Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
File: HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft (raw, json)
Hash identifier: W6DGnT0c5UDKLVwt1gci5pH0Fh6RKh1OUHoVqPd6m94=
Subject key identifier: E0:02:83:8F:CA:7F:E9:05:E3:88:1D:19:42:0F:45:51:EF:79:C5:AA
Authority key identifier: 1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
Certificate issuer: /CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Certificate serial: 019A53AD51E2AB9DFB0BADE9E07752552238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
Manifest number: 1335
Signing time: Wed 05 Nov 2025 11:00:58 +0000
Manifest this update: Wed 05 Nov 2025 11:00:58 +0000
Manifest next update: Thu 06 Nov 2025 11:00:58 +0000
Files and hashes: 1: CSj4rvQmRyDsyaDEw0jstidXLzo.roa (hash: 3pSnEcRnf/ULKrT/Poc1HoH7UgR2xUCZ7SNrN3hfNmI=)
2: HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl (hash: NEh2+APiT/VNZDrG/2RKLcDLg6frnQep8l2mXSPjP5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:51:e2:ab:9d:fb:0b:ad:e9:e0:77:52:55:22:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Validity
Not Before: Nov 5 11:00:58 2025 GMT
Not After : Nov 6 11:00:58 2025 GMT
Subject: CN=e002838fca7fe905e3881d19420f4551ef79c5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:3b:8a:26:46:e4:56:4d:c4:84:57:7e:00:
c9:b4:78:9c:3e:c7:5e:dd:0d:eb:ec:ec:31:2e:21:
01:ec:3a:ab:64:cf:e3:b1:97:0d:0a:92:bb:2f:ad:
0b:7b:b8:29:c9:da:79:b3:6a:3c:6b:4e:59:06:61:
9c:c7:2d:66:7c:5c:f6:d2:aa:c8:28:7b:7a:54:40:
db:38:9a:bc:0c:ba:5e:83:65:80:4f:ca:b0:36:be:
a2:c4:10:c2:0a:8c:8d:b9:92:11:c5:22:bb:12:3c:
63:5a:a9:9c:86:bf:8c:07:e2:ae:f3:c4:bb:58:1d:
78:01:00:a0:e6:ac:47:a1:48:c9:92:fe:c2:80:41:
c3:33:ca:8f:77:03:39:a7:41:e8:19:01:d1:6a:78:
9b:13:3f:8c:4b:b9:7d:e6:3d:a6:72:1b:9e:85:3e:
a4:a6:ea:cf:e8:23:11:0b:b1:11:f7:01:49:be:0e:
1d:68:d1:2d:18:74:6b:4d:72:78:14:64:8a:2f:54:
b6:57:fb:c3:4c:05:34:dc:c7:e6:78:a1:4b:2c:01:
2b:5d:a4:b7:5e:fb:ba:07:df:04:f2:c9:b8:8a:ad:
d4:c5:ae:b2:ec:75:43:56:14:ff:3b:92:10:8c:48:
83:8d:f7:95:cb:ba:d7:aa:65:a3:8b:f5:72:f1:1c:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:02:83:8F:CA:7F:E9:05:E3:88:1D:19:42:0F:45:51:EF:79:C5:AA
X509v3 Authority Key Identifier:
keyid:1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c2:fd:92:c1:97:3a:94:19:10:fd:2a:14:82:57:e3:72:82:
88:e4:f2:b6:63:26:25:d3:44:4a:7e:b4:bb:3f:59:c7:13:02:
3c:c8:5f:25:f3:08:91:56:05:f9:3a:a2:66:83:4e:6f:6c:d1:
1e:0f:72:b3:3a:47:54:6b:69:1e:45:24:c1:0c:18:6e:98:2f:
39:9b:db:3e:f5:7e:f2:44:93:8f:d0:36:b6:91:76:f5:44:e9:
cb:4c:c5:b4:a4:dc:61:1a:f6:5b:c9:7f:80:17:1c:37:d4:8c:
3d:9f:f6:bb:5d:f5:be:b5:dc:05:ed:e2:80:56:aa:b6:ad:b3:
63:33:25:fb:3b:0e:27:cb:82:5c:f8:0c:05:c3:67:1d:61:db:
11:5d:7b:6d:71:16:23:71:68:11:81:44:d3:e0:0c:d9:cc:05:
6b:dd:23:83:84:a0:34:a0:28:92:d8:bc:61:8d:54:f7:21:78:
85:93:51:45:f5:4a:51:c7:4e:93:2e:69:46:69:91:42:d5:bb:
32:41:4f:8f:0c:08:b0:09:42:36:ed:78:70:dd:c4:a2:58:2b:
60:c6:8d:97:62:ca:74:97:cb:61:ec:2b:ae:d6:ea:30:cf:ad:
e4:1b:7a:e9:b6:6c:85:cf:e0:d2:2f:08:78:1b:72:dc:4f:d2:
3e:34:b1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:49 2025 by rpki-client