Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: EZX1m2dPmz2uwRf/H1zBWJOl9jV2M/Q4QGmsGONnV2w=
Subject key identifier: AB:BA:BB:F6:C4:BE:53:68:3B:49:8D:D4:20:B6:B7:4A:24:42:C9:B7
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 019A4D73D73E5C4717E3A5624785A306E1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 13F9
Signing time: Tue 04 Nov 2025 06:00:28 +0000
Manifest this update: Tue 04 Nov 2025 06:00:28 +0000
Manifest next update: Wed 05 Nov 2025 06:00:28 +0000
Files and hashes: 1: Biv2qTrQNJJYQlmIhX2GXCsPh8k.roa (hash: qgzc+HC1Pbq5Sym5wnfMxLGpd7cCm/TouNcPCVsFEcM=)
2: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: b8CILMOn9ntc/o3VwzeCSWWc7kKgLPxOKy0R5EmJ4mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d7:3e:5c:47:17:e3:a5:62:47:85:a3:06:e1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Nov 4 06:00:28 2025 GMT
Not After : Nov 5 06:00:28 2025 GMT
Subject: CN=abbabbf6c4be53683b498dd420b6b74a2442c9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:65:de:32:bd:28:ae:89:90:94:7e:25:2a:
98:21:23:61:a7:4e:97:95:2d:15:ec:bb:79:97:93:
71:0f:2d:76:1c:60:0c:26:e5:5e:9c:c0:20:ae:4d:
30:55:1f:b9:32:87:a4:ec:56:17:ae:a0:15:ba:55:
26:2b:db:eb:b9:ad:2f:53:95:ad:03:20:d3:98:87:
13:19:56:47:07:60:3c:fe:54:65:c0:94:22:f2:1b:
63:96:3f:8d:3e:dd:21:ee:26:3d:19:38:c0:59:33:
82:0b:89:fb:5c:9c:fd:9a:2a:cb:5b:36:1f:0c:48:
70:d2:86:e8:a4:c5:fe:00:4a:03:1a:b6:a5:18:67:
a7:9b:1d:14:bb:3c:51:e2:0e:f4:a9:99:55:80:71:
4b:e7:b5:43:1c:d1:c6:dc:b8:26:d3:c1:db:29:f1:
78:b3:b7:a9:a0:fc:af:48:8c:be:39:33:6b:37:ee:
88:e1:76:5c:f7:07:c9:ea:a5:3d:56:f4:96:6a:76:
99:44:72:1c:2f:a6:b2:60:98:01:c2:3f:d8:46:90:
7a:75:8a:d5:19:34:f4:6d:b5:b9:d6:c7:07:7a:79:
1a:fe:79:5a:39:15:13:e2:fd:50:21:87:3a:b0:56:
16:a9:20:74:bc:3e:44:16:b7:d4:29:16:81:71:76:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BA:BB:F6:C4:BE:53:68:3B:49:8D:D4:20:B6:B7:4A:24:42:C9:B7
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:05:18:40:34:dd:bc:df:56:b8:ac:c6:45:33:6a:b7:f9:38:
9b:1e:46:5e:6a:1b:97:9b:98:7d:39:da:1a:d2:bd:08:3e:08:
2c:6d:17:f5:c8:93:0b:3c:ca:2d:66:a1:a3:ba:8d:2c:1c:fa:
84:c2:0f:6c:b6:ca:3f:10:80:8e:1f:b7:f0:13:cd:57:ba:cd:
a2:cf:2c:b3:b8:be:87:a2:4e:b4:9c:d6:95:f0:9e:eb:2b:63:
23:3f:d6:ff:a6:8e:7b:84:bd:bf:44:91:ec:c5:15:f1:28:46:
06:de:5a:61:5a:76:28:e4:2f:ff:9e:10:a6:6d:a2:65:ee:63:
b2:f0:d5:70:56:5d:bb:70:57:d5:11:8d:6e:41:d6:cc:64:ed:
03:1e:1a:f7:11:27:58:cd:25:f2:44:dd:23:9f:48:74:a1:14:
b5:77:ce:13:b4:31:8d:be:e0:a0:5e:8c:ad:a1:e7:bd:ca:93:
af:41:04:13:a6:d5:79:f9:1f:8e:ce:fb:96:6b:9b:8e:db:e5:
2c:61:f8:51:23:21:9f:ca:d3:77:5d:62:2b:90:26:ee:5c:b6:
ab:7a:34:76:59:0e:61:f8:86:52:13:11:d2:68:90:c0:54:c7:
49:a2:3a:a9:b3:9f:1f:37:2c:7d:68:4a:29:40:5d:47:63:21:
44:49:6f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:44 2025 by rpki-client