Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
File: HH3TyBbYWWCARyBUNICV7SuFUeU.mft (raw, json)
Hash identifier: 6k1s13O1YszZmu12PK5v1oUfyDn7iVtGxmR3ESts0YE=
Subject key identifier: 72:86:54:45:19:99:0A:D4:09:9F:A6:90:64:B9:BC:E4:12:AD:52:6F
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial: 019A4D3CF650C3E237FB7A35572116E6BA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
Manifest number: 147F
Signing time: Tue 04 Nov 2025 05:00:32 +0000
Manifest this update: Tue 04 Nov 2025 05:00:32 +0000
Manifest next update: Wed 05 Nov 2025 05:00:32 +0000
Files and hashes: 1: HH3TyBbYWWCARyBUNICV7SuFUeU.crl (hash: mkGW4gAdgAmRKqT+ak0E/5uGvfMNx+njOp5s2KM9d/c=)
2: lUApR8rVpWyDLR1GadE8v1PzIFI.roa (hash: SjTc2RPVxxZZujKF5tyIKpHPh6Uad/TapUg1uEd/j6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f6:50:c3:e2:37:fb:7a:35:57:21:16:e6:ba:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
Validity
Not Before: Nov 4 05:00:32 2025 GMT
Not After : Nov 5 05:00:32 2025 GMT
Subject: CN=7286544519990ad4099fa69064b9bce412ad526f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:a0:49:8a:4d:5a:93:cf:7f:a6:ca:c1:21:
68:ea:4e:57:86:20:77:0d:56:31:87:c3:c3:12:a1:
54:d7:8f:a7:6d:df:8b:81:95:a2:52:ee:e9:3c:7c:
f6:21:28:59:2b:00:f2:c1:9e:09:78:e0:ef:ca:2f:
af:4a:43:f2:bd:97:1c:22:d9:8a:9d:d6:ce:9b:99:
3d:f4:d7:29:d8:23:4c:23:74:db:09:ae:46:ee:00:
5e:5d:6b:a9:99:ff:a0:cd:19:a7:c7:92:bf:fa:79:
be:30:e5:55:d3:88:a5:dc:fa:34:51:68:8b:c9:6d:
f2:8a:3c:50:4b:99:60:07:cd:e5:05:48:74:c9:33:
a6:f7:83:c5:2b:ff:08:ec:bf:0c:f6:60:74:fd:62:
17:8b:3a:3a:e4:79:63:53:2b:f1:ad:56:1c:2e:05:
ff:b3:2f:31:d2:9b:3c:b6:61:b2:77:c0:0c:84:23:
94:fe:db:6b:fc:78:b2:9b:3b:11:ee:f9:fb:05:2c:
31:15:39:76:c4:2c:33:9a:ba:d2:b0:fb:ce:3d:dd:
82:21:b3:f9:a0:07:9a:d7:e6:2f:21:cd:40:fe:18:
7c:43:ff:5e:c4:bf:04:ae:68:07:12:ee:a2:26:52:
a3:b8:69:b1:fd:1d:af:8e:7a:89:6c:1e:39:ed:c7:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:86:54:45:19:99:0A:D4:09:9F:A6:90:64:B9:BC:E4:12:AD:52:6F
X509v3 Authority Key Identifier:
keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bd:43:5f:21:40:c9:bb:04:2e:78:de:00:10:5c:28:2a:93:
f5:76:19:d3:4b:3c:a9:e6:9e:67:08:43:34:0f:10:9b:e6:17:
21:11:06:8e:cc:1a:84:42:a0:14:1e:06:9d:ac:c1:1d:41:51:
ac:6e:43:9d:4d:d3:a5:7a:fb:0d:ac:8c:7a:41:cd:ab:8e:52:
26:7e:d5:f3:ab:ea:a7:aa:2a:47:6a:76:7e:d2:7d:0d:cf:84:
13:9f:79:20:07:5a:0c:fc:0b:5e:3a:73:47:77:1e:d3:23:12:
7d:78:15:c9:b8:53:22:d8:4a:a4:af:e5:78:90:6c:25:26:52:
6d:75:83:e8:52:c3:9e:d5:74:92:3c:d6:12:b8:25:7f:3b:90:
25:bb:05:3c:23:be:c2:19:80:8f:19:2c:f5:7e:86:9d:90:fe:
13:c0:bd:3a:64:bc:ed:6c:bd:05:41:de:be:ab:17:aa:1b:bd:
70:58:4f:05:33:d5:56:19:c8:0a:87:ce:b1:a9:a9:d1:56:af:
55:cc:3e:3a:f5:9c:2f:30:56:95:de:c5:1b:f1:05:fb:4e:d7:
82:1c:f4:15:bb:b6:6a:02:3f:d6:3a:75:8b:0c:4c:92:45:7e:
b3:80:65:21:cc:04:98:e9:60:8a:86:d7:ff:3c:88:ef:c9:ad:
f6:13:ef:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:01 2025 by rpki-client