Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
File: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft (raw, json)
Hash identifier: otmI1WFrN647xGzN61ygENcyIrrUvzvh3cdQ54pCmkw=
Subject key identifier: 9B:72:2D:E7:C3:CD:18:A9:CF:6E:BC:E1:1B:E9:BD:7A:2B:22:28:6E
Authority key identifier: 1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54
Certificate issuer: /CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54
Certificate serial: 019A4D3D3D18D0533837C4BDB4F29D3EC4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 05:00:50 +0000
Manifest this update: Tue 04 Nov 2025 05:00:50 +0000
Manifest next update: Wed 05 Nov 2025 05:00:50 +0000
Files and hashes: 1: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl (hash: DclN0xRYKm2QLO+rb7ONf3HlLhaCzPb/F87jRMR9vZ4=)
2: yJY2Oeq3toKxTdk7-X31riY01hg.roa (hash: 5uMPJikDIqqkTXkRRFHehwnU8XhjCZjiCcVLwMn6QX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3d:18:d0:53:38:37:c4:bd:b4:f2:9d:3e:c4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54
Validity
Not Before: Nov 4 05:00:50 2025 GMT
Not After : Nov 5 05:00:50 2025 GMT
Subject: CN=9b722de7c3cd18a9cf6ebce11be9bd7a2b22286e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:85:02:ee:2d:89:fb:c1:70:17:d7:01:09:
34:ce:c3:b9:01:bf:e3:d4:56:bb:ca:ad:12:90:e2:
9e:44:f9:09:fa:f6:f0:e1:d7:d1:ee:cf:48:59:7d:
a2:b2:f5:7e:94:57:d4:aa:47:11:94:50:e7:41:f4:
17:96:3b:f0:54:ac:c9:d4:d9:3c:48:ab:c9:ed:cc:
6c:4e:31:44:60:c7:b4:d4:4e:80:3b:00:1d:80:b9:
82:fe:15:23:a0:dc:b2:52:dd:ad:32:b9:bf:60:5e:
97:69:24:3d:0b:54:21:37:4f:ed:8b:c9:cd:33:60:
86:7d:8c:47:39:2c:bf:9a:19:3e:a6:1e:02:30:37:
fa:63:71:36:ff:69:8e:ea:c1:46:ab:db:35:9c:a0:
ba:90:12:bd:bd:66:89:48:5b:a4:6f:f5:00:7a:88:
79:65:a1:a7:87:1e:e7:3b:e5:c2:b1:a2:42:f8:de:
15:25:d6:ee:c0:0a:e2:cc:4b:9b:66:be:30:09:67:
62:46:4e:a1:fa:54:5d:52:5f:05:f7:e1:f7:18:3e:
07:20:d4:fd:73:64:34:af:da:f0:be:13:6e:a7:53:
b3:d9:46:b9:c5:81:7c:37:db:9e:04:a4:ab:98:fc:
7f:58:45:b0:7d:a7:34:7d:9d:ba:ec:6f:d2:6e:01:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:72:2D:E7:C3:CD:18:A9:CF:6E:BC:E1:1B:E9:BD:7A:2B:22:28:6E
X509v3 Authority Key Identifier:
keyid:1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5f:28:e5:b9:cc:b5:5c:5c:4f:fe:91:51:6a:b6:37:c7:79:
2b:0e:0d:a2:9b:f4:0e:cb:3a:ab:b1:32:58:5e:cb:41:3a:06:
38:ff:52:95:fc:9d:1e:89:a4:be:48:3a:5d:45:13:f6:51:15:
b1:4d:b7:5f:5e:3b:96:ca:07:2b:f4:5a:1a:e9:63:23:e5:e9:
25:33:54:6a:41:9e:04:0e:e9:6e:d6:97:98:83:57:c9:54:91:
63:52:f7:11:24:49:9e:83:ce:1a:a5:71:c9:00:4d:db:fb:15:
06:f1:3a:98:04:d1:be:23:6e:76:11:0c:bd:ed:a5:4a:58:14:
f1:a3:19:3d:71:41:6d:72:d0:de:99:5b:01:b2:57:1f:29:be:
fe:99:9b:55:ed:4b:de:55:eb:ca:4d:80:70:21:c0:a5:90:3c:
5a:64:34:1f:3d:d4:ea:78:79:4f:93:7b:9f:72:e1:36:99:38:
c1:7f:a2:51:c0:e5:6a:63:4e:cc:de:ae:d6:fc:50:6f:96:f5:
ce:c5:f5:0b:06:75:07:7f:11:e0:92:65:f2:0a:cb:4f:92:fd:
36:39:16:21:45:59:6c:32:f6:c5:a3:56:b0:4c:4a:c4:0b:12:
28:0b:10:f7:68:34:56:5e:00:56:55:32:15:25:e7:0e:bd:a9:
71:41:da:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:22 2025 by rpki-client