Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
File: HWHLS77lzdfs7adWCqJJxtEfI6k.mft (raw, json)
Hash identifier: JTqZThMXjTH9RkuJu0CQzqDyZkGfS/QETuW1fGulmOs=
Subject key identifier: 5F:E2:8F:3E:8B:84:C7:00:B5:EA:F3:6D:E2:3F:C6:A4:48:89:0F:04
Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
Certificate issuer: /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Certificate serial: 019A4EF4BF260489A170804051174BEF53D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
Manifest number: 0E34
Signing time: Tue 04 Nov 2025 13:00:53 +0000
Manifest this update: Tue 04 Nov 2025 13:00:53 +0000
Manifest next update: Wed 05 Nov 2025 13:00:53 +0000
Files and hashes: 1: HWHLS77lzdfs7adWCqJJxtEfI6k.crl (hash: gs4viCj77UpuGdnk09MjzJ1ar6whWP8nWEDaS8DelXc=)
2: RPmjQPRT6ThSraH9_mRiL0MDtOs.roa (hash: whApUZJ7ydquVhB+yjQTmZxwrY2+CBwkk7L36wahsAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:bf:26:04:89:a1:70:80:40:51:17:4b:ef:53:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Validity
Not Before: Nov 4 13:00:53 2025 GMT
Not After : Nov 5 13:00:53 2025 GMT
Subject: CN=5fe28f3e8b84c700b5eaf36de23fc6a448890f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:99:8e:26:af:81:4b:ab:a5:32:2a:76:ff:
2d:ae:24:e5:14:97:f2:7b:01:ed:98:e2:06:5c:1a:
31:ef:29:8f:12:d0:25:bf:02:b9:e7:a7:1f:6a:3d:
9d:9d:e5:dd:e2:71:2e:d5:3d:bd:2d:76:78:ae:f3:
b9:03:53:e0:ef:52:73:90:f1:5f:af:18:6d:80:c4:
e4:58:a4:cb:62:c7:4e:9b:a6:ea:ff:85:e9:42:73:
b8:e6:a3:98:92:b6:be:ab:5b:db:3e:ac:7b:ab:bc:
ca:2f:58:36:62:7f:d2:32:e8:f4:46:42:95:1a:a9:
cc:60:57:da:77:b0:0c:46:74:2e:da:23:e4:91:f2:
05:0a:79:c6:25:7a:77:8f:d0:a8:05:e0:95:af:a5:
fb:f2:68:bc:6a:3c:1b:2f:b1:55:fb:6f:c4:2a:66:
4f:41:57:53:50:27:73:bd:ab:69:06:ed:fc:b8:bf:
86:77:f2:0b:21:44:f4:c3:4d:e0:af:9e:89:bf:b7:
c7:48:1f:81:22:72:63:29:3f:1b:15:00:c2:b4:4e:
93:1b:17:c8:b9:07:b2:9c:9c:e3:1a:34:ec:c8:d2:
13:f1:64:01:f1:78:ca:6b:61:90:72:16:d2:e7:e7:
49:2b:8d:19:e8:71:53:24:2b:24:34:8c:a0:fe:db:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E2:8F:3E:8B:84:C7:00:B5:EA:F3:6D:E2:3F:C6:A4:48:89:0F:04
X509v3 Authority Key Identifier:
keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c3:57:ab:81:71:3d:c1:cf:c4:c5:3a:67:ab:dd:d8:34:b1:
16:12:14:7e:36:d2:30:b6:4c:b6:84:e3:28:1d:aa:51:33:05:
c2:99:28:c5:d2:3a:4a:4a:b3:86:c8:40:09:b1:ec:b3:21:ad:
eb:9d:cd:35:e7:c4:b8:82:d2:63:4f:c2:90:9d:2c:da:2b:03:
74:ad:25:1d:50:f0:5a:f7:9c:fe:df:d0:72:17:f7:92:8a:da:
56:ee:35:e7:27:7f:e4:7a:e0:5b:70:62:25:d0:15:ea:5a:6e:
85:b6:f1:87:e7:31:41:ed:cf:a0:82:d3:64:0e:06:ab:28:4e:
b4:6d:20:f7:da:d6:57:c3:99:1d:d9:f0:8c:ef:da:d1:fd:9e:
ba:db:96:6f:83:52:c4:75:ed:a3:70:44:31:45:e9:5d:0f:44:
1f:2e:c2:fc:b7:f2:ba:39:fd:c1:dd:19:9d:4e:3c:42:6e:15:
f2:36:cf:e6:3c:61:e3:02:49:50:f2:bd:83:28:46:7c:f1:26:
35:71:89:c0:fd:68:e3:24:f7:ab:cf:5e:9f:fa:2a:6e:dc:f4:
79:4d:70:08:19:f0:32:04:85:3d:ab:8c:a7:d0:cc:c1:6b:ce:
98:f9:e9:6a:0a:30:85:27:b6:fe:ca:c4:72:e3:b4:cd:ab:14:
fa:e7:35:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9L8mBImhcIBAURdL71PRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjFjYjRiYmVlNWNkZDdlY2VkYTc1NjBhYTI0OWM2ZDEx
ZjIzYTkwHhcNMjUxMTA0MTMwMDUzWhcNMjUxMTA1MTMwMDUzWjAzMTEwLwYDVQQD
Eyg1ZmUyOGYzZThiODRjNzAwYjVlYWYzNmRlMjNmYzZhNDQ4ODkwZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LOZjiavgUurpTIqdv8triTlFJfy
ewHtmOIGXBox7ymPEtAlvwK556cfaj2dneXd4nEu1T29LXZ4rvO5A1Pg71JzkPFf
rxhtgMTkWKTLYsdOm6bq/4XpQnO45qOYkra+q1vbPqx7q7zKL1g2Yn/SMuj0RkKV
GqnMYFfad7AMRnQu2iPkkfIFCnnGJXp3j9CoBeCVr6X78mi8ajwbL7FV+2/EKmZP
QVdTUCdzvatpBu38uL+Gd/ILIUT0w03gr56Jv7fHSB+BInJjKT8bFQDCtE6TGxfI
uQeynJzjGjTsyNIT8WQB8XjKa2GQchbS5+dJK40Z6HFTJCskNIyg/tuNGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/ijz6LhMcAterzbeI/xqRIiQ8EMB8GA1UdIwQY
MBaAFB1hy0u+5c3X7O2nVgqiScbRHyOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iMmY1ZjktZDM0YS00N2EzLWJiNTQt
MDg3MWZkYjZhNGZhLzEvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iMmY1ZjktZDM0YS00N2EzLWJiNTQtMDg3MWZkYjZhNGZh
LzEvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMNXq4Fx
PcHPxMU6Z6vd2DSxFhIUfjbSMLZMtoTjKB2qUTMFwpkoxdI6SkqzhshACbHssyGt
653NNefEuILSY0/CkJ0s2isDdK0lHVDwWvec/t/Qchf3koraVu415yd/5HrgW3Bi
JdAV6lpuhbbxh+cxQe3PoILTZA4GqyhOtG0g99rWV8OZHdnwjO/a0f2eutuWb4NS
xHXto3BEMUXpXQ9EHy7C/Lfyujn9wd0ZnU48Qm4V8jbP5jxh4wJJUPK9gyhGfPEm
NXGJwP1o4yT3q89en/oqbtz0eU1wCBnwMgSFPauMp9DMwWvOmPnpagowhSe2/srE
cuO0zasU+uc1UA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:38 2025 by rpki-client