Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File: HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier: E7XL6a0C7WsE8/JUeOWvsZeIhsMZJ4n3R0Tc86lAp0s=
Subject key identifier: A9:EA:68:13:AD:10:8E:85:12:85:2F:85:B9:C7:EC:74:B0:78:24:20
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 019A4DAA7213DEE1174D4CBBEED97E609B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number: 141C
Signing time: Tue 04 Nov 2025 07:00:07 +0000
Manifest this update: Tue 04 Nov 2025 07:00:07 +0000
Manifest next update: Wed 05 Nov 2025 07:00:07 +0000
Files and hashes: 1: DaVvwNhmLZ7YvB4G_4EErsgVRto.roa (hash: 9N2XrCoRGQ94Srik137EIdOpwG9c0HxGyO4AFS+YxkQ=)
2: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: WZ8LbJWmz/rJ3QCNHH1c1DiR0v5cAJn6jlk+6G11RkI=)
3: IK01XRjBPLd-6jbRM6WX3KlYFaU.roa (hash: hpMtGTgtQBn7QaBbprX3PlSpi2a4sNEtbAx00Rc21hI=)
4: u1_Gd7VlEhZ3QqgjEg2OEC7gm14.roa (hash: NHFnan+4Era3/L1csOitqJI62J77zZalfXkxncagMSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:72:13:de:e1:17:4d:4c:bb:ee:d9:7e:60:9b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Nov 4 07:00:07 2025 GMT
Not After : Nov 5 07:00:07 2025 GMT
Subject: CN=a9ea6813ad108e8512852f85b9c7ec74b0782420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:d1:e7:01:d2:96:4c:1d:47:9c:13:f1:4a:
c2:7d:1a:d4:f8:9f:3a:c8:0c:a3:59:25:46:a7:31:
7f:42:32:45:e7:12:99:da:12:0d:50:05:67:94:00:
e2:4c:7a:36:b2:1f:48:38:a0:00:d4:7f:66:a8:b7:
b4:b6:c5:aa:e8:6d:ed:3c:50:a9:6d:38:3b:59:1c:
dc:fb:e9:31:4b:d6:f4:87:c7:26:29:94:86:45:20:
02:c7:ea:98:1c:00:3e:53:cb:f7:30:e6:bd:b8:72:
a3:eb:ed:8b:73:be:72:d7:db:81:5f:c9:9c:b6:a4:
1b:b8:f6:b3:61:be:44:33:65:31:c6:bc:a6:33:83:
73:3b:1c:e5:2c:97:51:25:0b:9d:80:10:09:68:da:
e6:ea:04:92:9b:16:2f:71:fe:d9:c0:2e:48:9d:13:
90:63:ab:1d:df:09:a7:a2:12:82:95:46:3b:44:76:
81:19:e8:42:aa:d3:27:68:fa:a5:cb:a0:89:44:33:
d5:75:bc:58:71:09:f7:e5:78:62:74:9f:93:db:d9:
bf:d4:f3:c4:05:80:19:6d:73:9c:54:d0:f3:d8:bd:
5d:d1:9f:8e:19:e8:6a:b5:1e:e0:4d:f2:00:6d:4d:
f9:35:cc:48:bf:4f:f8:60:25:ca:bb:b6:09:71:6f:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EA:68:13:AD:10:8E:85:12:85:2F:85:B9:C7:EC:74:B0:78:24:20
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7d:8d:a4:64:4e:f8:05:71:1c:ff:aa:ff:91:94:91:23:8a:
e2:60:36:0f:ee:49:4f:eb:8a:48:92:12:b8:64:8c:03:8b:e5:
8e:bf:9c:07:c3:69:ac:80:eb:3f:83:2f:5a:e2:ce:bb:16:9d:
df:23:d2:2c:1e:30:46:5d:16:2a:51:d5:90:47:39:0a:c0:46:
c4:2e:18:53:fe:33:4a:c6:d3:10:d7:14:c4:9a:ea:a5:8c:83:
f6:04:f6:63:4b:61:89:15:a0:e8:c1:2f:3a:a7:01:a0:75:3d:
93:22:7c:61:cc:4b:59:ad:08:c5:1b:cd:fd:2b:09:3b:ab:1a:
46:08:c1:7b:bd:4a:2e:0d:27:f1:0b:64:73:95:5b:6b:3b:b3:
5e:93:a3:3b:39:24:4f:a7:ee:79:a4:a3:a2:e0:cf:a5:cd:16:
da:50:c0:7e:ac:32:96:61:93:1d:5e:8a:e8:d3:14:4b:41:91:
86:d6:a6:3f:cf:5c:ad:d3:00:b6:73:1e:aa:ed:59:52:bb:cc:
39:ce:b4:98:a5:0d:57:47:db:6f:94:e9:10:c3:6c:cd:30:c0:
ea:fc:fa:dc:68:f0:f9:b1:3b:da:3c:6d:ff:aa:bf:4a:f1:66:
c9:a6:93:c3:c6:ab:85:a7:13:26:3a:9f:1a:29:dd:c4:fa:77:
25:4b:a0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:03 2025 by rpki-client