Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: rTUdu5EBuwu3EO0LKpPrn2AwolrWOnpV7pU5SLwg/RY=
Subject key identifier: A5:60:AD:C4:29:AE:E6:FD:75:20:BC:4E:BC:DB:C4:AA:31:C2:F4:2D
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 019A4FD05E2FF7A31E22524BD576F1E4C01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 16BD
Signing time: Tue 04 Nov 2025 17:00:46 +0000
Manifest this update: Tue 04 Nov 2025 17:00:46 +0000
Manifest next update: Wed 05 Nov 2025 17:00:46 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: ziuDrqrOEr4GMNUcoVwNS2wF8SZsfHhI4XfokY6w5gM=)
2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:5e:2f:f7:a3:1e:22:52:4b:d5:76:f1:e4:c0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Nov 4 17:00:46 2025 GMT
Not After : Nov 5 17:00:46 2025 GMT
Subject: CN=a560adc429aee6fd7520bc4ebcdbc4aa31c2f42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9e:b7:51:db:64:43:7a:bd:00:eb:ef:d0:68:
e6:a4:f4:27:7c:5d:9f:eb:21:34:50:f5:55:97:11:
68:cc:3d:a6:9f:2b:1f:e0:cd:c3:1e:74:9f:af:98:
e4:7c:dd:49:d4:06:ab:ef:61:85:5a:cd:32:fc:ef:
34:16:58:6a:bb:e4:25:4a:13:92:34:b1:6b:87:37:
42:97:09:37:98:08:1a:fb:4a:7d:03:2d:6e:6a:96:
a1:9f:fe:cf:11:ef:88:9c:99:26:d7:f0:ed:40:e1:
12:b6:7f:b7:71:fb:cd:37:0f:e6:2f:06:e1:d2:99:
fe:2c:0d:91:b6:0e:4a:8f:02:65:75:a7:91:43:f5:
46:61:8a:a4:f8:d6:86:0c:74:d5:e6:3e:3a:7d:29:
28:b6:33:de:7d:1b:a0:8f:c9:e3:ec:26:61:ca:2c:
16:b1:52:30:4a:fd:77:af:af:48:c6:fb:26:6e:a7:
4b:b6:49:05:bb:0a:5f:15:e0:cb:0e:32:43:42:44:
cc:a0:f2:25:6f:0e:60:cb:20:51:02:5d:e5:1b:a8:
ae:0a:30:c1:9a:ba:9f:bb:e8:05:48:fc:f3:7e:7d:
03:83:6c:3c:a2:70:d8:5b:71:19:67:79:b5:3c:ab:
de:8e:6d:ae:9c:bc:0d:eb:d5:7e:d8:52:55:fe:31:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:60:AD:C4:29:AE:E6:FD:75:20:BC:4E:BC:DB:C4:AA:31:C2:F4:2D
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b5:af:d7:c8:48:2a:21:a4:b2:cf:ac:b8:28:09:7e:d6:dc:
96:53:c7:53:a0:65:e1:14:51:70:57:34:dd:bd:74:95:42:c6:
ca:25:f6:71:5b:07:c0:3f:a6:5e:1c:7c:54:b6:e2:dd:99:8d:
5e:cf:58:d1:64:ce:31:b5:78:35:28:f1:63:e7:73:85:50:54:
4b:da:0f:e1:9d:5b:d1:ce:f4:ea:24:8d:eb:86:03:37:a7:fa:
22:c8:fd:54:d2:d1:c9:a9:9d:27:9b:32:33:75:e3:13:00:11:
ee:2e:a1:b1:17:0e:31:16:21:b8:56:e7:24:f3:b5:d3:07:e9:
bf:f9:9e:f2:d5:74:1f:1c:8a:53:61:e4:45:70:11:1c:af:7a:
72:b1:85:e4:76:56:49:3f:b8:a6:fb:02:1f:8d:51:51:69:8d:
97:8f:99:e2:11:07:14:ec:c5:b1:23:e9:ac:0e:34:d2:d4:af:
df:3a:b2:09:0e:5d:5f:06:aa:29:9a:3d:64:84:8a:f5:eb:8a:
dc:e7:72:7d:77:6a:aa:7a:1d:75:b3:df:77:b7:ec:79:4e:61:
b9:3d:94:e2:63:c9:37:ca:9f:a0:2b:51:5b:07:df:8b:ea:ce:
b1:68:7a:b9:ed:70:e6:6b:c7:5a:52:54:3a:69:12:5f:d4:c2:
c8:40:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:52:13 2025 by rpki-client