Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
File: HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json)
Hash identifier: H8wyLZtPafImjJsOeUR2K0KX39lhihb8JeTz1jB5BHs=
Subject key identifier: 9A:F8:30:86:8A:76:92:8F:2C:5C:82:2F:AD:F2:03:02:30:4E:99:D7
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial: 019A4F62E3E0E871C379BF348A2D7C1832AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 15:01:12 +0000
Manifest this update: Tue 04 Nov 2025 15:01:12 +0000
Manifest next update: Wed 05 Nov 2025 15:01:12 +0000
Files and hashes: 1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: M2GhgubBke9LYctHOwtqRSeI3wzap5rMcLORzCjUtzQ=)
2: OxE4-aNNSEdqL0e1drWJ-u6-FW8.roa (hash: 61L/5UKRIctS8qkUbe6UFwwrHK0nH/grmD/batM7eQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:e3:e0:e8:71:c3:79:bf:34:8a:2d:7c:18:32:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Validity
Not Before: Nov 4 15:01:12 2025 GMT
Not After : Nov 5 15:01:12 2025 GMT
Subject: CN=9af830868a76928f2c5c822fadf20302304e99d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:02:72:9c:e9:3e:58:26:c8:57:0a:97:f6:
c8:ff:01:54:1c:d1:47:49:60:ee:96:70:3b:56:ec:
67:87:32:ff:7a:08:a9:39:ad:07:1c:f0:a8:72:ce:
77:54:df:03:7e:be:e1:77:ad:fd:5d:93:97:5d:13:
e8:8f:f8:d2:64:3f:1c:8a:26:8b:0b:20:b0:18:4c:
42:af:c8:c7:d0:a0:fb:e1:89:e8:d1:44:21:67:6d:
4c:a4:b8:b2:14:12:4a:a0:87:c3:98:fc:09:fc:e4:
17:65:d9:41:3d:05:02:97:7c:64:49:9f:6f:cf:e6:
04:af:5a:f9:0a:65:74:63:b6:3a:99:76:14:14:39:
6f:2c:d2:bd:d8:fa:c0:9d:ba:2e:c7:a7:31:9e:cd:
10:4d:f4:a7:ec:8f:61:b8:b1:fd:2e:ad:c6:35:0e:
1c:15:fc:1a:0a:2b:36:60:29:18:1b:3f:8b:e1:2f:
3a:1a:8b:f3:a0:86:cd:14:33:f5:87:af:fe:2e:3a:
18:14:42:19:b9:e5:de:f7:e6:d7:49:b6:59:37:fd:
d7:f0:98:0e:8e:77:b5:11:9a:2a:28:53:ca:e6:d7:
a0:89:f2:69:34:bd:55:3a:12:72:3f:ff:55:6b:09:
44:da:f9:2f:5b:e6:20:64:e5:a2:2f:36:83:c5:dd:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F8:30:86:8A:76:92:8F:2C:5C:82:2F:AD:F2:03:02:30:4E:99:D7
X509v3 Authority Key Identifier:
keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d8:37:e5:93:5e:49:82:e8:ad:9f:6a:5a:d3:82:99:b7:19:
29:38:da:f2:56:05:05:7f:0a:0b:8f:34:a9:2c:1b:9a:d5:3c:
d0:50:e4:8d:f6:7a:31:fc:0b:dc:5c:cd:a5:e7:95:22:94:7a:
74:8e:f9:03:bf:90:5d:37:02:26:ef:ba:a5:e0:e1:10:cf:f6:
57:23:dc:d2:81:ef:dd:11:e8:cb:3d:f4:a0:7c:5b:60:c2:0b:
0f:9c:f9:59:bb:78:eb:61:6a:e2:f5:db:c9:08:89:14:e8:3b:
e0:8a:f4:9e:3c:d5:68:2b:5e:1c:57:68:1f:41:ca:4f:6c:cf:
f5:2e:0d:1a:cc:db:f8:30:98:be:ca:6a:2a:f2:46:b0:7a:87:
81:ab:76:2b:7a:bc:4c:a1:32:dc:d3:61:07:d3:fa:8c:63:06:
80:9c:34:4d:25:13:43:57:6b:27:45:bc:8c:94:e9:61:7c:db:
78:7c:7c:46:10:24:7a:a3:63:f2:5c:f3:70:fb:a6:94:26:2e:
71:61:1d:9d:35:72:ec:41:a9:b3:c8:b2:39:1c:a9:16:e3:33:
7b:b4:b6:a8:10:f5:f3:e4:7b:f6:90:a5:6d:61:fd:48:c0:52:
8e:5e:b9:64:3f:13:97:0a:49:91:d0:be:08:b8:57:1c:18:53:
c6:a6:35:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:59 2025 by rpki-client