Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
File: HSzcucdvXgzgw4XX4O8VVy0VpUw.mft (raw, json)
Hash identifier: KhKBFX+gWM6S9feGR6/amLgxmDFtxG7PGpFyypduXHA=
Subject key identifier: 3D:99:27:E7:B5:16:31:52:90:89:7E:8C:68:63:C1:D9:C9:2D:6C:99
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Certificate issuer: /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial: 019A52D1FC034D92344F733A38222F1AAFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
Manifest number: 16A3
Signing time: Wed 05 Nov 2025 07:01:24 +0000
Manifest this update: Wed 05 Nov 2025 07:01:24 +0000
Manifest next update: Thu 06 Nov 2025 07:01:24 +0000
Files and hashes: 1: 3E7aBqsHg6THlsFLCGCu1ykhumg.roa (hash: vdRC30YdnIGNPLtMGa2MkjovoqgS/LCgWDKRJk5Yhko=)
2: HSzcucdvXgzgw4XX4O8VVy0VpUw.crl (hash: YBAX8idj4AdWdAi3KiP9OFTMfsniDeyan7Kwly8UtcA=)
3: _gYUlUCfN6l5n67P7rXluh_fPlA.roa (hash: U4UZUMI/kaS2KD/9/bzXxhkFvL6NwSNWIwZGPCQg08o=)
4: drOxTuSdQFczpcVwXyFaIyEbsdY.roa (hash: flldTjSWU2bObz1CZncUhXjWnhrg2F/Btx8as3R6O7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:fc:03:4d:92:34:4f:73:3a:38:22:2f:1a:af:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Validity
Not Before: Nov 5 07:01:24 2025 GMT
Not After : Nov 6 07:01:24 2025 GMT
Subject: CN=3d9927e7b516315290897e8c6863c1d9c92d6c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:6e:1c:d0:a4:30:b7:47:e9:06:e4:06:8a:
66:91:e6:5c:e8:3a:e3:6a:44:05:fb:6e:f7:e9:0c:
1c:96:ac:f6:fd:77:a6:fe:c0:9d:e2:74:70:f6:67:
e8:8c:1d:cd:04:10:38:b8:94:06:5b:6d:31:57:6b:
73:ca:cf:64:5f:87:de:b7:92:f5:78:1b:d2:ee:fb:
5b:eb:00:49:d5:56:36:00:80:44:3e:31:b3:2d:2c:
53:16:0e:2c:8b:79:97:24:7a:42:6a:89:01:b3:17:
0c:29:97:8a:0f:8f:95:e1:f5:cb:b0:fc:7d:59:3e:
2e:f1:91:16:e7:54:55:16:95:8a:00:c5:b3:69:55:
d1:19:b5:c1:26:ee:a0:3e:fa:e2:52:ff:30:9a:4e:
f7:1b:27:7d:43:c6:b9:de:c6:a4:ff:d7:b6:0f:01:
29:30:39:e2:70:2f:29:d4:6f:df:b2:89:46:56:93:
0f:1a:62:55:d7:06:2f:f7:f3:49:c1:87:dc:81:9e:
92:8e:c2:08:8c:a1:66:3d:71:08:ea:6b:06:90:84:
8a:3b:86:cb:0f:d1:19:f6:c2:d2:cd:8c:c4:b0:e6:
74:98:17:0e:08:ad:fc:84:95:6b:0c:83:54:31:39:
8c:d0:3d:91:d0:6d:08:0c:71:60:03:d9:36:c2:53:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:99:27:E7:B5:16:31:52:90:89:7E:8C:68:63:C1:D9:C9:2D:6C:99
X509v3 Authority Key Identifier:
keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:27:a0:ab:50:6e:c0:68:9e:cc:a7:02:e7:10:aa:8a:e1:cf:
cc:0d:a7:35:8c:45:6e:79:5a:67:54:0d:97:52:9f:36:94:79:
87:7e:4c:88:99:df:18:14:cd:5d:51:ca:1a:b2:72:29:31:b1:
3a:ef:e6:45:8f:33:3f:7a:a6:3c:5b:67:34:ae:24:0c:4b:31:
29:51:ff:7a:a2:5e:cf:89:29:e8:5b:0d:7f:0c:33:42:5c:71:
81:cd:ae:c0:3b:38:f7:c0:59:cc:76:9c:fa:12:00:2d:73:91:
19:23:aa:31:63:8f:ba:ea:71:f2:9d:bf:b7:3e:d7:fc:06:2d:
e8:3f:0a:1c:c2:6d:75:a2:a2:12:82:4f:e2:4c:70:ee:e4:c6:
2f:b0:2b:df:6d:0e:d9:77:3a:28:72:ec:ed:1a:19:19:ea:e2:
9a:28:31:6f:2f:a2:88:2b:60:4c:2f:e9:39:de:b0:c8:c4:f6:
59:88:45:0e:67:55:11:09:10:b8:b9:83:8e:90:89:1b:df:21:
fa:6e:3c:ab:17:28:5d:58:cb:3d:6d:1d:15:73:11:78:c0:ac:
0f:ff:29:45:49:23:0c:1c:94:71:ff:41:88:7e:b2:5c:e1:d8:
f5:a9:f4:d3:b5:84:74:32:d0:9b:5c:c5:96:9d:2d:83:44:93:
e0:e8:78:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:04:46 2025 by rpki-client