Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: wOX4RmKITu7YrnutkuJAJsJNPU67ik2/0IgxxKHtZBA=
Subject key identifier: 9C:77:76:67:26:D1:94:3B:1C:3A:52:69:37:FD:B7:AE:BA:F6:19:1A
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 019A5006E337BDEA44A8AEEC34415385449A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 1577
Signing time: Tue 04 Nov 2025 18:00:19 +0000
Manifest this update: Tue 04 Nov 2025 18:00:19 +0000
Manifest next update: Wed 05 Nov 2025 18:00:19 +0000
Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: DIs2oXY9j33bslQRKSd8nxWB2uX5kSQoxJ1dWvjAmIA=)
2: XQt8-9bW0FfWOISPdA8ZaGblVY4.roa (hash: fmg6bIRtzaFenySqXfJpj+XCISOy4FuP2PiXszAHZw4=)
3: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (hash: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:e3:37:bd:ea:44:a8:ae:ec:34:41:53:85:44:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Nov 4 18:00:19 2025 GMT
Not After : Nov 5 18:00:19 2025 GMT
Subject: CN=9c77766726d1943b1c3a526937fdb7aebaf6191a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:98:38:0f:bb:6f:e9:90:7a:35:92:4e:ff:
30:05:63:e0:d0:dc:2f:be:22:84:44:b6:90:fb:d3:
3c:fc:b5:7b:01:d3:83:0c:ad:3f:fe:9d:ac:06:6d:
67:ee:a0:0b:b3:96:9d:3a:33:91:52:45:b6:a2:fb:
d5:b5:23:9c:9a:c3:b4:98:5a:78:86:01:54:c1:9e:
e2:24:22:6d:d3:96:3d:2d:50:b1:a2:5e:81:5a:f3:
00:b8:34:24:d4:19:73:3a:d8:c2:65:c2:db:97:c1:
8a:af:81:7d:44:81:67:ba:3e:4c:dd:9f:e6:25:84:
33:10:ba:1a:88:8a:05:8e:20:d7:38:c7:e6:f1:ad:
69:a0:d2:32:65:89:4f:93:3e:74:02:be:b1:67:53:
a1:07:fb:8d:95:38:1a:bc:4c:41:37:16:63:5e:e5:
33:75:0b:05:1c:b6:1f:89:0c:1d:86:3d:e2:f5:7d:
c3:a2:e2:eb:56:17:47:98:c9:aa:a8:da:b1:3e:cf:
17:ed:63:5d:a4:48:10:4c:06:c1:0b:d0:85:4e:92:
4f:79:9a:34:51:b9:0c:70:af:28:fe:ca:cd:db:f5:
73:04:a7:c8:b0:3a:1d:f7:dc:cf:78:df:ac:24:10:
05:94:db:c7:6b:a2:4a:30:cd:a3:c8:61:71:1b:7e:
ba:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:77:76:67:26:D1:94:3B:1C:3A:52:69:37:FD:B7:AE:BA:F6:19:1A
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:aa:5f:ec:82:4b:2b:2a:fd:aa:81:c6:ab:03:c2:78:4e:e1:
2d:a8:37:74:2b:40:79:7f:d4:e8:90:80:2f:24:50:b5:32:b9:
19:ba:66:9e:e6:7e:05:fe:9b:ea:f3:87:53:dc:8c:7e:fd:69:
dc:59:f2:fd:39:48:14:4b:30:c9:5f:92:9b:8d:2e:80:d3:2c:
fe:5a:eb:2e:fe:32:6e:5c:0c:78:f4:95:62:73:8e:2a:ef:5a:
44:b8:58:4b:d3:4b:ff:71:ce:96:9c:f7:d2:cb:6f:0f:3a:a6:
5d:2c:d8:fa:6b:39:e7:bd:59:25:94:ef:4a:34:28:33:0f:55:
de:97:1a:5e:3a:24:9a:16:1a:dd:4d:e4:69:63:5f:d1:e9:fe:
1f:dc:d7:4d:21:0c:0a:4f:88:7e:56:89:b2:ef:c6:cc:db:83:
0e:5a:50:1a:d6:ae:6b:9c:8e:47:08:5c:02:9e:78:89:ee:f8:
1f:4c:ee:a2:b0:d9:39:ff:f7:96:14:77:3b:7e:91:96:8b:39:
0d:f5:2a:14:b5:4b:9b:de:23:eb:bc:be:07:f9:fa:b6:f9:ec:
5a:f1:52:f5:d0:10:30:27:9f:28:37:8c:30:6a:69:ec:52:8d:
bd:49:c5:e3:7c:5e:17:08:b0:b7:ca:9a:dc:14:5d:df:72:90:
c6:cb:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:42:22 2025 by rpki-client