Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File: HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier: bxgnPzY6NwPWtPvcffvxlBybcqdoR8gkdGArOHovdBQ=
Subject key identifier: 9A:AD:A8:E0:2E:56:17:4A:9F:B4:5D:04:43:01:70:0A:D2:6B:31:0E
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial: 019A50E2A3CE043DA5E2D445AB149788C075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 22:00:21 +0000
Manifest this update: Tue 04 Nov 2025 22:00:21 +0000
Manifest next update: Wed 05 Nov 2025 22:00:21 +0000
Files and hashes: 1: DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa (hash: nSw+Z2r+tEaSc2AQgef90FTr8oKptJDQ2v6jPAQnhGM=)
2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: I/SpO5wg5c5frbqlMYwFF5EcYCB4kesX+CSJIko8bfo=)
3: HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa (hash: XR9eo2BAwqzrJQjS2GXKNqFXgZew/uNp0g76elzf6UI=)
4: q-KsgHc87yurkiTPrGB6_ENn-Sg.roa (hash: cFavBWqarVDA4XfAipmh7/d8krk6AEiGb/atvWyd1pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:a3:ce:04:3d:a5:e2:d4:45:ab:14:97:88:c0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
Validity
Not Before: Nov 4 22:00:21 2025 GMT
Not After : Nov 5 22:00:21 2025 GMT
Subject: CN=9aada8e02e56174a9fb45d044301700ad26b310e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:31:d3:f0:d7:9c:e6:81:a0:3a:7e:7e:1d:
19:a0:a7:01:66:84:92:69:26:9f:10:bf:74:ab:f9:
ca:83:a6:89:1c:b9:60:78:f8:b4:70:4c:41:2b:4b:
71:f0:27:e2:8f:39:51:3b:46:42:db:25:e2:6a:57:
0b:40:59:9d:68:fc:1d:4e:48:ce:80:fc:87:79:25:
c6:bb:9e:e3:ff:28:28:ed:10:46:c6:39:23:11:26:
5a:9e:17:90:dd:42:28:f5:0d:67:bf:82:77:bd:06:
28:0c:16:88:c5:3b:49:00:d4:f7:a0:29:c8:ce:c7:
b8:9b:a3:83:f0:6a:34:a0:3b:44:f5:52:83:89:e6:
ae:a7:93:b2:f7:37:b5:df:b2:91:d9:7e:44:b7:91:
13:00:16:d1:99:04:2c:b9:e5:bf:0b:e6:fc:b2:a3:
4e:c6:e9:df:4b:77:8c:60:a6:9a:ca:27:84:28:04:
dd:f3:c0:eb:93:5c:24:63:9c:cc:ee:ec:d3:a4:a2:
6a:23:3c:34:c2:cf:67:8b:3e:16:33:b0:59:34:00:
f3:f2:5b:6b:c7:4f:cf:b1:f1:3c:d1:35:40:0f:92:
e6:41:5f:50:c8:8c:b9:0d:75:71:92:8c:75:91:9e:
fa:33:0a:03:30:43:df:c4:3f:d5:89:63:5c:cb:30:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AD:A8:E0:2E:56:17:4A:9F:B4:5D:04:43:01:70:0A:D2:6B:31:0E
X509v3 Authority Key Identifier:
keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4c:90:2f:79:71:23:75:5b:4a:18:bb:ef:e2:25:64:bc:81:
2f:ca:4a:5c:86:f1:6d:00:38:b4:af:7a:c4:f0:43:47:67:7c:
a6:4a:2a:77:7f:40:49:5f:5b:d6:ec:36:53:b6:d5:97:ff:4c:
81:71:38:2c:f1:ef:af:f1:2a:80:d3:5d:eb:14:15:f7:ea:e0:
a6:5c:58:54:2b:63:b9:03:6d:66:e1:2f:62:d4:89:e6:03:e9:
a7:54:07:17:c4:81:79:79:bb:e2:e6:f5:ee:e1:13:c7:37:3a:
68:12:b1:cb:b6:91:2c:fc:dc:2a:71:3f:71:c0:7f:0b:1e:ca:
a9:78:1b:09:c5:22:3f:1c:0b:77:3f:59:84:9b:58:a5:40:91:
be:b6:60:d3:69:b3:84:bd:e8:e9:33:63:2c:af:7d:d6:6a:99:
0c:3c:e1:66:92:c5:96:d0:5f:6d:7e:b3:3d:eb:a7:20:d7:aa:
3a:ed:50:32:13:d9:b3:21:d2:6e:58:92:e9:19:19:20:74:2b:
c2:06:09:a0:eb:42:af:9f:5c:b9:5e:32:be:5f:13:ed:76:55:
ce:42:35:8c:72:fb:1f:cf:ac:ed:f3:69:d4:45:a1:28:da:c6:
57:07:39:6f:d9:aa:71:d9:b9:a7:4a:ae:53:bf:ba:e3:59:fe:
fb:10:e8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:13 2025 by rpki-client