Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: HZBm17EsPmAWBTNS3XZKaPQXAcXqlc56x6cwwhkoEhA=
Subject key identifier: 95:B9:20:F0:5F:0C:41:E5:6B:F4:EC:A6:C4:DC:8C:28:64:03:48:67
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 019A4F62B3E83E96C37D06C1FB1F1346679E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:00:59 +0000
Manifest this update: Tue 04 Nov 2025 15:00:59 +0000
Manifest next update: Wed 05 Nov 2025 15:00:59 +0000
Files and hashes: 1: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: najSGQRggY6RNE83nMb29jG8o92vvoqqhwEL5SAJ7qA=)
2: zx0be_pkiDVp3Bp6Y2p73CdjnRQ.roa (hash: NeFjM/BvfaVvBPbeh43NItXZIzj0r2G0lwwaiN3R4Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b3:e8:3e:96:c3:7d:06:c1:fb:1f:13:46:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Nov 4 15:00:59 2025 GMT
Not After : Nov 5 15:00:59 2025 GMT
Subject: CN=95b920f05f0c41e56bf4eca6c4dc8c2864034867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:28:45:ce:35:3c:9d:94:f2:14:81:51:96:
5e:89:ac:10:d0:7e:ff:fd:b9:bd:c4:41:28:33:88:
20:3c:de:72:69:43:3d:e2:2a:3c:5a:22:b4:12:b3:
ca:b5:e1:58:4f:5a:91:ec:3c:ab:2e:ab:78:6f:6a:
19:0d:ae:1d:06:2f:e5:19:87:43:61:3f:ab:c1:c7:
29:94:a4:3a:3c:ac:8f:95:6b:d6:7a:be:c9:c9:f6:
53:69:b9:5b:ec:56:b6:0e:3f:c3:c0:20:59:12:ee:
b7:60:0a:7e:73:b4:0c:5a:14:09:f5:f2:f5:63:4a:
78:62:3e:f2:41:db:e5:c3:54:74:a7:45:89:af:28:
11:2e:f8:31:ff:40:30:6e:cc:83:1c:62:39:42:fe:
32:23:01:d9:03:90:52:71:76:0b:00:f5:16:56:91:
5b:d8:f7:f5:36:5b:b4:4e:29:ca:16:90:8e:94:82:
ca:46:a2:18:a4:7b:00:c2:52:34:77:2c:f8:f6:e7:
80:b0:d7:d3:d3:91:96:09:4c:1b:30:d7:16:2e:72:
89:06:e6:a8:13:65:40:cd:ca:b7:cc:b8:40:12:3e:
57:f2:e5:3f:9f:9f:ab:9c:c7:5a:da:30:6a:1b:23:
06:1f:29:ff:1f:79:7a:c9:df:9c:c7:df:88:19:2c:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B9:20:F0:5F:0C:41:E5:6B:F4:EC:A6:C4:DC:8C:28:64:03:48:67
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f5:a5:e7:0d:77:1e:1c:55:95:49:74:e0:e6:fd:e4:3a:1a:
ca:30:be:32:50:d5:31:e9:19:77:6c:f1:d9:07:3e:48:d0:8f:
a2:f0:e8:87:2a:e1:ec:01:a2:eb:eb:c3:1d:4a:8f:50:99:8d:
ce:12:08:95:d3:2c:ad:97:0c:4b:f4:56:d6:52:32:d2:d7:cf:
61:35:1a:32:ae:10:ee:97:08:c6:c7:96:74:8b:46:6a:88:0c:
91:68:a9:87:f0:64:a9:22:c4:20:48:7a:9a:75:5a:d1:c0:99:
bf:dc:5a:4e:2e:46:3a:eb:01:a4:d3:fd:0c:aa:4f:ea:b2:93:
01:75:7d:2b:54:ac:74:44:33:2e:06:50:e3:ac:79:eb:ee:41:
77:b4:a1:de:58:46:5f:ce:3c:6c:a0:1c:82:c2:c2:ce:77:73:
e9:59:a0:80:47:e2:80:44:f8:e1:30:25:8d:fa:35:3e:4f:d2:
2e:17:9a:19:16:f6:93:f0:0f:ba:e0:c5:b9:72:30:31:70:73:
b1:58:7e:eb:c8:62:07:7b:0f:d7:31:89:24:28:3f:92:da:98:
d9:79:98:28:47:c8:e2:c8:4e:78:52:ee:21:70:7b:a9:78:db:
55:54:b1:fe:86:e6:4e:59:ed:17:01:a4:61:14:fc:29:ee:f6:
14:67:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:29:11 2025 by rpki-client