hashes: 1: BTKNM_yY9cf5nMbyQBGXEDyeLi0.roa (hash: DzzXp7ohKMicQourdcNR0kS22RTAEFQSJ/9tBCQrWcc=)
2: GzDT8w0Ptt9b8FyYostNarXRHiw.roa (hash: A6DYaaXmihlLD1PftD3BewQ0V2peW0M1Cn7b21EMdZs=)
3: NClupgqAUdwnU34Sum2MaF9qVA0.roa (hash: aDGxKYq2Y8XMXNzlWk4ySV396lfiu4EB4r+x7lrq+P8=)
4: hu4gHGXWVe6c_iUflR6pG7oVRWc.crl (hash: pMJ7KOntA9Bql66n4cQBXv3zipuSHqcDMue9GeMI5nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:73:7a:f7:6a:1f:39:50:7a:11:fd:27:93:e1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Nov 11 07:00:39 2025 GMT
Not After : Nov 12 07:00:39 2025 GMT
Subject: CN=05e47a0d95a97f4ef1bc0b1f08f790d65b1effd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:c2:36:d1:19:52:ff:cf:53:a9:fe:22:4d:
a0:f7:45:84:02:d3:e5:67:c6:00:be:ed:cd:97:21:
da:d8:05:de:a3:9a:52:ce:99:c7:2e:f9:67:d1:53:
b4:ae:ce:84:e3:89:05:0e:86:3f:f9:2d:2b:84:c5:
de:d3:9f:8a:49:8b:62:92:ea:dc:b2:8d:6c:7d:06:
bd:72:5d:39:27:44:cb:14:1d:87:b6:9f:73:23:08:
5c:63:04:eb:96:fc:02:ad:0f:ca:59:20:b0:90:11:
22:c7:9e:13:82:ae:81:64:5e:ef:ad:bf:28:41:eb:
1b:f8:c5:2a:c1:0a:ce:21:0d:a1:06:66:7b:99:37:
bf:be:41:06:c7:9c:2c:06:88:ba:ef:fd:ae:16:c7:
df:9f:7e:b4:e2:67:7f:9e:b9:87:8f:b3:7f:b2:14:
38:b5:2d:d1:4b:89:d9:6a:dc:29:74:a0:46:e1:e8:
86:7a:74:c4:24:2d:69:98:37:90:62:a8:99:1c:78:
54:9e:9f:34:6e:6d:49:94:13:bd:7f:53:3a:34:60:
d2:23:d4:f2:51:34:03:8d:2b:e9:b9:8a:1a:1b:d6:
6f:fd:bd:f8:33:ce:11:9a:22:e2:58:44:25:56:13:
45:cd:cd:7e:86:d8:23:4b:7c:54:b0:f8:d5:07:8c:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E4:7A:0D:95:A9:7F:4E:F1:BC:0B:1F:08:F7:90:D6:5B:1E:FF:D3
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d7:ed:71:36:ba:24:df:b3:82:a4:4c:93:86:20:ae:cd:66:
69:bb:ed:ab:77:b7:e3:22:ca:ab:a4:78:a6:fc:98:ac:c1:df:
80:b4:09:f1:45:11:f3:fe:93:4f:d1:e7:6f:7a:fb:fe:c0:31:
e2:dd:76:aa:ae:cc:4b:7b:92:3c:19:11:0b:d2:65:99:3d:7c:
ad:b3:4c:e5:27:f8:25:29:b4:64:da:20:48:ad:b3:a1:d6:c0:
2f:57:0e:68:78:81:79:f5:34:4d:70:c8:91:dc:f2:f6:06:cc:
c2:4b:88:66:4a:fb:44:46:5a:c6:f3:48:80:db:f7:bd:58:e3:
21:2b:fd:4f:b2:71:56:2f:f0:a2:de:d3:36:9c:d5:8f:c4:ae:
32:fd:b4:f0:8d:bc:4b:2c:50:a8:12:34:05:69:3d:0c:92:40:
b5:6d:01:0a:d7:95:f0:1f:a3:db:8b:92:da:27:4f:41:cb:27:
b9:8b:2f:91:36:61:e2:62:3c:61:3b:86:ee:b3:9d:b7:fb:9b:
49:62:10:42:09:fc:c1:9d:c5:53:2c:fb:60:c5:94:3c:34:17:
4a:05:98:6e:d4:8c:16:02:92:49:a8:32:fa:f1:78:07:3a:25:
09:5f:22:29:0e:15:93:26:55:e2:ee:17:e0:a9:cf:4b:72:a5:
39:a2:eb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:56 2025 by rpki-client