Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier: 34NPWMzSBZTbYHOOv+2mhPDEWtueHi8emQZz8nIcA7o=
Subject key identifier: 99:59:37:28:17:E6:CC:7B:28:09:81:31:4B:AB:38:66:D0:84:AA:D9
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 019A4DE1A11151DAE55F5C10651A0E255199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:23 +0000
Manifest this update: Tue 04 Nov 2025 08:00:23 +0000
Manifest next update: Wed 05 Nov 2025 08:00:23 +0000
Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: YsRvovj8uX7XZvXyhOa0ZebSAet1NHo5TFgb2sbzQ6s=)
2: UhsTPDlkEVTfjN0gtgklGlfn_mQ.roa (hash: gvwxeqU03k4MQD3WdF59OWVu6wgm7kgHM+ORIWuetR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a1:11:51:da:e5:5f:5c:10:65:1a:0e:25:51:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Nov 4 08:00:23 2025 GMT
Not After : Nov 5 08:00:23 2025 GMT
Subject: CN=9959372817e6cc7b280981314bab3866d084aad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:27:ec:48:31:99:b1:43:5c:e5:19:ba:21:
19:0f:2a:fd:a0:be:91:d9:1c:b2:c5:d6:47:59:b8:
21:62:fd:4b:16:14:86:03:62:86:55:c3:ee:8b:fa:
32:13:23:ab:4f:59:0f:e2:02:83:16:60:d9:71:87:
4b:30:f6:6c:4a:c1:9e:ef:90:25:b8:15:e7:71:9c:
49:10:d4:98:f8:29:51:3e:27:26:1e:f1:b7:5f:ed:
ec:87:94:c3:db:05:66:97:17:fc:a7:23:30:a3:39:
89:97:8c:f7:54:05:39:ec:7c:08:e5:d9:36:75:eb:
70:45:e0:74:7d:3e:a6:a4:01:9c:6e:04:8e:a4:49:
44:70:59:ab:6d:7c:ae:37:25:c6:76:25:26:b3:7e:
9f:2b:d8:8b:e5:8a:62:27:1a:f7:6f:c3:6b:71:1f:
81:f2:47:83:95:93:4e:59:0e:2c:f5:31:27:43:76:
81:89:bb:9a:77:d5:91:e8:d5:4c:a8:2c:57:17:39:
22:cf:96:f6:11:45:33:fd:e5:02:0a:15:66:26:f3:
d4:6d:98:e0:53:27:9e:9c:09:0b:30:87:99:a9:9e:
93:14:c4:10:4a:3c:f9:f9:cf:cf:93:9b:f8:4b:82:
01:73:85:19:3a:34:96:aa:8c:4d:d3:fd:0b:f1:82:
c5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:59:37:28:17:E6:CC:7B:28:09:81:31:4B:AB:38:66:D0:84:AA:D9
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:29:94:30:ae:cd:58:38:b7:1d:f5:45:01:3d:9c:d9:f7:55:
72:50:14:d3:bf:7d:05:60:8b:45:01:5e:9b:a8:5b:b1:8c:7f:
86:f7:21:d9:9e:83:95:04:f0:e4:93:6e:37:75:b8:27:8b:71:
88:2b:5c:44:1b:b2:98:23:c8:a6:eb:74:4c:fe:6e:ce:f6:ee:
68:10:c0:7d:74:9e:38:5e:b2:13:ed:d6:5c:d0:0e:9e:08:e0:
8f:13:24:de:4b:8d:f2:27:4b:aa:26:e3:b7:c7:cf:4b:0a:94:
9a:b1:1b:fa:03:aa:2d:11:11:b0:8b:39:99:73:9b:01:ed:89:
fa:37:9e:0e:be:08:fd:12:2b:b1:22:54:0a:69:81:d5:ca:88:
cb:53:b8:7c:c0:aa:e2:f7:9b:0d:36:92:e2:80:04:35:58:bb:
0b:8f:d2:18:6d:ae:e9:a9:b5:bb:ba:c4:d2:e7:21:7e:b5:b8:
4d:60:29:5d:61:c3:24:76:f2:3d:51:40:3b:77:9a:d4:e6:6f:
24:8f:fd:79:4b:79:96:db:8b:f1:53:db:7b:d1:5d:36:ba:e0:
b3:10:70:eb:5a:fa:ab:6f:7e:5b:a5:7b:99:bb:8b:86:03:79:
25:83:f7:d3:d0:ae:8e:5a:1e:d7:53:c1:a6:de:52:7d:b0:3f:
c2:09:55:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:47 2025 by rpki-client