Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
File: HUxgeKWUHFyxV9XylXyzFNftG-0.mft (raw, json)
Hash identifier: WypGrGq/82WME/LFmkbTtFwcuRXhxoMA+YB/JNqFa5Q=
Subject key identifier: F3:58:E7:CF:FB:CD:99:58:C8:19:6E:FE:E2:33:71:68:C3:80:CC:61
Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
Certificate issuer: /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Certificate serial: 019A4DAB15C5E3A4FA567467A22347C83AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
Manifest number: 0B0D
Signing time: Tue 04 Nov 2025 07:00:48 +0000
Manifest this update: Tue 04 Nov 2025 07:00:48 +0000
Manifest next update: Wed 05 Nov 2025 07:00:48 +0000
Files and hashes: 1: HUxgeKWUHFyxV9XylXyzFNftG-0.crl (hash: NLU4WteRanKJ1AjgBCjSOWjFQbCOzpMZtpdCzqGF1Eo=)
2: bS6FP0-RWfuMzsBRZquHdjUbynI.roa (hash: kkw9ceZnHPEpX3rLpD2wmL4u+vt4FdSYPPqT4A+84KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:15:c5:e3:a4:fa:56:74:67:a2:23:47:c8:3a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Validity
Not Before: Nov 4 07:00:48 2025 GMT
Not After : Nov 5 07:00:48 2025 GMT
Subject: CN=f358e7cffbcd9958c8196efee2337168c380cc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:fb:23:ee:5a:1d:bd:34:d7:3e:73:6e:08:
dd:09:4e:5a:0a:37:98:37:9e:df:86:08:e9:b8:65:
8f:1d:bb:b7:f8:6e:1e:a0:db:3e:ea:79:a8:5c:be:
12:de:97:00:bd:5e:9d:13:ce:b6:8d:25:5a:c8:36:
a8:0f:09:fa:aa:1d:68:3d:94:05:19:88:17:14:64:
fb:2a:61:df:e2:52:bc:52:3e:59:f3:cf:0e:37:c4:
52:60:4f:f0:79:35:6a:72:fb:1d:b1:02:97:34:20:
49:2e:a6:70:3c:e6:2c:1c:50:03:91:2c:96:fe:c7:
05:7c:59:40:84:7d:bf:45:d4:fa:1e:9c:9c:1b:80:
06:d3:7a:3d:2a:b6:b2:5f:c9:33:67:3c:f2:6a:61:
c8:6d:97:a7:a1:0f:3d:1b:9c:b0:49:54:a2:21:aa:
4d:2f:60:06:a2:fd:4d:13:3b:da:72:9f:c0:01:b7:
3c:2e:76:bc:06:ae:fe:24:b2:6f:a9:58:3f:53:02:
10:3b:cc:f5:8c:bb:7f:45:9f:06:18:c2:e1:60:8b:
6e:9b:8a:2e:a4:19:fe:8a:40:1d:3c:c1:aa:00:2b:
59:93:de:d1:e7:3b:5f:33:d0:25:77:12:ad:10:ee:
78:a7:48:69:c3:2d:ed:5d:c8:6b:c7:94:77:e9:63:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:58:E7:CF:FB:CD:99:58:C8:19:6E:FE:E2:33:71:68:C3:80:CC:61
X509v3 Authority Key Identifier:
keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f8:14:7d:83:14:51:6b:74:18:3b:35:83:e4:4f:7b:eb:6e:
e5:3a:01:1f:c8:b5:90:b7:77:51:64:81:03:81:4a:c4:e0:26:
15:d5:12:ff:e2:a3:5b:af:fc:18:8e:2b:9f:0d:05:60:f0:19:
f4:3a:a7:1e:b7:c0:28:fc:56:d7:0d:78:d0:88:ee:72:ca:79:
45:aa:f1:40:44:3b:5a:f5:1c:3d:58:c9:63:a9:e3:92:65:28:
b7:e9:f2:ab:cf:85:ff:73:fd:77:ef:ea:be:0a:d6:6b:a2:94:
81:cb:3d:47:84:c7:55:5d:2b:c8:86:27:12:94:33:b1:07:44:
12:89:41:45:31:8d:d6:dd:45:04:f4:84:fe:d3:8e:5e:24:b3:
9b:36:22:a5:5b:58:52:64:b8:7b:52:bd:6b:e5:62:23:33:93:
8d:f5:b0:c6:f0:ac:d6:5e:16:29:54:bb:47:08:9f:1e:4f:dc:
dc:1c:d1:7b:00:f0:32:75:57:24:f5:37:8b:bc:bd:60:40:22:
f2:fd:98:45:4c:70:9b:f8:11:55:c2:d5:7a:7d:36:a3:0e:61:
03:6a:81:80:d8:eb:08:fc:77:6c:2a:e6:ca:68:3c:7c:ec:2f:
ca:64:07:fd:51:20:63:8f:ab:90:5d:49:65:9d:55:05:59:7e:
ac:d7:da:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:49 2025 by rpki-client