Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
File: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft (raw, json)
Hash identifier: i18rNTjCQr0oohRYTdJf4RMHj91Q4+O6j9o5rwamkpk=
Subject key identifier: 00:96:4E:8E:05:63:39:89:A0:E2:8A:32:39:BE:6E:B5:CF:F0:0B:A2
Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
Certificate issuer: /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Certificate serial: 019A4EF5E04CA9347708D66E8E2208F98279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
Manifest number: 0CFE
Signing time: Tue 04 Nov 2025 13:02:07 +0000
Manifest this update: Tue 04 Nov 2025 13:02:07 +0000
Manifest next update: Wed 05 Nov 2025 13:02:07 +0000
Files and hashes: 1: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl (hash: SuCCS42TuoE5niRxmFnwPl+HqWJJobLZ+tWhOM9cwEU=)
2: tVk3cWsdi3hZrDEonwmclNGT-5M.roa (hash: bJG7n4hjSkt99mV93dCKPOM2IO0DVMxNl1m0F3B2sm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e0:4c:a9:34:77:08:d6:6e:8e:22:08:f9:82:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Validity
Not Before: Nov 4 13:02:07 2025 GMT
Not After : Nov 5 13:02:07 2025 GMT
Subject: CN=00964e8e05633989a0e28a3239be6eb5cff00ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:47:77:bb:91:97:14:82:97:f8:1f:fd:52:
67:34:98:80:1d:24:ce:9a:53:c9:b7:0d:44:bc:ed:
f5:3a:41:a6:30:ac:47:80:37:10:0a:4e:97:94:3a:
23:c0:6d:c7:5d:08:53:1a:47:52:1b:e0:6d:43:b5:
18:d6:8d:68:c3:97:eb:a3:7c:6c:c5:6d:d2:13:ef:
c2:2f:9f:84:8c:c7:f8:fb:92:76:dc:23:33:57:c6:
df:b2:f2:a6:ba:6f:05:f0:b4:bf:11:5b:48:d3:9c:
7b:c5:87:27:dc:5c:6e:f7:a6:17:df:92:a8:64:77:
5f:ed:ce:23:1c:d0:90:98:61:c8:55:66:df:d5:38:
b1:58:83:69:5e:d8:77:57:49:0c:39:0f:be:f1:75:
9b:45:18:1b:d5:0f:9e:fc:c9:bc:43:e3:11:a4:1b:
d7:34:df:06:ae:17:e1:f1:cb:0d:2c:8b:c3:b2:19:
c0:bb:4c:ee:66:27:ae:58:1e:29:ef:a1:6d:a8:f4:
1c:76:ee:b5:87:da:fd:66:da:81:88:2c:cc:2f:17:
03:68:43:94:41:fa:8a:92:61:e0:12:f1:11:db:de:
e9:c2:2f:a7:79:f9:0a:f1:cb:5c:f8:23:49:0c:30:
b0:2d:b4:5a:ac:cb:f0:60:4f:4b:d6:46:aa:10:6a:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:96:4E:8E:05:63:39:89:A0:E2:8A:32:39:BE:6E:B5:CF:F0:0B:A2
X509v3 Authority Key Identifier:
keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ff:41:ca:02:b1:8d:1f:ce:8b:65:48:64:fb:a7:fe:54:df:
3a:60:98:c5:6a:39:cb:e8:73:43:3e:84:8d:67:12:1c:89:80:
a4:e0:3f:2a:68:d3:46:2d:78:cb:e8:30:73:cd:e7:9c:f0:eb:
6a:3b:4c:75:97:4f:14:fc:a7:d6:ab:e0:3b:87:8e:e6:e8:39:
23:11:03:f4:13:5e:3b:6d:3f:f4:46:34:d2:f8:e1:d7:6e:e7:
6e:9e:8f:46:ff:83:39:22:2f:17:f8:51:ce:6d:68:03:f1:1e:
9c:17:85:1d:c1:58:88:3a:0a:ce:23:38:f3:b5:ad:3d:b0:4c:
1a:21:9f:ca:25:17:74:34:f7:96:14:9b:62:56:63:ad:13:18:
75:f5:03:b3:ce:fa:97:9b:73:b9:f1:6b:fa:ba:b3:bc:33:48:
c8:6a:1d:fa:b5:77:65:91:e4:2c:76:40:91:d8:34:7c:6f:e3:
01:54:12:cd:55:db:17:40:55:4d:ae:ef:f6:1f:c6:4e:c4:d6:
0d:05:32:96:08:ec:93:f6:6b:bb:33:33:78:2f:d5:28:16:ac:
6f:d9:94:07:43:1b:be:9e:20:8f:69:d3:50:a4:98:a5:4f:43:
a0:dc:75:c8:53:24:62:aa:98:b7:97:70:55:3d:e7:2c:ed:bb:
fe:27:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:50 2025 by rpki-client