Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
File: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json)
Hash identifier: TNb9o9ovTbQoUUmvZLpGJjo9OVKS4/PpHcee+EngK2s=
Subject key identifier: AA:41:00:39:10:D2:C9:9A:1B:F3:95:5C:A4:CE:31:3D:98:D0:18:B6
Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
Certificate issuer: /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Certificate serial: 019A533F1D5311FEEE8EE478D2AEC7246D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
Manifest number: 0E45
Signing time: Wed 05 Nov 2025 09:00:36 +0000
Manifest this update: Wed 05 Nov 2025 09:00:36 +0000
Manifest next update: Thu 06 Nov 2025 09:00:36 +0000
Files and hashes: 1: GYIm3RDoW42qeN5ZkiYHMu0tDbk.roa (hash: XTL3oyukju4z29vBf0q/HsP5UmJFSc4ge9VlgNDZpjY=)
2: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: oVlv0v02JsLvRgijU1Y0Qfu5K/paPQNgjd87XpFWZjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:1d:53:11:fe:ee:8e:e4:78:d2:ae:c7:24:6d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Validity
Not Before: Nov 5 09:00:36 2025 GMT
Not After : Nov 6 09:00:36 2025 GMT
Subject: CN=aa41003910d2c99a1bf3955ca4ce313d98d018b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:9d:96:1d:45:ec:b2:71:67:f5:ad:fe:6d:
78:61:47:41:e5:86:d5:72:4e:01:59:52:63:2c:be:
e4:fe:64:8a:3f:a8:d9:3f:d2:12:dd:90:1e:bc:0a:
8e:d9:ed:0d:f5:87:a5:c1:ae:10:28:7b:21:aa:dc:
89:b0:ec:cc:d7:e9:f4:fe:ac:fb:68:71:df:bf:38:
7c:ee:0e:dc:72:c4:f1:ff:33:3b:22:5a:d3:72:3b:
31:01:13:85:09:9a:51:52:bc:7b:cc:0d:74:b4:f9:
5f:94:84:7d:c7:6a:60:50:72:53:f5:20:3c:d2:2a:
e4:9d:34:6d:66:79:7f:fc:4b:3f:da:dc:b7:68:3c:
45:13:b5:6b:20:d7:c8:66:cc:e3:56:5b:d8:64:98:
38:85:23:c3:bd:85:3a:c9:a0:9c:03:03:b8:bf:3d:
76:4a:85:6b:52:8a:44:b5:fe:5a:6b:e1:ea:7d:52:
b4:35:be:43:ea:ee:86:30:bf:c8:06:ba:9b:ea:ac:
a7:a0:27:b0:2c:79:d6:22:cc:0f:fa:76:4c:b3:92:
67:46:f4:f6:6a:17:5d:ea:59:86:da:ec:61:00:89:
77:99:35:61:ff:ac:63:47:97:33:f3:02:10:de:8c:
ec:27:bd:14:1c:2a:cd:c2:21:b2:f4:c6:8e:6b:9c:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:41:00:39:10:D2:C9:9A:1B:F3:95:5C:A4:CE:31:3D:98:D0:18:B6
X509v3 Authority Key Identifier:
keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f1:2a:87:9b:01:ee:a6:7f:d2:9e:3e:40:0c:b8:19:ac:e2:
39:2d:4e:62:8e:a6:6c:ba:2e:ca:56:09:46:8b:5f:61:2e:fe:
d8:67:a8:de:94:6a:04:cc:05:92:d3:eb:35:e9:ac:ff:22:4d:
e0:0f:ba:6d:5d:61:5b:95:e3:b2:26:56:d7:17:09:e5:2c:0b:
93:64:65:d0:b1:3d:39:47:66:b5:df:a0:29:9a:0a:ff:74:6b:
4f:13:ff:ad:f1:b0:ff:24:8d:12:b9:8b:db:6f:56:16:b4:7d:
f0:30:b7:6d:b5:82:17:97:fd:a6:1a:8c:d4:cb:e1:98:4c:ef:
e2:7b:4c:36:e7:e3:2f:d0:50:32:71:13:55:22:5a:bb:51:da:
f9:39:e0:b5:c6:c2:09:0d:0e:93:14:31:fa:4e:5a:cd:2f:89:
f7:a5:e1:e2:a9:2c:37:d4:d9:c5:1d:ef:82:93:42:6f:28:79:
9c:40:04:0d:36:ec:77:64:bd:95:3c:6c:9c:e3:6c:d6:3d:0a:
1c:0b:32:c0:41:aa:b0:dd:6a:9e:54:f6:d6:a1:2f:8f:80:2d:
d8:3d:90:d2:71:84:7c:3a:6a:92:02:dd:e7:56:bf:e2:bb:d2:
a1:2e:34:2a:dd:50:c3:99:37:ad:de:19:39:54:26:92:19:15:
57:2b:3d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:54:58 2025 by rpki-client