Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier: wVVn1TBAFLHlwhaA4wBW+pHZYN2D5JOBW9CShLPmz/4=
Subject key identifier: 9B:8C:F7:68:2E:D0:D6:DD:5E:00:E8:50:2C:1E:37:3C:0D:EC:F6:9E
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer: /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial: 019A4DE1C7482C44AB21195E2C5F3DFB9A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number: 129F
Signing time: Tue 04 Nov 2025 08:00:33 +0000
Manifest this update: Tue 04 Nov 2025 08:00:33 +0000
Manifest next update: Wed 05 Nov 2025 08:00:33 +0000
Files and hashes: 1: 414nKkHebTOgTqZ_q2PSfPTH6Dw.roa (hash: Iwsiv1vVrSzN0K3T7lWIZIu0VA5UnMuyCHwLiMjnve8=)
2: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: L6Xb/S/JY5RFY6J9ULdrUYTWiBRGf6njKB2bUxaqWKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c7:48:2c:44:ab:21:19:5e:2c:5f:3d:fb:9a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Validity
Not Before: Nov 4 08:00:33 2025 GMT
Not After : Nov 5 08:00:33 2025 GMT
Subject: CN=9b8cf7682ed0d6dd5e00e8502c1e373c0decf69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:28:72:d0:d3:5a:98:dd:ad:af:a2:90:82:
2e:ab:e5:b2:01:c8:bb:d2:f5:89:aa:83:09:2a:54:
93:57:25:dd:94:87:ea:94:3d:8b:54:a5:e7:dd:30:
c6:9f:a0:1b:b7:76:f4:86:41:7a:9b:1f:e3:0d:87:
70:20:b5:b6:65:69:23:2a:f0:ec:2f:f2:3b:0b:8e:
44:a1:8d:71:09:8f:ee:5b:c8:63:4c:3e:5a:e5:7b:
b4:7f:ee:3e:02:f6:01:00:f2:27:2c:72:d6:48:f8:
44:87:76:c2:b5:ab:6f:73:54:46:3d:de:9a:2f:3a:
03:92:d8:1e:1e:f3:96:84:6a:79:e3:52:dd:c4:08:
7f:ad:da:06:4b:b6:de:5d:5e:04:84:15:d3:86:ac:
9f:19:77:09:fa:67:00:13:c2:4f:5a:0f:e1:a8:4e:
b9:1c:20:dc:60:51:0e:86:c4:88:08:45:86:05:07:
63:cb:21:bb:16:65:b1:d9:c6:c8:f7:2f:cd:01:45:
1e:22:b2:f1:ca:b4:43:7d:1c:a5:68:d0:d8:00:61:
74:59:d5:d5:59:a5:9e:21:e5:dc:cd:a1:e6:22:5a:
55:2a:40:d3:b6:43:b3:72:83:41:0c:cf:5c:34:eb:
19:30:9f:95:61:36:3f:4d:eb:ef:57:d5:b9:b2:db:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8C:F7:68:2E:D0:D6:DD:5E:00:E8:50:2C:1E:37:3C:0D:EC:F6:9E
X509v3 Authority Key Identifier:
keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4b:cf:a8:6c:f3:af:ec:35:08:f7:0f:ef:34:48:48:8a:a1:
63:f5:e1:c3:9f:05:e2:49:2e:30:f6:3c:50:6f:3a:51:77:6f:
b2:54:37:17:31:86:f4:d5:4a:41:2f:15:86:dc:0a:98:2c:32:
7a:36:f8:22:6b:e4:b9:ed:38:cf:db:73:c9:59:3d:bc:e2:3b:
1e:73:7a:a8:64:ea:5c:6c:fa:b0:f7:db:14:d1:97:e0:d9:a5:
00:d9:fc:04:a8:95:4e:c4:54:dc:51:00:f2:31:f6:0c:d6:93:
c0:42:70:c1:c1:27:5e:b4:5a:0d:43:fd:fd:4c:10:c2:3e:e6:
b9:8a:3b:5f:7d:e6:f7:14:82:0f:00:b9:57:30:7e:e4:26:bd:
42:20:b7:81:1b:04:3e:ab:fb:45:3d:7a:fc:64:33:3a:28:87:
e2:d0:42:c6:0c:78:67:62:1a:7f:3e:9b:10:b3:62:34:92:a7:
80:61:83:e9:8f:30:51:e1:22:5d:4b:8f:45:97:30:fd:d9:e2:
5a:b6:8e:aa:a8:00:bc:b3:95:29:1d:39:7e:76:1d:78:15:4e:
95:57:12:f4:49:4c:b3:31:96:08:b7:61:01:b9:7d:7b:c5:f0:
42:4e:c7:50:1f:2b:ea:d8:4b:87:b4:0b:ba:f8:78:06:63:62:
4d:59:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:20 2025 by rpki-client