Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: aPPSXFW9eX3WJsxTnGmF5J6olVZbb9yzhWqMxdVxn7g=
Subject key identifier: E8:FC:96:BE:7D:AE:8A:1A:5B:EA:B0:1B:D3:30:3A:6C:16:46:67:54
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 019A522CDEB8FF0942ABC428A0B72194581A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 119D
Signing time: Wed 05 Nov 2025 04:01:03 +0000
Manifest this update: Wed 05 Nov 2025 04:01:03 +0000
Manifest next update: Thu 06 Nov 2025 04:01:03 +0000
Files and hashes: 1: Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa (hash: U4y0eau1NcIfxGeynrNwqFBJWvMOiOvvzCwI1Oo5dvk=)
2: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: uCAdfOZpuGUwAE5KaoiuTl6AAXvnvnvHHm8uQAH5wYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:de:b8:ff:09:42:ab:c4:28:a0:b7:21:94:58:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Nov 5 04:01:03 2025 GMT
Not After : Nov 6 04:01:03 2025 GMT
Subject: CN=e8fc96be7dae8a1a5beab01bd3303a6c16466754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:03:d5:44:d0:e8:b9:2c:e1:d1:1d:88:7e:
a6:a3:75:40:9d:b9:11:e8:c0:dd:de:f6:38:87:86:
cc:5e:50:77:42:d9:f7:9a:cb:18:1c:0c:1c:bb:e1:
bd:c5:83:c5:de:30:81:b2:f8:d2:2b:45:5b:c2:5a:
93:cf:39:88:5d:6c:e2:3c:a5:29:59:9d:7b:08:5d:
dc:ee:5d:9e:54:09:eb:66:14:c8:5c:92:f3:4d:5c:
f7:87:4b:a1:7b:8c:4d:c6:d9:15:c5:9a:97:f7:c7:
5d:9e:f3:ce:4b:1b:55:98:fe:3e:41:56:1d:66:cb:
30:d8:4a:d5:f9:8b:4c:34:7d:ca:b9:43:74:80:41:
d4:08:2f:6c:9a:07:5b:eb:58:08:95:20:04:12:46:
75:ef:10:18:55:75:ed:a7:2a:e0:c6:4b:bf:2a:9c:
4c:f0:10:07:9e:70:cd:d2:5d:83:ac:6b:24:aa:2e:
83:ae:d1:d4:83:95:9d:1d:e8:21:d9:22:cf:9d:3f:
38:e0:13:55:63:8c:4e:c6:9f:e4:17:47:3f:3a:63:
21:bd:e4:c5:69:c8:42:1c:4c:3b:db:f0:df:69:6c:
a4:28:e8:53:59:8e:47:54:39:a6:25:03:8b:4e:ef:
b9:73:01:31:d0:21:cc:67:b1:49:07:21:4a:1e:86:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FC:96:BE:7D:AE:8A:1A:5B:EA:B0:1B:D3:30:3A:6C:16:46:67:54
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:69:71:4b:cb:3b:86:38:24:9f:dc:2a:5f:cf:5f:81:a8:87:
d0:dc:43:91:09:57:fe:d4:a3:0b:e5:07:eb:0a:de:2b:53:83:
19:fc:d8:e6:f6:a8:3d:81:86:07:60:3a:0c:cd:d2:78:15:88:
6b:47:f6:ba:68:c3:8a:88:a5:c8:af:8c:69:96:63:c4:71:9c:
d3:b9:6f:65:c2:ce:16:06:5e:3f:cf:d7:db:9c:74:a6:bc:24:
ed:2e:a6:c5:bf:54:95:20:40:d6:9a:66:81:90:d3:41:48:ab:
b2:a5:b0:5a:f0:9b:68:a9:d0:b1:d4:62:99:59:a7:35:ed:3d:
31:0b:a1:23:ef:5a:65:1f:22:85:aa:01:0a:9b:ba:88:4b:8d:
b0:47:0a:a1:38:45:ab:94:58:20:b3:51:67:fe:30:a5:a7:75:
0a:91:f6:4c:71:3c:3f:e6:02:1b:db:3f:b9:c3:d8:60:fe:5f:
38:11:ab:ff:96:ae:72:39:4b:ff:13:a1:01:e0:22:0e:c7:60:
eb:5f:da:f7:b4:42:d8:e3:6e:c7:13:a7:31:36:35:91:f2:a6:
3e:fd:44:4d:8e:76:2c:45:1d:1b:32:ec:cc:64:34:e1:62:cc:
78:61:90:49:44:c1:e2:fe:a2:f4:8e:b4:c2:58:46:7e:c0:09:
c8:34:eb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:11:56 2025 by rpki-client