Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
File: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft (raw, json)
Hash identifier: axx+7q0FK9AYZ6iRWzk1zLPsUVSSci8qxqF07Bp04jI=
Subject key identifier: 0C:37:1B:68:7C:4F:9B:3B:7A:DA:FE:47:F0:0A:5B:72:44:84:A8:87
Authority key identifier: 1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
Certificate issuer: /CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Certificate serial: 019A4EF573ACD79C551B98FA76D3A6B8B492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
Manifest number: 1069
Signing time: Tue 04 Nov 2025 13:01:39 +0000
Manifest this update: Tue 04 Nov 2025 13:01:39 +0000
Manifest next update: Wed 05 Nov 2025 13:01:39 +0000
Files and hashes: 1: 5pynZFAsqvPIGH5-PXLgAGK58mA.roa (hash: fBc4s8OOq/rbaknM5GE/ZQ9xYBiAMIuTqJlNTn46D0Y=)
2: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl (hash: 1Hj4VxcuZdbi9obUXels6s1GTwuKaHHoqtrfsjEdaS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:73:ac:d7:9c:55:1b:98:fa:76:d3:a6:b8:b4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Validity
Not Before: Nov 4 13:01:39 2025 GMT
Not After : Nov 5 13:01:39 2025 GMT
Subject: CN=0c371b687c4f9b3b7adafe47f00a5b724484a887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:1a:5a:08:f4:a6:c8:ab:10:ee:4e:73:7e:
ef:7e:65:33:95:9a:51:88:20:1d:f3:76:f3:63:f7:
97:7b:a6:eb:de:95:8a:97:fc:60:17:89:0f:f6:fd:
19:98:e1:cf:d0:0e:7b:49:03:17:e0:2e:25:0d:7d:
1d:3e:16:3d:f7:61:51:a8:ea:b7:3f:c9:ac:8c:02:
5a:31:62:9b:3c:ff:18:f0:ff:8d:9e:89:c6:68:c1:
ae:cb:d6:d3:d6:6d:38:03:5c:3e:c0:20:cb:42:eb:
36:cd:9f:2b:cd:26:c7:8d:2a:9f:e0:68:89:5f:3c:
df:19:2d:07:3d:4e:51:38:26:7f:71:73:6d:fd:86:
fb:dc:18:80:a4:4e:d1:53:77:5c:01:24:da:02:e5:
03:35:b3:5a:a6:03:04:eb:d6:65:06:1f:e4:d0:5c:
b5:3b:90:23:90:6b:03:d6:85:49:a6:e5:0a:6e:09:
1c:e2:51:64:1d:93:05:97:5e:a5:ef:70:7f:84:57:
e9:d5:58:cf:6c:ea:64:51:f8:53:90:6d:bf:07:d4:
d6:a9:a2:b7:43:42:fc:cc:f0:95:da:93:c9:67:70:
75:ad:70:82:6f:40:d1:f3:d5:1e:98:91:05:ff:f2:
a9:95:1f:f0:70:82:5e:ea:24:f7:b6:16:4a:fe:da:
d6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:37:1B:68:7C:4F:9B:3B:7A:DA:FE:47:F0:0A:5B:72:44:84:A8:87
X509v3 Authority Key Identifier:
keyid:1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2f:6c:04:a1:6c:a6:b8:44:7e:5e:a9:58:ec:0f:3b:39:f8:
a4:16:28:f3:85:ca:4c:7a:8d:60:a7:12:9c:ea:51:3c:8a:42:
63:25:27:b0:eb:ee:aa:da:53:ce:f7:16:d9:ac:6e:f9:69:d0:
07:86:7a:7b:0d:a8:07:cc:65:11:ed:82:ff:74:37:9d:62:c4:
5d:8f:35:5a:6b:43:fe:75:2b:70:e6:d7:99:37:62:4b:51:05:
36:33:0a:ea:98:c8:19:9b:73:b1:28:f9:18:dc:d3:b3:b9:4f:
d5:68:21:d4:14:8b:0e:83:3f:e7:47:11:09:7a:00:27:cf:dc:
bd:ff:e7:7a:02:6f:d4:4c:fa:3e:b4:b0:cd:6c:3e:aa:71:53:
84:fa:4b:16:d9:cf:f1:4a:cf:e7:e4:ee:82:cb:a4:a3:5d:2d:
c5:5f:e4:4f:23:d1:0f:55:2b:b4:d9:7c:d5:0f:79:01:51:fb:
c0:56:ee:50:ad:86:03:b1:fc:20:5c:bb:ae:f6:84:d4:31:56:
f8:91:c1:7b:b8:12:64:55:94:c8:80:bf:91:c5:f1:f6:6e:97:
20:77:65:6b:bf:ec:e4:e3:d1:8a:e8:01:e0:67:ad:bb:aa:15:
55:a3:30:cb:e7:81:3d:5e:f8:8c:b7:63:e2:d8:3b:93:45:f0:
d3:f0:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:10 2025 by rpki-client