Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: WKxU2Bhi/bpe2W+kznALt0I+ZPN1Ivg8vN9wjQdXPcs=
Subject key identifier: 5A:84:61:E9:6E:F3:46:E7:C5:8E:7B:47:42:C7:7F:CC:DD:28:F9:64
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 019A4EF43656535EBD434038EB1CECC30100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 1430
Signing time: Tue 04 Nov 2025 13:00:18 +0000
Manifest this update: Tue 04 Nov 2025 13:00:18 +0000
Manifest next update: Wed 05 Nov 2025 13:00:18 +0000
Files and hashes: 1: 9zhTOpiuNqKnk778yI8rOgQQ8-A.roa (hash: ABWXF/FnYjdj8H9UnlqrtLWEbBYpls+daSI459eMuZM=)
2: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: vpaA81M5aYDXBuZtZkoqTKGlowDnZOspzyxuGU1aXy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:36:56:53:5e:bd:43:40:38:eb:1c:ec:c3:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Nov 4 13:00:18 2025 GMT
Not After : Nov 5 13:00:18 2025 GMT
Subject: CN=5a8461e96ef346e7c58e7b4742c77fccdd28f964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:a5:39:0c:84:8c:c9:ef:86:24:5d:88:ed:
66:d4:bc:bf:2e:e9:ba:46:67:7f:b2:7b:28:8c:b8:
e5:cb:eb:37:8c:b7:15:64:7e:d1:0f:64:a4:56:b0:
5e:c9:9d:e3:1c:9d:ef:4a:2f:6b:bc:71:00:b7:78:
01:dd:ad:11:0f:9b:6a:0d:53:2b:df:54:f4:cf:a4:
3d:e0:a6:7a:8b:57:9e:a4:bd:0d:c7:2d:61:42:35:
78:6b:74:e8:32:60:29:dc:19:7c:d4:2e:45:d0:e8:
eb:4b:40:de:66:75:6a:97:a1:27:80:c8:6a:f4:df:
55:be:e7:bb:e9:29:e5:1e:a6:e5:bb:d8:ec:5a:bd:
e0:95:d1:b4:0b:6f:6c:68:3a:c1:4f:3a:85:9f:cf:
a5:30:e9:b2:63:77:82:9a:55:5a:2e:ab:93:c1:dc:
42:3a:e2:74:0a:31:d4:e3:0e:94:a4:bc:78:78:81:
bf:e2:21:24:f0:c9:a6:2c:a1:90:cf:dc:54:d4:c0:
fc:3c:12:b7:f9:d9:49:e1:ee:d1:cf:b9:7a:63:38:
6d:68:a9:31:32:3c:9a:77:20:f3:81:61:46:57:67:
86:e4:46:b7:ea:e7:52:01:c9:d3:cb:9e:21:83:7a:
f4:78:a5:26:5f:29:3a:31:84:af:be:63:89:87:15:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:84:61:E9:6E:F3:46:E7:C5:8E:7B:47:42:C7:7F:CC:DD:28:F9:64
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:58:88:97:7c:a6:fb:28:e3:d2:c8:a4:3f:ae:7c:2d:fa:4e:
ee:9b:f3:12:8f:34:3d:78:be:e3:38:fd:d1:f7:74:60:29:e2:
a6:e1:3c:db:84:9a:a1:d0:e1:1d:e4:38:f3:2e:b0:07:0d:5d:
61:f0:87:d2:31:a5:1b:0d:c3:3e:d3:f6:f8:d0:e0:9e:a7:ad:
ad:63:a0:cf:84:f8:fb:14:22:61:c9:47:6d:d6:bd:d9:8c:34:
fe:0f:75:fc:d9:93:cd:f4:1d:d1:d5:af:bb:56:f0:08:b2:40:
6d:a5:a8:9c:31:40:dd:69:2f:cb:0e:8d:80:83:c9:b8:c2:cb:
4d:97:26:91:24:f9:fc:5a:91:90:9d:58:11:cd:f0:ff:c8:57:
b3:29:bb:18:38:cc:17:e6:0f:6f:c0:4c:5f:36:f3:ea:b0:92:
92:fd:b5:0f:4e:8e:1c:d8:9f:8b:0a:e3:4b:97:54:dc:35:e6:
1d:84:d7:a6:10:10:28:8d:15:71:5c:4c:fe:08:78:d2:57:c3:
61:d7:9c:08:dc:02:df:5e:6d:76:34:6d:ec:25:13:8e:80:d6:
8d:9b:15:01:10:79:74:ad:1c:a1:e5:bd:ef:8c:3a:d8:68:51:
48:eb:08:6a:d0:84:70:aa:9b:2c:27:67:29:46:b9:84:70:57:
85:e1:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:42 2025 by rpki-client