Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: ql3vDBilmC86j5pz8rt2yKCzQjpuHhX2pIU10xsgTzc=
Subject key identifier: 82:AE:36:E9:F6:98:C1:BF:CE:86:66:AE:22:28:D6:7E:0E:DF:97:B8
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 019A4DAB0E779C525B509E431150DEE4FA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 110C
Signing time: Tue 04 Nov 2025 07:00:47 +0000
Manifest this update: Tue 04 Nov 2025 07:00:47 +0000
Manifest next update: Wed 05 Nov 2025 07:00:47 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: yAJUD8ze2lz1jcYmNYU6U2MbdNwsC0TH9MSSrjx4Q5E=)
2: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (hash: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:0e:77:9c:52:5b:50:9e:43:11:50:de:e4:fa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Nov 4 07:00:47 2025 GMT
Not After : Nov 5 07:00:47 2025 GMT
Subject: CN=82ae36e9f698c1bfce8666ae2228d67e0edf97b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:d0:f6:15:13:a8:42:e4:25:9f:41:dc:93:
67:6b:07:75:f6:0c:b3:1b:93:79:58:d6:16:41:4c:
30:0e:4c:a2:e7:d2:0c:29:a0:af:bc:77:50:6b:29:
9d:1a:ed:91:e7:39:c5:69:76:f8:7c:08:37:a9:d6:
93:e6:8a:56:b7:c0:ae:9b:23:e1:50:ac:41:16:50:
42:a0:0a:d6:b3:1a:bc:73:b4:0a:93:d3:33:2b:eb:
93:c2:a9:86:a5:ca:78:05:49:53:5f:7a:e0:99:16:
55:76:49:d8:92:06:39:6a:5a:88:77:c8:34:8b:29:
71:9e:8c:ad:02:37:78:98:ed:e8:fd:b9:e3:fc:bf:
5a:be:b0:2e:cc:1a:37:94:4a:8c:ec:67:d0:f1:a9:
02:b2:f5:f0:99:59:5e:d6:ad:13:19:11:98:af:90:
cf:ef:fd:54:7e:14:fa:67:3b:63:d3:34:34:09:71:
6e:0d:0a:2d:b7:07:83:10:68:76:38:a7:57:4e:ef:
c3:60:d4:30:94:35:46:0c:4f:7a:e3:a6:f0:e4:d2:
a8:60:45:2e:f3:f8:af:d4:fb:0d:8c:3f:a1:89:ef:
3d:25:28:92:d6:1e:39:70:85:ca:12:e2:a0:58:83:
f7:f2:4b:92:2d:12:b7:4a:7b:dc:03:ba:e3:fd:59:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AE:36:E9:F6:98:C1:BF:CE:86:66:AE:22:28:D6:7E:0E:DF:97:B8
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:87:d6:1d:c0:cf:6d:5b:bd:fe:c1:8e:2e:c3:6f:55:ac:9b:
1b:43:3a:92:64:cf:24:85:b1:de:1a:1c:3a:56:a8:7e:23:a8:
9f:f4:c7:9a:97:7c:a7:86:c2:ae:ed:01:11:5b:ce:7d:a2:ef:
f6:04:62:6e:c9:0e:0d:22:29:c1:70:8f:d5:b4:fd:2b:db:29:
af:3b:e9:71:af:19:8c:d0:3a:91:69:f9:62:52:19:6d:d6:35:
0e:8c:ca:16:da:ff:c9:0d:ce:ae:fe:70:c7:a4:be:55:bf:0e:
49:d8:2c:07:47:19:d8:e0:33:69:17:46:54:c0:d2:8a:dc:36:
45:0d:b2:20:dd:1b:d4:9c:25:27:3b:c9:d1:d0:52:26:5a:ae:
df:16:74:ca:98:64:bf:8d:0e:4f:5e:81:80:fb:38:c9:12:49:
ca:ec:20:86:43:cb:b1:cf:7d:fc:50:a6:a2:89:b7:c1:ea:49:
22:01:7b:bb:21:e2:36:17:1a:73:1d:ec:80:4f:f1:87:ee:3d:
f5:c0:82:a2:aa:3d:a1:74:f6:93:4d:db:a1:e5:af:3c:b7:44:
ca:29:ae:71:3c:6c:99:30:e3:0d:07:4d:f2:f7:99:18:d1:f3:
39:5b:a8:4c:64:79:25:1d:5b:b1:63:88:1b:43:44:22:7b:30:
49:52:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:33 2025 by rpki-client