Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier: olIMf5dC7VxkClDDM5E8P/LCNYvGKokPvoPpEMbaPXU=
Subject key identifier: F1:F7:A2:88:38:DD:94:0A:77:7A:BB:99:FA:5C:78:C1:5D:8E:AB:9A
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 019A5299E2F52DDA4F0BF017C2204D29CF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number: 1453
Signing time: Wed 05 Nov 2025 06:00:08 +0000
Manifest this update: Wed 05 Nov 2025 06:00:08 +0000
Manifest next update: Thu 06 Nov 2025 06:00:08 +0000
Files and hashes: 1: 8NRfsUTuURGgy6LvURHgXAUYZ-g.roa (hash: 1qJKisnCOTNkYdR9Qi95p8WJ2QZapPEQJWApMHtlHz0=)
2: DYgC_wXxnEgJuH-cACU484oZ2pE.roa (hash: jFVNUxIOqtUEhIDn4xuUsDyMe5nXxi2iJIXpfO1w0VM=)
3: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: fagJsZxPQMhzdTReqZKcfRr3i2zSXI0Y0y0tlJBzmpI=)
4: oU9vngXlBh9qS58cidJgmaut8mI.roa (hash: 81xEhNpA4axjgpY7GYYzc5dvarYHwCL8rkYCGoLgAKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:e2:f5:2d:da:4f:0b:f0:17:c2:20:4d:29:cf:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Nov 5 06:00:08 2025 GMT
Not After : Nov 6 06:00:08 2025 GMT
Subject: CN=f1f7a28838dd940a777abb99fa5c78c15d8eab9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:95:1a:52:78:66:4f:30:9e:ba:1c:fb:f7:
dc:02:ec:f3:11:cd:fd:11:cc:dd:ea:53:e6:38:a8:
6b:12:05:31:08:21:9b:64:23:26:71:af:e2:f1:44:
46:93:fc:49:4b:89:7d:f0:43:b5:62:46:80:72:93:
aa:2c:60:22:af:f2:b8:d4:c4:a3:93:71:5b:03:c4:
b7:8c:f1:7f:7c:f5:50:30:f8:d0:30:96:81:e5:d8:
37:14:ba:f4:a3:79:26:88:ca:32:a0:f6:8a:b3:18:
65:39:95:68:47:2f:7b:fb:d8:56:53:97:67:5a:c4:
e7:7c:e2:51:78:04:ee:58:26:bb:1d:74:de:8f:5d:
ec:20:59:7d:de:f0:89:1c:9b:af:95:e9:a3:c5:34:
52:30:0f:95:50:ae:bf:d5:6c:b3:47:e0:4c:91:13:
ba:21:bd:78:1d:ad:00:d2:f8:97:60:0e:fa:8c:d7:
73:b2:5c:a1:84:bc:8d:c3:8b:31:a8:bc:55:90:1b:
2f:a7:2f:4e:2a:18:83:64:85:da:17:62:03:a3:8a:
e1:a9:5b:12:d9:1c:76:9c:e5:68:1c:df:72:97:bf:
52:45:1e:96:9a:eb:23:b8:75:38:24:84:31:eb:ee:
02:86:73:98:ae:9d:21:af:58:ba:e9:db:95:b1:d3:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F7:A2:88:38:DD:94:0A:77:7A:BB:99:FA:5C:78:C1:5D:8E:AB:9A
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a1:e2:19:80:ba:7b:50:01:fe:07:70:40:ce:5e:65:65:79:
b4:9a:ce:91:c0:22:e1:96:c0:ef:89:31:d1:b4:b9:2a:c7:5f:
c3:aa:eb:1f:61:92:79:c6:7b:be:68:84:a1:f2:8b:a7:b9:f1:
8c:d4:01:13:9b:60:83:e4:6b:8d:b0:28:6f:95:89:78:bd:16:
6f:57:1c:3c:a7:70:e6:ee:02:0c:e7:5d:f7:46:a2:80:87:44:
94:f6:6e:d4:b5:76:d8:72:98:ef:89:64:7b:41:a8:29:1c:bf:
6a:7c:ea:2e:b9:b6:2e:28:7b:c2:9f:2c:be:0d:a5:8c:86:3a:
d7:ce:5d:d0:4d:70:9d:8a:35:c5:4e:4a:36:de:02:2c:23:6e:
30:01:4e:68:21:34:42:40:b9:39:2d:9e:e9:df:4b:47:91:83:
42:ae:09:81:26:45:cc:66:af:68:88:0e:b2:62:fe:d2:e8:93:
de:5f:64:34:5c:4b:32:56:0c:d3:64:2c:48:ea:09:bb:c8:4e:
af:36:49:60:a6:68:a6:4c:f6:5b:1f:dd:35:57:94:18:ec:ff:
1d:43:62:12:40:0b:59:12:39:74:cf:81:29:f1:06:8d:ea:f9:
4c:9d:64:57:f9:ae:94:e0:bf:b6:1d:bf:4d:3d:1e:41:1e:13:
fa:fb:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:13:26 2025 by rpki-client