Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
File: _HlIirThrA9L1GfStNNiHGsY7qA.mft (raw, json)
Hash identifier: Iya/VAk5DdOjtH4W7bJ6f3jtdEJNgMBfmCc0ipxo9Pw=
Subject key identifier: 7F:44:1C:51:73:18:6C:71:74:8B:F2:A8:3E:CC:52:E7:FF:64:46:65
Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
Certificate issuer: /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Certificate serial: 019A5119C2B5181B185AA792886B64AEB5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 23:00:34 +0000
Manifest this update: Tue 04 Nov 2025 23:00:34 +0000
Manifest next update: Wed 05 Nov 2025 23:00:34 +0000
Files and hashes: 1: Fxxp-LRkqvfLrMmhXHpze09Zypk.roa (hash: VeSras0PkAsQ1iWlGxVtQbCw1RAH/pLCo7L2bleBamo=)
2: _HlIirThrA9L1GfStNNiHGsY7qA.crl (hash: W6n2zTZAAFtnPT5pz+IbGvDYXhT1/rJRajGuXO9FpWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:c2:b5:18:1b:18:5a:a7:92:88:6b:64:ae:b5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Validity
Not Before: Nov 4 23:00:34 2025 GMT
Not After : Nov 5 23:00:34 2025 GMT
Subject: CN=7f441c5173186c71748bf2a83ecc52e7ff644665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:dc:f3:6d:80:b4:8f:8f:5f:0d:cc:5d:d2:
71:cc:1b:11:4a:b1:93:5a:04:82:b1:e8:83:03:3f:
29:12:f0:2d:e1:34:cc:c5:48:f9:13:2e:d5:9b:d8:
b2:f5:1e:cb:05:1e:05:43:98:10:d2:66:11:4e:85:
dd:1c:bb:78:3e:0d:59:5e:9b:33:71:77:a6:3d:f6:
01:71:d9:11:6e:49:94:e2:67:ce:bd:d5:f6:47:bb:
82:2b:a4:b7:fb:2b:b3:e7:d2:d4:21:dd:05:30:bb:
60:8b:98:17:aa:ff:89:7d:e9:ea:45:f4:cc:ee:9a:
8d:37:a2:a8:01:19:d4:6f:0b:8b:b1:87:c2:fb:5d:
6e:b7:72:84:2f:0e:95:48:dc:f1:2f:35:ed:ea:06:
93:67:8c:5c:9a:dd:2c:6e:26:bb:03:5e:64:fa:b3:
b8:6b:8d:73:77:b7:80:3b:5b:09:cd:a3:2c:62:98:
df:40:30:61:3c:07:e9:0f:8a:2d:5d:03:36:f8:d0:
81:4b:03:8a:52:e1:47:10:8e:13:b3:bc:eb:75:5e:
ec:38:3f:54:48:6e:52:28:95:2c:9d:d3:b5:76:0d:
84:6a:9d:26:09:b9:e7:89:49:f1:eb:dd:ec:d9:b6:
d7:ea:60:8b:8a:c4:a1:d0:d6:66:38:fe:75:ef:19:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:44:1C:51:73:18:6C:71:74:8B:F2:A8:3E:CC:52:E7:FF:64:46:65
X509v3 Authority Key Identifier:
keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:01:fb:c3:d3:eb:60:27:1b:b5:42:b7:9d:b2:9c:ea:cf:32:
5d:a8:83:43:af:ce:0b:5a:94:d9:68:0c:fa:e5:6e:78:7f:48:
14:ac:19:de:0d:51:b7:b4:5f:52:60:3d:14:16:51:31:cb:15:
5a:9f:ea:dc:79:41:e8:13:4b:39:b4:79:1a:b5:4a:a7:6a:d4:
9a:b2:75:c0:bb:6a:b5:eb:83:42:bc:2f:10:98:82:07:78:bf:
50:8e:ca:ee:0b:f9:a9:32:d1:6d:78:06:dc:c3:7e:e1:80:29:
2f:9a:db:5f:8a:ac:42:63:36:c0:c0:e7:45:43:a8:21:4c:6c:
55:3e:f4:4a:67:0d:85:1c:e1:6c:ed:47:c8:7c:cd:39:56:1f:
18:11:27:7f:ad:04:12:86:4b:45:e4:6f:1b:31:51:71:cb:62:
ad:ee:e1:0f:c6:9d:92:0f:73:38:2c:95:d2:00:69:9e:3d:37:
b6:7e:bb:96:d3:98:46:d5:b8:ec:63:81:10:8b:34:dc:50:7f:
78:60:0e:8a:9c:a9:37:d8:1b:af:db:b1:3e:0c:cf:7f:a3:1f:
78:bc:54:0b:14:78:6c:ca:b0:91:63:9b:4f:a6:6b:76:fa:10:
17:62:11:44:1e:65:0f:62:3f:f4:05:c3:8c:75:65:b8:93:e7:
59:85:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:00:23 2025 by rpki-client