Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File: 1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier: Nz7ACxAAFNlESFmmwpUbCko2LaGb+MxS4y16bJiD4ms=
Subject key identifier: 6E:2D:16:F2:E5:C9:6D:79:89:40:80:58:69:2F:63:A3:E7:90:84:62
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial: 019A50073269D2B7B8E8F2178405DED8E153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number: 14AE
Signing time: Tue 04 Nov 2025 18:00:40 +0000
Manifest this update: Tue 04 Nov 2025 18:00:40 +0000
Manifest next update: Wed 05 Nov 2025 18:00:40 +0000
Files and hashes: 1: 0mGXGaCdx8b0IvVKiGo7317nAQw.roa (hash: JBoOppkoR2+2kdzZgQYn1vdyTCQusp5l9Um4sKeOKzw=)
2: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: tMK0Bc5frUBw1dJXs25lkkQpw18zkQ7YCwqMbQ2rU6k=)
3: P3rY7Cmn84Ni11FziReIJTvis6Q.roa (hash: SHFkgztCNHhWPjHt5nCk5Bgx6ribEhAmnRifNZCrpkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:32:69:d2:b7:b8:e8:f2:17:84:05:de:d8:e1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Validity
Not Before: Nov 4 18:00:40 2025 GMT
Not After : Nov 5 18:00:40 2025 GMT
Subject: CN=6e2d16f2e5c96d7989408058692f63a3e7908462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:72:30:75:07:8a:f8:93:1a:67:0f:25:bc:
b8:bb:da:ce:f6:d4:88:8c:57:b9:55:92:57:53:1f:
8c:5f:49:f6:6a:3b:83:7d:ce:45:ef:1e:a7:5d:cd:
72:6a:45:0f:14:d9:7e:b3:1d:fd:f1:25:8b:5d:c0:
c4:99:40:e1:66:61:93:6a:81:6e:73:71:cd:c0:0b:
1d:27:2c:35:dc:dd:27:97:b5:a6:e3:a2:c6:2d:c7:
84:2b:55:5a:6c:36:77:fc:15:96:cc:aa:88:7a:60:
a2:01:88:ce:f9:2c:19:e1:3f:ab:50:1f:46:97:cc:
a7:b7:b3:92:4c:17:09:03:aa:ec:a7:bb:f3:b1:f9:
77:c0:44:9c:8d:cf:b6:2f:2d:8a:57:01:c0:d3:40:
72:df:21:53:03:16:df:f4:89:4c:a7:3a:36:4b:36:
7a:2a:6e:20:b9:cc:8f:83:20:86:b6:ea:30:cb:de:
f6:3b:a5:2f:3d:81:16:2c:10:14:51:ad:eb:5f:a9:
29:55:06:f1:c7:3f:0f:ca:68:c9:9e:75:7a:1e:18:
76:38:bd:1e:02:a2:1c:bd:27:ca:a5:84:00:13:17:
10:f0:7d:bc:d9:1a:1d:57:bf:4c:2f:ea:36:d8:49:
b5:c8:e9:db:00:af:dd:26:4b:fa:d3:10:bb:e6:f7:
51:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2D:16:F2:E5:C9:6D:79:89:40:80:58:69:2F:63:A3:E7:90:84:62
X509v3 Authority Key Identifier:
keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:93:bf:d8:5f:81:81:b9:6c:ee:cb:16:ec:1f:92:5b:49:c8:
95:ab:d4:a5:05:80:72:4d:b3:f6:7a:36:f2:b6:ec:62:9a:7b:
be:bc:06:bb:60:17:0c:65:bb:e1:6b:dc:cf:9d:4f:95:74:b7:
50:59:d4:37:a0:5f:ca:cd:9c:54:46:27:52:4f:2f:a3:cb:ae:
26:e6:64:d4:16:d5:e9:a4:14:7b:32:38:69:3b:ab:05:a3:44:
32:97:b3:29:0f:ce:d8:c1:0c:42:7f:f9:ce:49:ef:25:85:db:
ee:40:44:71:cc:32:e4:62:9e:1b:8e:20:65:7d:9e:a2:d1:35:
a1:7b:f0:2c:79:ff:1d:3b:91:bb:85:02:a4:55:56:44:6d:27:
8d:fb:2c:dc:08:be:53:bc:d6:ff:58:80:15:fa:40:79:29:dc:
76:59:a5:fe:df:2d:04:20:bb:4a:36:3b:79:ec:9d:57:1a:40:
f6:9a:bb:e0:d7:02:21:46:33:b8:70:74:3b:21:11:6f:39:a0:
78:e8:b0:2c:95:a5:85:fe:23:6b:1c:f7:9b:05:a7:1b:d4:d2:
03:8b:ae:6c:41:65:df:06:ec:b1:ed:71:67:ad:c4:7f:9e:5e:
2c:7c:9a:58:dc:c2:a0:75:86:85:1c:82:e5:a5:37:86:5f:64:
9b:8d:78:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:26 2025 by rpki-client