Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json)
Hash identifier: 0qVVsD5w0bZB9BGzd4r+dgvzvp9MX81ZYTIipvAThZA=
Subject key identifier: F3:FA:69:CE:8E:D9:FC:D6:B9:38:74:07:79:7D:99:E7:E5:B8:2D:8E
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 019A515110F3EF2C68474E9FB66ED5A9D364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
Manifest number: 141F
Signing time: Wed 05 Nov 2025 00:00:58 +0000
Manifest this update: Wed 05 Nov 2025 00:00:58 +0000
Manifest next update: Thu 06 Nov 2025 00:00:58 +0000
Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: yQnz2ONX+ZEMDhhIo0kZWuQWg9UCV3GkKD5vz9CoMPI=)
2: OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa (hash: kiBoCvjRCAtFXqkYo08aOVgrjaQ8F+gLoLWUXi6kvM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:10:f3:ef:2c:68:47:4e:9f:b6:6e:d5:a9:d3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Nov 5 00:00:58 2025 GMT
Not After : Nov 6 00:00:58 2025 GMT
Subject: CN=f3fa69ce8ed9fcd6b9387407797d99e7e5b82d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:99:0e:37:e2:8e:62:3a:c8:a5:e6:de:ca:
b0:09:18:3f:4c:5e:24:42:f8:1a:fa:20:02:e8:29:
b5:9d:3c:54:53:07:3b:ba:63:dd:20:d8:ac:71:2d:
fc:2d:79:6d:ed:c0:4c:9e:2c:61:2b:57:b5:ab:27:
7b:7c:01:6a:95:8c:4b:60:0b:39:76:40:00:59:cc:
9a:08:8b:f0:c2:c1:c6:a3:cc:e8:5c:f5:70:c4:08:
f0:cc:c7:31:43:a0:31:07:a8:51:a9:b0:50:20:e6:
13:13:b6:11:92:c3:fe:82:58:23:72:1d:39:e5:92:
32:f1:ef:b4:da:8d:46:2b:c2:d4:c4:73:81:b6:54:
c1:29:7d:99:e4:2a:65:29:d6:3e:21:78:63:fb:49:
8f:44:28:96:62:f7:0a:6f:58:0b:d1:02:3b:1c:0d:
8b:33:36:dc:2b:2c:64:e2:b3:5e:b7:32:4b:9e:2c:
26:7e:42:eb:96:c6:c8:0b:a8:37:a1:fe:80:3e:71:
ab:6b:2e:db:08:20:6c:aa:52:74:c7:94:b1:d0:f8:
84:ba:8b:fd:11:c8:dc:bc:a8:ab:0d:93:56:55:57:
63:d2:50:02:92:90:ec:b1:5a:37:4c:a8:10:af:41:
d3:b0:d6:e5:d1:73:f0:94:6f:e3:33:b0:cc:3f:37:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FA:69:CE:8E:D9:FC:D6:B9:38:74:07:79:7D:99:E7:E5:B8:2D:8E
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:bc:84:fc:82:47:4f:09:b0:a4:1f:bf:be:45:58:ec:98:c4:
cd:6a:dd:5e:a4:ca:cb:87:22:d2:9a:dc:cf:f3:8d:69:84:91:
95:68:a3:da:05:cb:78:11:aa:11:ee:16:29:77:8a:7f:c0:39:
7b:34:fa:81:17:5b:f9:6d:c1:18:60:66:d7:c4:ec:6e:2e:e4:
38:f4:05:67:51:8b:d9:94:0e:ab:bd:39:6a:e6:ef:7d:c3:78:
03:fc:b8:28:c4:54:ff:0c:bb:46:b1:40:21:30:ff:0e:3b:58:
79:9f:63:f2:7a:f5:49:ab:fc:fb:5c:46:02:1b:b0:2e:1d:2a:
0a:80:2c:e7:00:82:30:2f:98:c9:8c:b9:c3:8d:18:02:eb:eb:
ef:b8:7b:8c:07:57:5a:5a:86:e0:46:ec:fb:c4:04:73:b7:aa:
48:18:b2:5b:a6:26:b4:7c:03:6d:8b:5e:16:9e:32:d4:1b:1a:
f7:e6:fe:83:b8:ce:5a:76:78:ba:37:ff:ca:8e:8e:0f:1c:9c:
50:72:d3:51:08:a9:12:a0:b9:20:ed:4c:49:4d:3a:a5:88:f9:
e0:12:0f:68:18:71:b2:8b:df:43:19:0d:b1:65:7a:2a:ef:d2:
e8:30:ec:21:cc:2e:f2:77:a4:f1:4f:68:0c:12:b6:23:1a:c4:
ed:e3:e2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:06:07 2025 by rpki-client