Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
File: HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json)
Hash identifier: AajkxjubvY4tGQjkcOeg1HXddNrbe3RaSfcVPsFgufQ=
Subject key identifier: EB:69:40:13:1A:06:03:AE:C6:94:64:6C:8A:25:F5:A6:30:56:81:5C
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial: 019A54514AAEAE0AA269B3448DA7F615F605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 14:00:04 +0000
Manifest this update: Wed 05 Nov 2025 14:00:04 +0000
Manifest next update: Thu 06 Nov 2025 14:00:04 +0000
Files and hashes: 1: 3_exLez2c6RtEvnfTNzKi4Hkk5s.roa (hash: My7qt21+jNuMKjyzC8y2c2BBa1kohFZiD1+qyo1M/9o=)
2: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: G/4qW0ZTjOD9kkVfokHYJil/6dIHKFeyDz3ELXhV1xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:4a:ae:ae:0a:a2:69:b3:44:8d:a7:f6:15:f6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
Validity
Not Before: Nov 5 14:00:04 2025 GMT
Not After : Nov 6 14:00:04 2025 GMT
Subject: CN=eb6940131a0603aec694646c8a25f5a63056815c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:64:1b:5d:ca:81:60:ae:6e:22:1b:aa:10:
0a:db:4d:f2:d6:25:a7:67:6a:fa:65:17:52:9b:1e:
a1:c8:2c:f8:6e:f0:6e:09:d6:58:6f:21:59:16:a2:
7a:c5:8c:53:52:f0:4e:7e:3e:30:9f:67:19:27:03:
e7:db:5d:b9:2e:d6:85:35:fc:c2:f0:1c:7a:04:5a:
d1:27:19:43:20:80:88:44:32:0d:d4:65:62:f9:1f:
f4:ef:2f:60:81:e0:89:53:6a:dc:fb:dc:18:7e:42:
76:75:9f:38:81:cb:ab:45:8b:b7:98:ac:c1:67:f9:
ed:c4:06:50:99:c4:5e:32:e3:6e:ec:8b:ea:97:49:
d1:23:95:e9:51:fb:16:87:a7:69:06:2a:4e:18:e8:
b7:73:53:90:f3:0f:cd:e8:c5:90:78:fa:f2:e7:21:
05:ca:ab:b8:a0:0c:02:7e:41:e9:04:59:fe:c4:20:
59:46:25:b4:5f:ee:a7:5d:91:16:19:07:f7:c0:c9:
f5:7f:a9:a7:87:0e:ae:30:db:a4:45:04:52:26:7e:
b0:01:62:80:3e:da:fb:05:51:0d:f8:52:26:87:e6:
09:fd:e5:ee:82:b9:88:59:ca:c1:44:54:d9:15:91:
10:f6:99:8a:a4:59:db:82:30:51:85:f0:ec:96:60:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:69:40:13:1A:06:03:AE:C6:94:64:6C:8A:25:F5:A6:30:56:81:5C
X509v3 Authority Key Identifier:
keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:20:b0:55:c5:2b:b6:12:ab:48:c1:f8:8a:38:90:8e:82:8d:
b2:cc:e4:ff:a9:f7:eb:0b:b8:18:b9:bf:1c:01:0d:d2:36:8c:
90:a3:95:8e:a6:4e:0c:a8:a4:95:8c:eb:e8:54:e1:52:c7:4e:
4d:82:99:50:57:f2:4f:f4:bb:d7:94:3b:04:d5:7f:52:5a:46:
35:bd:69:a1:36:48:5d:35:17:1a:4c:b4:6a:4d:ee:94:1f:fd:
30:c5:db:e1:1a:72:b5:d3:8b:8e:9f:40:70:28:31:ff:f2:4a:
e8:9a:a0:36:34:b5:a4:e1:da:a7:d5:de:1d:93:1e:08:59:d9:
76:f4:22:e6:66:f9:12:13:95:60:29:b9:c2:6d:0e:6f:2c:db:
5b:39:6c:a9:78:2a:ca:27:6f:d7:cf:b9:cd:70:9e:60:ac:29:
8b:59:aa:25:c1:12:94:d7:9c:27:67:d0:f6:f1:a4:5c:8a:7d:
1a:93:0e:0f:ac:aa:45:f1:6c:e7:0a:42:c7:23:00:95:f2:12:
7f:80:b8:a5:1d:9e:8a:cf:7a:62:fd:82:27:7c:33:6f:9a:f9:
46:ad:37:eb:e0:d7:5b:86:73:5d:44:98:58:ef:8c:6a:2d:1a:
09:f8:f4:42:c1:a8:b3:cf:66:6d:12:7e:a8:34:09:5d:b9:50:
4b:e1:52:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:05:26 2025 by rpki-client