Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
File: HnTfStSP8hGgY1s38DeXeBnNQnY.mft (raw, json)
Hash identifier: bu4AC/N/mcMAQtgHuT3loXQWdEvSBXJdc1rK7ugK5ck=
Subject key identifier: 3C:7A:B6:36:1D:5A:07:21:66:0A:E9:05:49:A0:8C:7D:82:44:45:E6
Authority key identifier: 1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76
Certificate issuer: /CN=1e74df4ad48ff211a0635b37f037977819cd4276
Certificate serial: 019A51F5B443428F0468827A9D4E59B7CCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
Manifest number: 48
Signing time: Wed 05 Nov 2025 03:00:48 +0000
Manifest this update: Wed 05 Nov 2025 03:00:48 +0000
Manifest next update: Thu 06 Nov 2025 03:00:48 +0000
Files and hashes: 1: HnTfStSP8hGgY1s38DeXeBnNQnY.crl (hash: Gnmp717LZCEpCRTDRL4KAl+1rHMfD7QzWgavWef+1m0=)
2: WEHSBYEle2jq0AGr5T_ZCXDbcWw.roa (hash: Lv81OKPJ4F7icP9BLtyJCp3qBs5iXrzmNThhpwrXttc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:b4:43:42:8f:04:68:82:7a:9d:4e:59:b7:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e74df4ad48ff211a0635b37f037977819cd4276
Validity
Not Before: Nov 5 03:00:48 2025 GMT
Not After : Nov 6 03:00:48 2025 GMT
Subject: CN=3c7ab6361d5a0721660ae90549a08c7d824445e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:3b:b3:72:1e:d8:9f:48:e3:3a:b3:45:15:
05:be:28:bf:24:20:22:b0:ff:54:22:fe:27:ad:90:
ac:43:62:e7:a4:f7:02:7f:5e:b2:44:a7:6b:db:f6:
ac:e4:04:37:a4:f7:7f:fd:fc:18:bd:02:08:4e:5d:
1a:32:d5:f4:36:be:32:86:cf:9e:91:77:99:f9:31:
99:a7:2e:5d:90:f7:1a:14:8a:e8:8a:bb:6e:37:ad:
4b:28:bd:f1:5e:68:29:b4:24:58:33:65:ca:70:dd:
b9:14:3d:73:4c:a9:a9:dd:9a:0f:15:1f:36:af:45:
13:cb:f5:de:84:11:4c:bf:ca:6e:2c:ff:67:4e:a4:
96:23:1f:ca:4e:ce:2b:cf:a0:7d:44:a3:6f:7d:0c:
b6:40:d4:01:84:5b:06:57:2e:91:d2:95:eb:70:9b:
6a:fb:02:43:99:f7:6d:5e:d5:72:cb:a4:bc:9a:56:
ab:67:2c:e8:6a:23:56:34:f3:0f:70:9a:30:84:9d:
43:92:b6:00:fd:13:f3:a3:62:a6:5c:e7:8b:60:41:
2a:87:23:ae:41:43:7e:c1:27:2b:25:4b:27:36:03:
57:90:b0:7a:03:bc:aa:41:5b:a8:11:9e:ae:16:e6:
61:39:f9:c8:00:bb:34:fd:ab:8b:49:1c:c8:44:e4:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:B6:36:1D:5A:07:21:66:0A:E9:05:49:A0:8C:7D:82:44:45:E6
X509v3 Authority Key Identifier:
keyid:1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ef:a4:7a:77:69:e2:fb:f9:23:fb:ce:53:29:c6:ca:7e:15:
74:85:26:46:3e:0b:d5:04:df:0b:12:1a:b9:f4:f2:8b:32:e8:
d4:a1:4e:d6:9e:29:82:88:fc:8a:d1:6e:4f:5f:0f:e1:14:11:
e6:a5:fc:0d:30:8d:e5:92:f4:52:22:8d:ad:d0:d4:58:48:ad:
e1:d1:27:81:20:2c:b1:c5:ca:33:3a:a4:ca:c2:fa:a6:95:0a:
45:b9:65:f1:9d:7f:46:36:d7:7b:27:2b:e6:b3:61:92:27:57:
61:85:25:fb:52:18:03:15:36:b8:f7:56:e2:62:b9:e8:b1:95:
7e:43:b5:60:af:5c:92:c6:83:cb:e2:8e:66:c0:71:7d:3b:1d:
46:7a:d4:bf:f4:00:75:f2:0b:38:08:36:d9:4c:9c:ea:24:7a:
19:d9:f9:40:ef:e0:69:07:73:cf:e1:bc:07:f8:fd:76:d7:11:
81:32:f7:75:01:a9:bf:c0:ae:21:92:89:dd:13:d0:95:e1:1b:
b7:20:0d:e7:91:fe:b7:ce:d1:ac:4a:33:17:65:d9:17:cc:a7:
df:17:58:d8:92:cf:61:87:73:02:f9:90:87:84:a4:77:54:37:
ac:8b:f5:1c:5e:ce:c2:bf:2b:0b:eb:c5:68:da:dd:5c:58:57:
73:ec:35:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:31:01 2025 by rpki-client