Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier: B1qcdhAYSSzySvU0dB1aTeEbB+RrPlurHjj4cL4hXLE=
Subject key identifier: A4:32:48:A7:FD:91:7D:42:F5:25:34:91:D9:1B:9E:89:01:7E:D2:08
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 019A4D742FE57267B2D500CCA372A8ED51D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 06:00:51 +0000
Manifest this update: Tue 04 Nov 2025 06:00:51 +0000
Manifest next update: Wed 05 Nov 2025 06:00:51 +0000
Files and hashes: 1: 3rLuW8QzyohR5G8GlpoQPu-Q6-s.roa (hash: F/8n4kYq76m4ZS+34MKi7W7c5dmdl0PtvWuG8cLJRrQ=)
2: 5ExX7PElDwhZvsqUirscS-kfnho.roa (hash: bqRW9TpS9PZv6OIHrk3qUk9RHaZcJhV08bnl4u3kvQE=)
3: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: KqYKKg1u4qSSQivVO4D75vMRk7stKCi8QGScWmwt4og=)
4: SUGGbjb1_Jk1qcT2JM8WcjQsO3o.roa (hash: oGVNqEXP6azb1lMS8LZZ+mpr73t/MEzsv974PdYYkYc=)
5: Z1aPPPc81U2W2p-hUbb2wEiLSrc.roa (hash: 2YYRPX4gY5ODPttZebzHcbGfP4UENAWKSJvWHEPrLO0=)
6: n-W5m8Lx-i-ynu-cgERA98e1TOA.roa (hash: 4MuuW1m/TV8O5IZ0i/ayNAC7gzR7V1teSLC1JE5/iDs=)
7: pMSZccnz2cyq4EAmIRmDcUPtCn0.roa (hash: rRJO86ohCtFwFSEvJg481KQrtUgLqQRd6A69YZTm2Ng=)
8: ySmmDjcV5o8HMr8fci-zFbiYdNg.roa (hash: QRYJ/tIaqmXv+2YeufSiFwnuiLCPfX4BPxDANJPYOl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:2f:e5:72:67:b2:d5:00:cc:a3:72:a8:ed:51:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Nov 4 06:00:51 2025 GMT
Not After : Nov 5 06:00:51 2025 GMT
Subject: CN=a43248a7fd917d42f5253491d91b9e89017ed208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:e4:ee:4c:de:99:e9:81:be:5e:42:cb:14:
a9:d3:75:73:35:23:c2:4a:32:ea:78:3e:1c:e9:8c:
74:b1:c4:4b:c8:d3:32:be:d9:7d:01:fd:c1:f8:8f:
4b:88:8c:8c:a6:c7:b9:f4:f4:14:b7:c8:30:f9:94:
9a:07:9b:04:dd:50:f8:65:c3:fa:25:ae:e3:c5:e3:
2d:a8:89:dd:0b:6e:3c:9d:bb:eb:55:75:1c:36:3c:
07:51:a6:4f:d4:93:c8:ce:02:01:c2:ce:e5:fb:54:
da:cb:ab:91:b6:1e:09:b6:67:99:e5:72:c4:0e:80:
e6:0e:bd:ce:6a:8c:b2:81:a3:84:d3:77:eb:dd:79:
e4:bd:70:7d:d4:af:18:7e:ca:cb:d3:30:e3:4f:bf:
36:15:6c:96:f4:71:f7:b2:3e:03:74:df:bf:66:04:
7c:46:fa:4c:66:41:32:17:7e:1c:f7:da:5c:59:a3:
19:c3:f6:ff:ef:14:9d:43:bb:41:b9:3c:bb:67:b2:
6d:6f:2c:8a:67:fd:d4:1d:8d:27:b1:30:19:e5:2b:
15:5c:01:ab:78:78:a5:7f:6f:a9:bb:f3:1d:b8:84:
46:1e:98:61:30:1a:9d:44:ac:4f:be:77:2a:0a:23:
d8:80:b8:e5:d5:4e:28:02:5c:33:de:a7:37:db:9a:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:32:48:A7:FD:91:7D:42:F5:25:34:91:D9:1B:9E:89:01:7E:D2:08
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ba:02:79:df:63:be:ef:12:38:a9:d5:a0:40:de:11:9a:58:
39:e2:f6:73:1e:c0:0b:dc:fa:a0:76:f2:82:65:76:ec:19:2c:
a2:4c:e5:b4:9e:0c:9f:f6:3c:cb:b7:d7:3b:cf:dd:73:e7:b6:
35:d7:83:a5:20:88:4a:8c:d1:ea:de:2c:de:09:2e:6b:67:fc:
72:13:39:4d:a8:8e:af:d3:71:83:14:b3:ad:80:69:ec:e8:7c:
9d:3c:49:94:7d:4e:10:38:17:19:e7:04:4f:59:c6:63:3a:8f:
e7:50:8b:8e:58:ff:34:5a:17:4c:67:ee:39:52:bf:dc:3a:ed:
67:7f:2a:d3:11:77:cf:03:e4:8e:14:44:e8:2f:9b:14:48:53:
3d:ea:68:0c:35:db:ab:7f:cd:7c:8b:63:7b:98:aa:35:a0:f1:
4c:38:84:43:ce:4d:98:de:7c:54:fe:c7:9d:5d:bd:bb:2b:c8:
b8:60:7e:67:7e:61:9e:2f:1f:93:b1:30:e2:0f:62:b4:fb:af:
3b:87:6f:59:fd:8a:a8:a5:41:c8:30:47:bd:a8:71:ee:c8:ad:
df:9d:46:4f:b0:5b:6d:90:3e:51:9a:19:39:f0:11:0c:c9:60:
4e:78:20:ec:fa:9b:21:91:b2:a7:81:15:df:23:a0:62:ed:0f:
89:1d:85:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:41 2025 by rpki-client