Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: ciQArKrRPGzkh55OVy2ujEPZUF6+i785QXM45FYdhiA=
Subject key identifier: 64:13:28:F2:94:6F:D1:24:F5:1F:3F:A8:A5:B8:89:B8:2D:9A:41:FB
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 019A4EF583C629809CAEDB4FDD4714AAD8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 13:01:43 +0000
Manifest this update: Tue 04 Nov 2025 13:01:43 +0000
Manifest next update: Wed 05 Nov 2025 13:01:43 +0000
Files and hashes: 1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: R9IkyF+Y3vuA6Bqbu8Y9UMhQekRlTXlGrkCfr7fxsWs=)
2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=)
3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:83:c6:29:80:9c:ae:db:4f:dd:47:14:aa:d8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Nov 4 13:01:43 2025 GMT
Not After : Nov 5 13:01:43 2025 GMT
Subject: CN=641328f2946fd124f51f3fa8a5b889b82d9a41fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:36:06:ae:f2:bb:8a:92:36:7c:2a:7c:3f:
6d:0a:1d:43:f2:c8:9e:af:e5:18:f8:cc:1f:3c:57:
ad:97:68:95:70:f2:b3:47:1b:39:af:11:d7:e4:5d:
5b:8d:e5:76:bb:53:2f:bf:87:d9:9f:c7:c7:e6:80:
c0:fc:cf:db:93:d0:e7:8c:5e:9a:76:61:53:8a:6e:
3c:39:d1:6a:44:bb:49:a6:33:8b:28:25:05:bc:a6:
ad:b9:07:81:88:aa:43:5e:da:df:69:97:4d:10:da:
a8:97:ce:e6:57:6b:78:8e:ae:0b:20:3a:b4:da:0c:
7e:db:eb:fd:9c:74:87:5f:21:0f:15:65:db:a8:c6:
1e:7e:34:83:24:c2:95:65:28:af:55:5b:45:41:fb:
42:91:a0:19:38:36:80:c2:65:d8:82:29:24:2b:6b:
01:7d:eb:5e:ed:30:fc:d7:4b:f3:61:08:b6:38:08:
51:88:33:f5:ab:38:c6:8c:8f:25:e5:3d:e4:53:b8:
97:e8:95:88:96:ba:d3:34:7c:e4:96:cb:af:f6:6b:
ba:c2:4e:88:bc:be:e8:01:6f:01:b0:91:c0:b8:83:
28:80:8b:48:cc:cf:5d:bc:02:1b:7a:55:51:91:68:
0d:25:b6:c8:3c:32:56:aa:ab:7a:f2:40:d2:3b:72:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:13:28:F2:94:6F:D1:24:F5:1F:3F:A8:A5:B8:89:B8:2D:9A:41:FB
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:94:d1:45:f3:58:90:c8:d4:5b:92:b5:d2:7a:81:22:a8:e1:
dc:0f:de:82:78:77:84:5b:46:2a:3e:ec:c6:94:60:b5:dd:d5:
b1:a7:58:70:7b:9c:6a:e0:6b:2c:65:e1:99:6c:17:f8:c9:2b:
44:75:ad:47:13:65:37:8f:fc:d0:6f:d3:9c:d6:4f:04:18:e8:
b2:3d:c7:70:39:5a:b4:f6:2e:f3:e3:8d:d6:88:27:13:5b:4f:
29:68:1e:c3:d5:7e:11:2b:08:3f:7c:7c:03:3e:cb:e1:a9:de:
87:84:4c:9f:c2:24:aa:85:93:9f:29:6d:64:21:9c:28:e8:58:
1c:f7:97:3d:6d:68:53:6b:35:89:71:68:67:33:9b:10:87:5e:
ee:cf:3b:ce:97:bc:aa:67:7d:eb:ce:17:6f:aa:66:18:23:df:
f1:38:3d:c4:b0:2d:20:4d:30:31:03:a1:ea:7c:53:bb:72:79:
16:9d:fc:53:d4:c5:c6:b7:ef:4c:a0:06:14:a6:d5:93:b7:fa:
48:3f:24:ac:93:eb:89:57:ff:45:98:bf:e5:5c:6d:13:d2:80:
78:b3:8b:7e:18:de:59:38:11:fe:8b:8a:ca:0d:84:7b:38:fa:
47:33:81:13:58:fa:e0:9a:04:d9:14:fa:46:7c:bf:fe:36:10:
d8:68:74:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:12 2025 by rpki-client