Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: 3cIHiKOMyiz+IyjcKOOOJoJsAVn7s5wUtUraDxyVQeU=
Subject key identifier: F2:8A:79:C4:CB:DD:AB:AC:E9:13:0F:DB:76:5F:2F:0B:FA:96:6C:F7
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 019A5074EADE2B2313DE665EDBB48F378327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0BD1
Signing time: Tue 04 Nov 2025 20:00:30 +0000
Manifest this update: Tue 04 Nov 2025 20:00:30 +0000
Manifest next update: Wed 05 Nov 2025 20:00:30 +0000
Files and hashes: 1: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: MTh/1vNZ8VnJib/r1BTPowFnYjEuHD7vvsJhHsscx54=)
2: IGa7QfhbXaDsGCT9xJOI5gdu6yw.roa (hash: X0y8/lBS1BHPwzQ2lfqfjmgEWEXvXO2MftnVLJbE6FY=)
3: VwEoUNw-ez0MhDo9hKLki2sD7x8.roa (hash: hJNorU0BhP7KaHlsAZlKF465rhSAsAGROKIAje3NnsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:ea:de:2b:23:13:de:66:5e:db:b4:8f:37:83:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Nov 4 20:00:30 2025 GMT
Not After : Nov 5 20:00:30 2025 GMT
Subject: CN=f28a79c4cbddabace9130fdb765f2f0bfa966cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c8:35:a5:86:ee:a2:97:d4:21:26:43:96:80:
94:0d:ad:e6:8f:a9:69:58:bc:f0:a1:a5:01:b8:0e:
1d:63:0d:c0:84:62:24:ef:21:3d:ae:ff:bd:45:4e:
b0:a0:73:80:f0:f5:3a:83:87:1a:1a:9d:86:dc:a9:
47:e0:32:dd:2a:b2:26:50:56:bc:ee:c0:93:b0:71:
3d:a7:71:f7:ba:62:48:f7:ac:30:88:49:80:e3:12:
b7:94:80:a7:12:b5:07:12:c6:26:fe:a4:de:e0:42:
19:21:1c:f8:cc:e5:4b:f1:42:ba:07:ca:02:2c:1b:
96:bb:be:a5:be:5b:9c:cc:68:c1:e1:85:6b:63:04:
d7:ab:80:06:9e:88:83:63:51:32:33:18:72:17:3a:
70:c7:5f:32:11:69:e5:3f:0d:e9:1b:1c:0e:d2:13:
98:44:a7:03:75:dc:47:76:cb:20:fd:69:73:5e:4e:
d9:28:7e:1e:83:75:12:77:21:df:16:3a:c8:e3:1a:
02:46:4f:dc:5f:7e:8b:dd:02:57:56:50:7c:b0:5e:
31:9a:7c:fb:bf:e5:a9:bd:da:2a:c3:72:9b:35:5d:
cf:9b:33:91:f7:2b:82:8e:40:83:4a:7a:0c:fa:74:
67:92:11:77:f9:af:60:29:92:d8:a6:92:96:b5:98:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8A:79:C4:CB:DD:AB:AC:E9:13:0F:DB:76:5F:2F:0B:FA:96:6C:F7
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:34:ec:29:08:02:a9:0e:88:86:7f:92:67:f9:3b:cc:14:ff:
71:76:b5:60:c0:7a:91:13:11:90:f3:a1:ca:4c:8c:c7:57:42:
95:bc:36:e5:2c:78:6f:4c:1b:60:fe:77:6c:f2:50:77:73:2d:
62:eb:8d:f7:30:1a:5d:d2:51:64:d6:e9:4d:41:f0:b4:21:18:
46:bf:5b:73:3b:62:6d:46:7e:cd:21:48:64:da:25:b4:8b:7c:
97:c8:cd:ce:3e:98:ec:71:cb:39:94:c6:48:56:52:c5:ab:67:
8e:88:4e:f4:3a:a2:5e:58:f4:9e:b1:f4:0e:7b:30:97:db:6b:
b6:6b:6a:b5:7e:72:87:de:93:4c:02:4c:4b:df:38:0b:70:20:
15:9c:f3:0e:67:57:b6:29:c5:af:c4:ad:ff:72:13:a8:26:d8:
1a:55:2a:fe:b1:25:04:22:9f:6e:66:5d:fb:7a:f3:4a:b2:c9:
fb:d7:d5:c6:23:3a:1f:a1:01:e7:e8:a7:25:98:7d:b3:4d:2e:
c3:75:11:e9:b5:bf:58:1d:21:66:6b:da:30:33:e9:9a:fe:a4:
00:a3:c3:ea:12:57:3c:cd:59:c8:6d:b2:24:52:6b:f1:19:1f:
a4:32:9c:7e:97:11:d6:7b:76:b5:06:86:64:63:36:9a:46:2c:
93:53:85:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:05:22 2025 by rpki-client