Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
File: HWtralBhpBFdUwQM_9xks7DXGng.mft (raw, json)
Hash identifier: bGKqTxDeYTjBf691mRpYhrwOoVlRUqGE954MIzlO7x8=
Subject key identifier: A9:02:A1:13:46:58:36:61:D9:7E:39:76:1D:95:53:42:37:B7:5D:F2
Authority key identifier: 1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
Certificate issuer: /CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Certificate serial: 019A4E86363400254EC333A91AD04BEBFE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:09 +0000
Manifest this update: Tue 04 Nov 2025 11:00:09 +0000
Manifest next update: Wed 05 Nov 2025 11:00:09 +0000
Files and hashes: 1: 59rlgV96ANnvbttVckQTSpcL4gg.roa (hash: yMmqOnSAlEZI0n5Ljt8KnwxkwDwpOxx+NBJ3GGUG5bk=)
2: HWtralBhpBFdUwQM_9xks7DXGng.crl (hash: BRvKCWnJ4waiVaJCAN2UUyHa+xxwwuGrHeSEM8u82e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:36:34:00:25:4e:c3:33:a9:1a:d0:4b:eb:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Validity
Not Before: Nov 4 11:00:09 2025 GMT
Not After : Nov 5 11:00:09 2025 GMT
Subject: CN=a902a11346583661d97e39761d95534237b75df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:ad:de:98:57:91:2f:57:82:f4:c9:1d:10:
05:31:b8:45:f4:af:73:ab:e0:89:f3:f1:6b:85:9b:
57:a8:56:ff:3a:aa:72:08:46:e7:72:0e:fa:32:ba:
06:a2:d2:11:a1:45:c3:96:b8:9e:9c:f4:ba:29:89:
f0:a0:a0:be:05:c0:ca:e0:a4:de:0d:29:04:4d:15:
9f:22:d7:d4:aa:b6:dd:90:e8:5c:3d:46:45:a4:f4:
2d:26:53:52:d3:a8:a2:b5:89:5d:19:7a:7a:4b:d1:
da:b7:b9:57:08:8a:12:43:f7:24:b6:d5:d7:88:6d:
92:0d:67:f6:d5:48:24:36:f2:4b:e8:92:74:49:23:
58:9c:22:8b:9c:08:0a:55:6a:e5:52:8d:25:4f:32:
a2:ac:06:95:89:55:4d:95:e7:83:ec:10:5f:c1:70:
12:7f:01:04:32:db:56:44:d0:a5:53:48:2f:38:c3:
dc:a6:37:43:f1:54:cd:a3:ba:2a:47:0e:32:75:38:
2e:6f:37:f8:2d:14:b7:04:3a:50:ad:7e:9d:f9:67:
a4:48:ee:dc:0a:6e:9f:7e:6a:47:c6:a8:84:76:da:
3c:db:df:69:dc:4a:b6:95:d5:dc:5f:95:a6:ce:58:
16:39:8a:af:8c:c0:22:a9:4b:da:f4:37:84:6e:8b:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:02:A1:13:46:58:36:61:D9:7E:39:76:1D:95:53:42:37:B7:5D:F2
X509v3 Authority Key Identifier:
keyid:1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:78:9d:09:6d:91:4d:98:b5:45:76:6c:4c:82:90:48:56:4d:
ef:67:9c:fc:5b:56:f2:b2:12:95:3b:36:aa:d3:a1:cc:e2:b8:
bb:00:06:b9:81:5a:5b:d6:ab:d4:b0:c0:0a:9d:ba:b2:fb:18:
19:2e:94:29:2f:75:5f:50:4e:bb:51:a3:ff:a8:e8:96:eb:df:
18:47:22:12:9a:f6:31:31:91:85:be:f7:13:c1:f7:a0:88:32:
98:84:3b:3a:51:0b:44:23:14:9d:93:dc:5f:15:2d:5f:05:f8:
51:7b:58:ba:70:a9:80:8b:e9:ba:80:7b:31:62:40:58:74:16:
bf:42:dd:14:d9:c0:df:2a:b4:95:84:59:f9:b6:3c:02:2f:32:
ec:e5:a7:d5:1c:e4:99:2b:1f:1c:c1:32:6a:9a:b4:48:e5:fd:
54:b2:27:97:3e:ea:b2:45:07:30:78:80:ec:65:0b:3a:b2:f9:
f7:c3:97:b4:59:39:61:92:f4:91:6b:36:55:5a:e2:76:33:f7:
65:b3:26:61:d3:3f:26:ac:0f:35:75:91:4e:fb:ca:19:43:76:
c1:ad:98:00:81:85:b6:7e:8a:7d:9c:e3:8e:6c:e2:da:c3:3a:
fd:69:a8:64:62:70:8e:9b:d8:2b:e1:96:7a:db:07:9c:3c:24:
42:60:4d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:17 2025 by rpki-client