Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: MpiktJQjpmNwYHgOe2S1ERIijQYdH72RIxnVjAqg9R0=
Subject key identifier: 06:DC:F0:AF:D6:42:59:CC:E9:01:93:6E:00:B9:D9:E4:2B:AD:CC:1B
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 019A4FD07965510ACF74B12DFD21E0AD42E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 1627
Signing time: Tue 04 Nov 2025 17:00:53 +0000
Manifest this update: Tue 04 Nov 2025 17:00:53 +0000
Manifest next update: Wed 05 Nov 2025 17:00:53 +0000
Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=)
2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=)
3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: Y/PltFPojJie9OAf22o0xnc28JlwbExS1PGcZl8l9bY=)
4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:79:65:51:0a:cf:74:b1:2d:fd:21:e0:ad:42:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Nov 4 17:00:53 2025 GMT
Not After : Nov 5 17:00:53 2025 GMT
Subject: CN=06dcf0afd64259cce901936e00b9d9e42badcc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c6:98:0b:e9:58:c3:17:4a:71:e1:96:bd:dc:
a1:29:be:04:6c:10:d9:0a:ce:41:9e:5e:08:7f:06:
fa:ac:28:cb:86:bc:e3:d2:ba:76:c3:f9:42:4b:1c:
42:58:0e:58:13:45:0c:6d:dc:9a:6b:c1:71:b7:35:
c6:c2:55:ae:8d:d7:77:5d:9b:61:5d:bc:8f:73:cd:
4d:cb:94:97:62:2f:c8:cb:0e:f7:ce:80:96:2b:da:
dc:e9:34:5b:f3:44:3d:37:f3:c0:e1:9b:98:71:03:
c1:23:f2:44:74:db:fd:7d:12:3c:ec:5f:61:92:fe:
1e:87:15:a0:df:c5:4e:9f:1c:c4:b7:32:7d:25:87:
75:4a:b4:af:08:22:ee:4d:fd:df:02:2a:2b:63:5c:
c6:c3:c9:67:aa:b1:4a:7a:1e:9f:4f:e8:f2:49:5e:
bf:86:42:75:31:e5:bf:d6:09:62:fb:fe:bc:eb:59:
3b:f7:20:7f:af:b2:00:6c:ad:d4:d4:bd:f8:49:b9:
31:44:78:97:91:ba:91:54:ef:09:b4:61:39:d9:9d:
00:ef:07:1c:66:cd:c3:85:29:eb:a0:96:ea:15:27:
32:c8:c8:f2:b6:75:15:92:bb:a6:98:37:ff:26:e4:
ae:43:65:ad:77:bd:c5:fd:8d:c3:8a:6b:f7:8d:bf:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DC:F0:AF:D6:42:59:CC:E9:01:93:6E:00:B9:D9:E4:2B:AD:CC:1B
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cc:ac:b3:8d:d3:14:c6:92:39:ef:b1:6a:f0:be:ca:c4:35:
e4:3b:81:56:da:53:75:c2:d3:b7:e4:97:28:90:d3:f6:6e:47:
29:4a:a6:5b:e9:ff:7e:d1:bf:4f:55:18:14:d5:fd:f6:21:7e:
d1:75:a1:c7:f6:3e:01:c4:27:13:39:89:88:a5:66:54:db:9c:
86:67:50:46:56:b5:c1:f2:42:48:6d:5a:e6:c9:d4:d0:af:3a:
ad:57:44:a5:f1:39:04:09:6e:f7:f5:cd:f6:06:ae:fb:34:7d:
a8:16:9e:71:71:38:8d:5a:5a:f8:ae:dd:36:cb:1c:5f:db:5c:
09:ec:f3:eb:2c:77:09:a8:e7:b3:ce:7e:9a:e4:a5:41:5b:f8:
c8:9a:5e:d2:45:fc:20:40:ff:81:3d:18:6d:eb:79:53:9a:b9:
05:29:1c:a4:ec:af:ab:24:9e:2f:3c:85:ae:9d:06:43:8c:9a:
eb:68:90:6c:51:18:ac:c4:eb:a8:8c:3c:80:a2:10:dc:13:47:
f1:74:e6:03:e2:01:50:90:e5:d4:b1:fd:f2:25:76:b0:31:52:
74:00:54:01:f9:dd:74:d8:17:e6:07:ae:17:5d:bf:74:2b:68:
1f:89:05:5f:b3:81:fb:6c:d5:a2:dd:cd:e2:b8:79:a8:09:c6:
d8:c0:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:53 2025 by rpki-client