Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: oXMunPds7/eqPW0WXbXRUM3LvfasnbIWnFaHSROm+5A=
Subject key identifier: 3A:46:EA:10:48:C1:19:68:20:0C:98:B6:95:90:FF:80:30:FE:48:19
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 019A533EECA669E78C5C6E78AD86E2D91FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 06CF
Signing time: Wed 05 Nov 2025 09:00:23 +0000
Manifest this update: Wed 05 Nov 2025 09:00:23 +0000
Manifest next update: Thu 06 Nov 2025 09:00:23 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: GNwX5wWlWWqappVMH5bbBgaLlIsI00S0eRuW7N7XvEc=)
2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:ec:a6:69:e7:8c:5c:6e:78:ad:86:e2:d9:1f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Nov 5 09:00:23 2025 GMT
Not After : Nov 6 09:00:23 2025 GMT
Subject: CN=3a46ea1048c11968200c98b69590ff8030fe4819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:25:39:7e:56:29:14:a5:58:80:1b:0c:21:
f3:11:01:64:30:0f:17:ae:47:79:6c:83:f3:1a:ed:
eb:de:f0:e9:00:0d:48:47:65:91:c8:62:bb:3f:c8:
47:f1:d1:0c:21:5d:ed:97:cf:fb:20:a3:83:d4:da:
6e:0f:ad:cd:93:04:cb:b9:ee:f9:84:e9:e4:e6:53:
09:96:75:2d:ec:7a:86:03:92:c2:5d:f6:92:27:ad:
43:da:6f:74:0d:02:0f:c2:db:d0:7b:d6:0e:2b:d5:
8d:22:0f:5c:61:98:eb:84:48:96:c9:7c:a6:24:12:
49:2c:a7:28:59:0e:c6:f7:50:ba:98:dd:e9:10:ac:
4b:f1:63:f4:cb:6f:53:9b:9a:26:17:ce:60:85:d4:
44:f1:b4:0d:2c:70:33:11:89:f3:a1:21:79:bb:b3:
73:94:52:7c:df:b1:69:c5:d3:ce:7d:2e:07:9a:0c:
2b:80:a3:4e:7a:8a:38:ce:e7:b6:de:b7:9f:21:6c:
95:ee:05:4c:91:e3:9f:c1:49:8c:28:bb:80:78:04:
99:07:dd:f8:0b:b7:ad:0b:c1:42:54:1f:96:a5:a9:
63:21:d1:71:79:36:53:2b:d1:96:a1:2a:1b:b8:ee:
ad:1e:b6:e2:8e:e9:75:28:40:aa:53:2e:f8:ad:ec:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:46:EA:10:48:C1:19:68:20:0C:98:B6:95:90:FF:80:30:FE:48:19
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f2:2c:f2:d4:38:02:ca:5f:f5:0f:ff:a7:90:8d:83:6d:28:08:
93:2a:30:04:02:ec:a7:42:3d:f4:da:ce:36:e5:f5:08:30:e5:
63:aa:46:c1:0f:0d:44:8b:47:19:02:4e:50:d8:97:36:58:71:
aa:0e:48:9d:68:b9:8c:7b:10:f4:44:c7:c6:14:62:46:93:96:
f6:9d:4c:fb:98:4a:a2:d6:58:15:fa:40:45:e5:4c:48:76:21:
45:53:2d:53:b4:ac:a6:f9:f9:44:1c:37:9c:b8:60:e7:35:de:
88:96:96:c9:ff:64:e6:34:25:86:5e:21:dc:02:bc:e6:0e:e8:
f8:77:c6:e6:d5:09:b9:26:9b:fc:bc:f1:9e:78:ed:8d:6e:b2:
02:82:c8:fb:e8:34:dc:de:45:1d:a1:49:54:ac:69:5b:ff:9d:
bd:58:88:47:3c:ec:48:c2:a8:9c:a7:a0:66:a1:e8:b5:24:41:
84:84:8e:45:12:32:3c:08:8e:3a:d4:52:92:d2:9a:6c:71:c3:
15:18:6d:05:f1:34:19:8d:4b:23:aa:0f:f4:fb:f6:9c:72:59:
6b:c6:f8:d8:26:f6:21:06:94:0a:34:0e:6a:ab:24:66:be:f8:
7a:9a:90:05:98:92:9b:c7:f4:fe:1b:fc:21:67:ca:b7:d2:3e:
77:d7:3b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:02 2025 by rpki-client